level=info msg="Memory available for map entries (0.003% of 67421634560B): 168554086B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.020652ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="62.252µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.091715ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="5.27µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=96.151975ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="13.75µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="19.73µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="80.042µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="82.872µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="74.082µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="433.981µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.69µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=429.491029ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.837732ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="38.861µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="70.662µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="221.965µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="386.95µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="70.972µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=61.86408ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="87.802µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="11.95µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.01µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.22.0.0/16 level=warning msg="github.com/cilium/cilium/pkg/k8s/resource/resource.go:305: failed to list *v2.CiliumNode: the server could not find the requested resource (get ciliumnodes.cilium.io)" subsys=klog level=error msg=k8sError error="github.com/cilium/cilium/pkg/k8s/resource/resource.go:305: Failed to watch *v2.CiliumNode: failed to list *v2.CiliumNode: the server could not find the requested resource (get ciliumnodes.cilium.io)" subsys=k8s level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=1.604317072s function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="12.571µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.629994ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="6.03µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.84496ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.26µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.75µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="3.071µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.73µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.321µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="22.631µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="14.801µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="27.74µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="263.186µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.771µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="263.686µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration=2.046445ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.139996ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.71µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="8.88µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.22 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.22 ipAddr.ipv6="" k8sNodeIP=199.204.45.22 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.22" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.145" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.22" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.22} {CiliumInternalIP 10.0.0.145}] 10.0.0.0/24 [] [] 10.0.0.253 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:40657" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.522840817s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="16.261µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="13.591µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="134.293µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="17.26µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=5.70729173s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.49 2f1d9f7a-7cd7-4900-aa03-b2165ea1ef84 default }" containerID=fdf6e6f2f8a3cd38cf792c035862868af835d6e05549f6bd4713336d68b6101c datapathConfiguration="&{false false false false false }" interface=lxce7c08d975352 k8sPodName=kube-system/coredns-7c96b6546b-bnqbw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fdf6e6f2f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2145 ipv4=10.0.0.49 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bnqbw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fdf6e6f2f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2145 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.49 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bnqbw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.116 a31d29d7-43b2-4a87-bbe8-2d6ca0152fed default }" containerID=cf6a4d7fb2575317126a690d72bd2e180d10742f31891e25e15953d14a3bfd6c datapathConfiguration="&{false false false false false }" interface=lxc5fee686387d2 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5xhfz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf6a4d7fb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 ipv4=10.0.0.116 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5xhfz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf6a4d7fb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=3a8e535f-5a62-4571-b991-d08583f91b85,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=3a8e535f-5a62-4571-b991-d08583f91b85,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.116 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5xhfz subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fdf6e6f2f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2145 identity=10125 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.49 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bnqbw oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fdf6e6f2f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2145 identity=10125 ipv4=10.0.0.49 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bnqbw subsys=endpoint level=info msg="Invalid state transition skipped" containerID=cf6a4d7fb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.116 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5xhfz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=3a8e535f-5a62-4571-b991-d08583f91b85;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=3a8e535f-5a62-4571-b991-d08583f91b85;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cf6a4d7fb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 identity=18353 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=3a8e535f-5a62-4571-b991-d08583f91b85,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=3a8e535f-5a62-4571-b991-d08583f91b85,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.116 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5xhfz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cf6a4d7fb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 identity=18353 ipv4=10.0.0.116 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5xhfz subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=323.154108ms file-path=/var/run/cilium/state/templates/dc44c0f2ed96f6aa0d7c4f5d88e7fca67c0053f5ee49d05fe8369c58ed848443/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=454 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2964 ipv4=10.0.0.253 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2964 identityLabels="reserved:health" ipv4=10.0.0.253 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2964 identity=4 identityLabels="reserved:health" ipv4=10.0.0.253 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.125009651s file-path=/var/run/cilium/state/templates/9573c74948291c30efbd330cb0d4261702e6d38cf63523f1c2ecb20bc5d16d6d/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2964 identity=4 ipv4=10.0.0.253 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fdf6e6f2f8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2145 identity=10125 ipv4=10.0.0.49 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bnqbw subsys=endpoint level=info msg="Successful endpoint creation" containerID=fdf6e6f2f8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2145 identity=10125 ipv4=10.0.0.49 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bnqbw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cf6a4d7fb2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=419 identity=18353 ipv4=10.0.0.116 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5xhfz subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf6a4d7fb2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=419 identity=18353 ipv4=10.0.0.116 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5xhfz subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cf6a4d7fb2 endpointID=419 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-5xhfz subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=3a8e535f-5a62-4571-b991-d08583f91b85 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=3a8e535f-5a62-4571-b991-d08583f91b85 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=cf6a4d7fb2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=419 identity=18353 ipv4=10.0.0.116 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5xhfz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 c8baed9a-a39a-4c1a-834a-a6972f9e87b1 default }" containerID=484f3ac5704012577febb6c4bfda3b750e8642e10f77d7c773bab8b8f64d9100 datapathConfiguration="&{false false false false false }" interface=lxc02b1968396ca k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-csnnt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=484f3ac570 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=510 ipv4=10.0.0.58 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-csnnt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=484f3ac570 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=510 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.58 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-csnnt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=484f3ac570 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=510 identity=30788 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.58 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-csnnt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=484f3ac570 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=510 identity=30788 ipv4=10.0.0.58 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-csnnt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=484f3ac570 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=510 identity=30788 ipv4=10.0.0.58 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-csnnt subsys=endpoint level=info msg="Successful endpoint creation" containerID=484f3ac570 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=510 identity=30788 ipv4=10.0.0.58 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-csnnt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=454 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00454 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00454 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00454 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00454:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=454 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 45647f3a-dfb6-4ca5-a1c9-d6cdb5d72ec6 default }" containerID=99f541085e4ed655db68225b87351ccf3dea510bed4cd257268c33f706f6923e datapathConfiguration="&{false false false false false }" interface=lxcadecdf627bca k8sPodName=kube-system/coredns-67659f764b-wpj4c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=99f541085e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2298 ipv4=10.0.0.44 ipv6= k8sPodName=kube-system/coredns-67659f764b-wpj4c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=99f541085e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2298 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.44 ipv6= k8sPodName=kube-system/coredns-67659f764b-wpj4c subsys=endpoint level=info msg="Identity of endpoint changed" containerID=99f541085e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2298 identity=10125 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.44 ipv6= k8sPodName=kube-system/coredns-67659f764b-wpj4c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=99f541085e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2298 identity=10125 ipv4=10.0.0.44 ipv6= k8sPodName=kube-system/coredns-67659f764b-wpj4c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=99f541085e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2298 identity=10125 ipv4=10.0.0.44 ipv6= k8sPodName=kube-system/coredns-67659f764b-wpj4c subsys=endpoint level=info msg="Successful endpoint creation" containerID=99f541085e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2298 identity=10125 ipv4=10.0.0.44 ipv6= k8sPodName=kube-system/coredns-67659f764b-wpj4c subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.204 241f9ae5-1311-4fcc-bd46-68de846414f0 default }" containerID=b0eaeb79ba9645f10df734eb0df035efed279062b93a995aa6b92be6d1f34b75 datapathConfiguration="&{false false false false false }" interface=lxcf24d42410950 k8sPodName=kube-system/coredns-67659f764b-w886k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0eaeb79ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-67659f764b-w886k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0eaeb79ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-67659f764b-w886k subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b0eaeb79ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=10125 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-67659f764b-w886k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b0eaeb79ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=10125 ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-67659f764b-w886k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b0eaeb79ba datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=52 identity=10125 ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-67659f764b-w886k subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0eaeb79ba datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=52 identity=10125 ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-67659f764b-w886k subsys=daemon level=info msg="Delete endpoint request" containerID=fdf6e6f2f8 endpointID=2145 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-bnqbw subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=fdf6e6f2f8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2145 identity=10125 ipv4=10.0.0.49 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bnqbw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.86 d55ea6e3-daa4-455b-96b7-3958b62601b5 default }" containerID=e2aaeeb1d805b442c48405da7a52a9afe1fd9e4b6d3e457f0155833b3e506808 datapathConfiguration="&{false false false false false }" interface=lxcae074375488f k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dgj7s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e2aaeeb1d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1824 ipv4=10.0.0.86 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dgj7s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e2aaeeb1d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1824 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.86 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dgj7s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e2aaeeb1d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1824 identity=13933 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.86 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dgj7s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e2aaeeb1d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1824 identity=13933 ipv4=10.0.0.86 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dgj7s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e2aaeeb1d8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1824 identity=13933 ipv4=10.0.0.86 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dgj7s subsys=endpoint level=info msg="Successful endpoint creation" containerID=e2aaeeb1d8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1824 identity=13933 ipv4=10.0.0.86 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dgj7s subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.10 fe62423e-2e8d-4043-a1ab-82bbf6f72eea default }" containerID=b91ba3316b69b57e2dc016a9414080f95ed7dd927f6bdb77091ee0481f8dabbf datapathConfiguration="&{false false false false false }" interface=lxc73d37439fcbe k8sPodName=openstack/memcached-memcached-cf56b6468-x2pr2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b91ba3316b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3910 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-x2pr2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b91ba3316b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3910 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-x2pr2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b91ba3316b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3910 identity=8175 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-x2pr2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b91ba3316b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3910 identity=8175 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-x2pr2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b91ba3316b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3910 identity=8175 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-x2pr2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b91ba3316b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3910 identity=8175 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-x2pr2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.50 31961d53-33ea-4cae-bcd7-ca9a5f425d74 default }" containerID=1fb50c2ba06284c024a285e77bed5f04b94d4e647d14621eb78faa80513227aa datapathConfiguration="&{false false false false false }" interface=lxc33b32a7e8509 k8sPodName=ingress-nginx/ingress-nginx-admission-create-hmd6k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1fb50c2ba0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3191 ipv4=10.0.0.50 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-hmd6k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1fb50c2ba0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3191 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=3d15c93a-21e5-42c1-be7b-4b455550c9de,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=3d15c93a-21e5-42c1-be7b-4b455550c9de,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.50 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-hmd6k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=3d15c93a-21e5-42c1-be7b-4b455550c9de;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=3d15c93a-21e5-42c1-be7b-4b455550c9de;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1fb50c2ba0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3191 identity=23262 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=3d15c93a-21e5-42c1-be7b-4b455550c9de,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=3d15c93a-21e5-42c1-be7b-4b455550c9de,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.50 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-hmd6k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1fb50c2ba0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3191 identity=23262 ipv4=10.0.0.50 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-hmd6k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1fb50c2ba0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3191 identity=23262 ipv4=10.0.0.50 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-hmd6k subsys=endpoint level=info msg="Successful endpoint creation" containerID=1fb50c2ba0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3191 identity=23262 ipv4=10.0.0.50 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-hmd6k subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.133 7a00117b-24d3-45cb-b335-d35207f35a5d default }" containerID=f55ec830eb7afb7e9e2247cecd69e306e9d807f3ef4c7baaf2a6a636617d4c14 datapathConfiguration="&{false false false false false }" interface=lxc23073c76febb k8sPodName=cert-manager/cert-manager-webhook-548949fc64-n6bjx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f55ec830eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4048 ipv4=10.0.0.133 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-n6bjx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f55ec830eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4048 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.133 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-n6bjx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f55ec830eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4048 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.133 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-n6bjx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f55ec830eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4048 identity=5625 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.133 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-n6bjx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f55ec830eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4048 identity=5625 ipv4=10.0.0.133 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-n6bjx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f55ec830eb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4048 identity=5625 ipv4=10.0.0.133 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-n6bjx subsys=endpoint level=info msg="Successful endpoint creation" containerID=f55ec830eb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4048 identity=5625 ipv4=10.0.0.133 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-n6bjx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.172 6e4a8dba-c4a6-4369-8187-75feec16503b default }" containerID=c3265ab35310791c585189d0114e5e387e3b4c84ae034738daad9c2fca1f69d9 datapathConfiguration="&{false false false false false }" interface=lxcf7edcbb929e2 k8sPodName=cert-manager/cert-manager-75c4c745bc-bf5m2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c3265ab353 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1144 ipv4=10.0.0.172 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bf5m2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c3265ab353 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1144 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.172 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bf5m2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c3265ab353 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1144 identity=6786 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.172 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bf5m2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c3265ab353 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1144 identity=6786 ipv4=10.0.0.172 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bf5m2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 3743c558-3c39-4266-9620-06eb99e7f739 default }" containerID=4e55baf5868facfcefcb5ea7ded4fbcf5151c84d571e69c1cd443d1192f8f300 datapathConfiguration="&{false false false false false }" interface=lxc5de4e9de032b k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-dphht labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e55baf586 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=300 ipv4=10.0.0.8 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-dphht subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e55baf586 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=300 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.8 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-dphht subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e55baf586 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=300 identity=47354 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.8 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-dphht oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e55baf586 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=300 identity=47354 ipv4=10.0.0.8 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-dphht subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 a9e23add-3320-4658-825e-e43ef91b736d default }" containerID=76df9b94acfbd81ada9db962b9fc41be8ab8bf9c58c18489c9330307404e33b7 datapathConfiguration="&{false false false false false }" interface=lxc5fb14bc1b5f7 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pfs8w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76df9b94ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2975 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pfs8w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76df9b94ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2975 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pfs8w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76df9b94ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2975 identity=15921 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pfs8w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76df9b94ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2975 identity=15921 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pfs8w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c3265ab353 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1144 identity=6786 ipv4=10.0.0.172 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bf5m2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3265ab353 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1144 identity=6786 ipv4=10.0.0.172 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bf5m2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4e55baf586 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=300 identity=47354 ipv4=10.0.0.8 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-dphht subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e55baf586 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=300 identity=47354 ipv4=10.0.0.8 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-dphht subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=76df9b94ac datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2975 identity=15921 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pfs8w subsys=endpoint level=info msg="Successful endpoint creation" containerID=76df9b94ac datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2975 identity=15921 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pfs8w subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.239 bf4a1bc6-1bdc-436f-9337-5375a4df1cae default }" containerID=5c7b6d905563fd45d9db8cd4170c15c207f662c7ced1cd69637451f076adf502 datapathConfiguration="&{false false false false false }" interface=lxc9ddad7a03a48 k8sPodName=monitoring/node-feature-discovery-worker-h7kf8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c7b6d9055 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-h7kf8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c7b6d9055 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-h7kf8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.240 7ba74341-dced-4c50-af26-72ed3e3638bb default }" containerID=0f00e081b14bc88e6bd166559a9ba5d0b69802b762cf10142bf490c10e1e9888 datapathConfiguration="&{false false false false false }" interface=lxcfa036d530099 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-f2jms labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f00e081b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=834 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-f2jms subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f00e081b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=834 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-f2jms subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5c7b6d9055 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 identity=2267 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-h7kf8 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=5c7b6d9055 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 identity=2267 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-h7kf8 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f00e081b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=834 identity=10876 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-f2jms oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f00e081b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=834 identity=10876 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-f2jms subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5c7b6d9055 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=665 identity=2267 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-h7kf8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c7b6d9055 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=665 identity=2267 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-h7kf8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0f00e081b1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=834 identity=10876 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-f2jms subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f00e081b1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=834 identity=10876 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-f2jms subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.60 c5982086-651c-41a8-a8d8-53b9d2bab209 default }" containerID=423fe475982432c66bd6b779bfed00b6d9bb0e3c10b78d78bb0b897b73d38141 datapathConfiguration="&{false false false false false }" interface=lxc943caeaa89be k8sPodName=cert-manager/cert-manager-startupapicheck-hzxzv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=423fe47598 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1123 ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-hzxzv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=423fe47598 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1123 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=6ab5bb66-bb2c-483e-ab22-9b2db81b3ab9,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=6ab5bb66-bb2c-483e-ab22-9b2db81b3ab9,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-hzxzv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=423fe47598 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1123 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-hzxzv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=6ab5bb66-bb2c-483e-ab22-9b2db81b3ab9;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=6ab5bb66-bb2c-483e-ab22-9b2db81b3ab9;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=423fe47598 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1123 identity=49886 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=6ab5bb66-bb2c-483e-ab22-9b2db81b3ab9,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=6ab5bb66-bb2c-483e-ab22-9b2db81b3ab9,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-hzxzv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=423fe47598 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1123 identity=49886 ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-hzxzv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=423fe47598 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1123 identity=49886 ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-hzxzv subsys=endpoint level=info msg="Successful endpoint creation" containerID=423fe47598 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1123 identity=49886 ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-hzxzv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.48 5c884834-e978-4bc8-b43a-8057608a1c9f default }" containerID=b8ef0cfc5787214263916cfd7cb48281c99f0955a98c2d559705bf128ec82527 datapathConfiguration="&{false false false false false }" interface=lxcfa3e7048d166 k8sPodName=openstack/ovn-northd-7659bd74f8-qdfsg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8ef0cfc57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2330 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/ovn-northd-7659bd74f8-qdfsg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8ef0cfc57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2330 identityLabels="k8s:application=ovn,k8s:component=ovn-northd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ovn-northd,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=ovn" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/ovn-northd-7659bd74f8-qdfsg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=ovn;k8s:component=ovn-northd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ovn-northd;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=ovn;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8ef0cfc57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2330 identity=32864 identityLabels="k8s:application=ovn,k8s:component=ovn-northd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ovn-northd,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=ovn" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/ovn-northd-7659bd74f8-qdfsg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b8ef0cfc57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2330 identity=32864 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/ovn-northd-7659bd74f8-qdfsg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b8ef0cfc57 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2330 identity=32864 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/ovn-northd-7659bd74f8-qdfsg subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8ef0cfc57 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2330 identity=32864 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/ovn-northd-7659bd74f8-qdfsg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1fb50c2ba0 endpointID=3191 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-hmd6k subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=3d15c93a-21e5-42c1-be7b-4b455550c9de k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=3d15c93a-21e5-42c1-be7b-4b455550c9de k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=1fb50c2ba0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3191 identity=23262 ipv4=10.0.0.50 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-hmd6k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 ddf26598-1001-4be6-841f-1eec6f773707 default }" containerID=5c218c431094279f89e732f381a601dbedc967f2a52b6f085eee6310947691f0 datapathConfiguration="&{false false false false false }" interface=lxc4a59407c9037 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-58jzx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c218c4310 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-58jzx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c218c4310 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-58jzx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5c218c4310 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-58jzx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5c218c4310 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 identity=10242 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-58jzx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c218c4310 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 identity=10242 ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-58jzx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5c218c4310 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=397 identity=10242 ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-58jzx subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c218c4310 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=397 identity=10242 ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-58jzx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.176 a3de06d0-8e6a-4ccf-a26f-c7835cb17991 default }" containerID=355b8438871fb42fc826ce210221db5ce4ff0e7ceeacb1611cc4b11303576956 datapathConfiguration="&{false false false false false }" interface=lxc34f43a090f78 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-k5mm4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=355b843887 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2789 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-k5mm4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=355b843887 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2789 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=f956ca2d-11a5-4895-a5ed-24ccdb70013e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=f956ca2d-11a5-4895-a5ed-24ccdb70013e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-k5mm4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=f956ca2d-11a5-4895-a5ed-24ccdb70013e;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=f956ca2d-11a5-4895-a5ed-24ccdb70013e;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=355b843887 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2789 identity=21803 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=f956ca2d-11a5-4895-a5ed-24ccdb70013e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=f956ca2d-11a5-4895-a5ed-24ccdb70013e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-k5mm4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=355b843887 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2789 identity=21803 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-k5mm4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=355b843887 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2789 identity=21803 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-k5mm4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=355b843887 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2789 identity=21803 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-k5mm4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=355b843887 endpointID=2789 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-k5mm4 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=f956ca2d-11a5-4895-a5ed-24ccdb70013e k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=f956ca2d-11a5-4895-a5ed-24ccdb70013e k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=355b843887 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2789 identity=21803 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-k5mm4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=454 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00454 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00454 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00454 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00454:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=454 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Delete endpoint request" containerID=423fe47598 endpointID=1123 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-hzxzv subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=6ab5bb66-bb2c-483e-ab22-9b2db81b3ab9 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=6ab5bb66-bb2c-483e-ab22-9b2db81b3ab9 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=423fe47598 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1123 identity=49886 ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-hzxzv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.63 b0704b43-b996-410e-9cb1-62b344046eac default }" containerID=dd4d11ac8bef3ca12c9c6f55c79934bddb0205f548e12a878e89f880bc51c004 datapathConfiguration="&{false false false false false }" interface=lxcd526663e0b4a k8sPodName=openstack/pxc-operator-69cb5bbdb9-hnwg6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd4d11ac8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=492 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-hnwg6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd4d11ac8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=492 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-hnwg6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd4d11ac8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=492 identity=6365 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-hnwg6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dd4d11ac8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=492 identity=6365 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-hnwg6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=dd4d11ac8b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=492 identity=6365 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-hnwg6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd4d11ac8b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=492 identity=6365 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-hnwg6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=b1dffd8d-5b46-4825-b795-364785871136] Description:}]" policyAddRequest=630e1270-8b2c-4aa1-b3d9-aade13e4b3ce subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=630e1270-8b2c-4aa1-b3d9-aade13e4b3ce policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=c3eebd1f-7bd2-4e13-8de5-8e9baaff450d] Description:}]" policyAddRequest=ee2dc496-c586-49c2-b877-10de1768afda subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=ee2dc496-c586-49c2-b877-10de1768afda policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.161 cc9a80fa-a773-49f0-851d-f5b28b349c86 default }" containerID=c779eaf80c9a8009b9e527441f4cf5d7267457f2b3d8dcbd24103de3e9ea528d datapathConfiguration="&{false false false false false }" interface=lxc73e850d27d98 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-zwhbg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c779eaf80c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=275 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-zwhbg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c779eaf80c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=275 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-zwhbg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c779eaf80c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=275 identity=6578 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-zwhbg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c779eaf80c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=275 identity=6578 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-zwhbg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c779eaf80c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=275 identity=6578 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-zwhbg subsys=endpoint level=info msg="Successful endpoint creation" containerID=c779eaf80c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=275 identity=6578 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-zwhbg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.208 44c2e4b2-ebac-4181-adc1-50c6328806b7 default }" containerID=d36d7be7af46fecfaed15de40f9ac197f75f621618ae813fd9638a57ba9cec4a datapathConfiguration="&{false false false false false }" interface=lxc9e2eb44f105c k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hgczc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d36d7be7af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hgczc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d36d7be7af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hgczc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d36d7be7af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 identity=23330 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hgczc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d36d7be7af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 identity=23330 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hgczc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d36d7be7af datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2742 identity=23330 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hgczc subsys=endpoint level=info msg="Successful endpoint creation" containerID=d36d7be7af datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2742 identity=23330 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hgczc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.00047851177764589114 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.126 86c893fb-9a26-414a-b2b2-2d9f678d467d default }" containerID=c3643f8fab972f49e6fa620e39195d840254966168c19c3c8f1893de1dfdf608 datapathConfiguration="&{false false false false false }" interface=lxcb4df9725e540 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-22trc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c3643f8fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 ipv4=10.0.0.126 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-22trc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c3643f8fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.126 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-22trc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c3643f8fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 identity=23220 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.126 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-22trc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c3643f8fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 identity=23220 ipv4=10.0.0.126 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-22trc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c3643f8fab datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=84 identity=23220 ipv4=10.0.0.126 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-22trc subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3643f8fab datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=84 identity=23220 ipv4=10.0.0.126 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-22trc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.22 8b1412da-d22c-41ce-b747-441cc523b13e default }" containerID=c5ec1bcf044100a1e299c68a0d024626b8e6774d8e79e8b4d9d6748adbdb091e datapathConfiguration="&{false false false false false }" interface=lxc6bfaf29fee27 k8sPodName=local-path-storage/helper-pod-create-pvc-1b393ed3-13ee-4391-8ac8-90e601ff0ab1 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.93 945514e8-f0cf-4a73-b23b-3cdb233ff356 default }" containerID=50440cd91f911f29ecd72c80329018dcf9ecbf4784494427d28e2fa205e50e7d datapathConfiguration="&{false false false false false }" interface=lxc341a644adbc1 k8sPodName=local-path-storage/helper-pod-create-pvc-3de244a6-026a-4ac3-a9f4-46559ebadf1e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c5ec1bcf04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2203 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1b393ed3-13ee-4391-8ac8-90e601ff0ab1 subsys=endpoint level=info msg="New endpoint" containerID=50440cd91f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=429 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3de244a6-026a-4ac3-a9f4-46559ebadf1e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c5ec1bcf04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2203 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1b393ed3-13ee-4391-8ac8-90e601ff0ab1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=50440cd91f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=429 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3de244a6-026a-4ac3-a9f4-46559ebadf1e subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c5ec1bcf04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2203 identity=7112 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1b393ed3-13ee-4391-8ac8-90e601ff0ab1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c5ec1bcf04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2203 identity=7112 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1b393ed3-13ee-4391-8ac8-90e601ff0ab1 subsys=endpoint level=warning msg="Unable update CRD identity information with a reference for this node" error="identity (id:\"7112\",key:\"[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]\") does not exist" identity=7112 labels="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=crd-allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=50440cd91f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=429 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3de244a6-026a-4ac3-a9f4-46559ebadf1e line=611 subsys=endpoint level=warning msg="Key allocation attempt failed" attempt=0 error="unable to re-create missing master key '[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]': 7112 while allocating ID: Unable recreate missing CRD identity \"[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]\"->\"7112\": ciliumidentities.cilium.io \"7112\" already exists" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Identity of endpoint changed" containerID=50440cd91f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=429 identity=7112 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3de244a6-026a-4ac3-a9f4-46559ebadf1e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=50440cd91f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=429 identity=7112 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3de244a6-026a-4ac3-a9f4-46559ebadf1e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c5ec1bcf04 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2203 identity=7112 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1b393ed3-13ee-4391-8ac8-90e601ff0ab1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c5ec1bcf04 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2203 identity=7112 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1b393ed3-13ee-4391-8ac8-90e601ff0ab1 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=50440cd91f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=429 identity=7112 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3de244a6-026a-4ac3-a9f4-46559ebadf1e subsys=endpoint level=info msg="Successful endpoint creation" containerID=50440cd91f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=429 identity=7112 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3de244a6-026a-4ac3-a9f4-46559ebadf1e subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=50440cd91f endpointID=429 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3de244a6-026a-4ac3-a9f4-46559ebadf1e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=50440cd91f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=429 identity=7112 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3de244a6-026a-4ac3-a9f4-46559ebadf1e subsys=endpoint level=info msg="Delete endpoint request" containerID=c5ec1bcf04 endpointID=2203 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1b393ed3-13ee-4391-8ac8-90e601ff0ab1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c5ec1bcf04 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2203 identity=7112 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1b393ed3-13ee-4391-8ac8-90e601ff0ab1 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=8f844008-dc8d-4080-9069-e1628b413677] Description:}]" policyAddRequest=3af0ee8e-a7a3-4537-9309-60ea16feffa4 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=3af0ee8e-a7a3-4537-9309-60ea16feffa4 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.102 7de1f448-7e4c-448d-a17d-b45c85326ac3 default }" containerID=70d0732e076ddd84a338528bdff84f7c638bf1ab898303f97b5568e2d7d7affe datapathConfiguration="&{false false false false false }" interface=lxcb99fbd961584 k8sPodName=local-path-storage/helper-pod-create-pvc-3435ac59-0c4b-466e-b0b0-a6642572bad5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=70d0732e07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=457 ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3435ac59-0c4b-466e-b0b0-a6642572bad5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=70d0732e07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=457 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3435ac59-0c4b-466e-b0b0-a6642572bad5 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=70d0732e07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=457 identity=7112 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3435ac59-0c4b-466e-b0b0-a6642572bad5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=70d0732e07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=457 identity=7112 ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3435ac59-0c4b-466e-b0b0-a6642572bad5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=70d0732e07 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=457 identity=7112 ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3435ac59-0c4b-466e-b0b0-a6642572bad5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=70d0732e07 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=457 identity=7112 ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3435ac59-0c4b-466e-b0b0-a6642572bad5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.147 0df38f37-86d7-49bd-9a66-7642f68679f0 default }" containerID=ccb186f6cd5e635ecc854f0132c0c6b12a2c4ab9d1e41795c86a43e798e2ced3 datapathConfiguration="&{false false false false false }" interface=lxca04e8dc0a490 k8sPodName=monitoring/loki-gateway-cf54cb88c-dwpzl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ccb186f6cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2109 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dwpzl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ccb186f6cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2109 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dwpzl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ccb186f6cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2109 identity=27356 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dwpzl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ccb186f6cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2109 identity=27356 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dwpzl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 268d54b1-4bd6-406b-8e06-0665968f90e6 default }" containerID=196777b4e21b585068675d0d40baffd9a68cdccb573aa999969a7dad4ca35088 datapathConfiguration="&{false false false false false }" interface=lxcf098f328fbe4 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=196777b4e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=196777b4e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=ccb186f6cd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2109 identity=27356 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dwpzl subsys=endpoint level=info msg="Successful endpoint creation" containerID=ccb186f6cd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2109 identity=27356 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dwpzl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.237 716a71d8-9e31-4f33-899e-96399f0d88a5 default }" containerID=8bea44c21e4975539c8706928b30180a3235c34bda7b363d1b5316a4e925b5c1 datapathConfiguration="&{false false false false false }" interface=lxc9ada205f2df7 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8bea44c21e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1134 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8bea44c21e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1134 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=196777b4e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identity=13014 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=196777b4e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identity=13014 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8bea44c21e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1134 identity=13684 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8bea44c21e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1134 identity=13684 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8bea44c21e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1134 identity=13684 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8bea44c21e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1134 identity=13684 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=196777b4e2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=487 identity=13014 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=196777b4e2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=487 identity=13014 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.206 a43f0256-4bb6-413e-9d61-193106a94d78 default }" containerID=7207e9db390e02ddee5de1bc4905a5ad34f08080dcd181589e613921735c660e datapathConfiguration="&{false false false false false }" interface=lxc2196f97a23a9 k8sPodName=openstack/ovn-ovsdb-sb-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7207e9db39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/ovn-ovsdb-sb-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7207e9db39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 identityLabels="k8s:application=ovn,k8s:apps.kubernetes.io/pod-index=0,k8s:component=ovn-ovsdb-sb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ovn-ovsdb-sb,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=ovn,k8s:statefulset.kubernetes.io/pod-name=ovn-ovsdb-sb-0" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/ovn-ovsdb-sb-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.109 b9cd58f8-c9c6-4060-a736-4be3de585ca4 default }" containerID=71a56aa5d0bac82134d9c4ed7002dbfe628b143b8ecebe5385c4fbc5391aaddb datapathConfiguration="&{false false false false false }" interface=lxcf2b3a1c124e6 k8sPodName=openstack/ovn-ovsdb-nb-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=71a56aa5d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3228 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=71a56aa5d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3228 identityLabels="k8s:application=ovn,k8s:apps.kubernetes.io/pod-index=0,k8s:component=ovn-ovsdb-nb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ovn-ovsdb-nb,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=ovn,k8s:statefulset.kubernetes.io/pod-name=ovn-ovsdb-nb-0" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=ovn;k8s:apps.kubernetes.io/pod-index=0;k8s:component=ovn-ovsdb-sb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ovn-ovsdb-sb;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=ovn;k8s:statefulset.kubernetes.io/pod-name=ovn-ovsdb-sb-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7207e9db39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 identity=22292 identityLabels="k8s:application=ovn,k8s:apps.kubernetes.io/pod-index=0,k8s:component=ovn-ovsdb-sb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ovn-ovsdb-sb,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=ovn,k8s:statefulset.kubernetes.io/pod-name=ovn-ovsdb-sb-0" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/ovn-ovsdb-sb-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7207e9db39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 identity=22292 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/ovn-ovsdb-sb-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=71a56aa5d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3228 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.109 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 line=611 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.219 9c97ba25-e528-4b76-86d3-e88ba914c9d1 default }" containerID=24835369dba2cedf86fb81d0b40b614a99829b1f42f274f49c8eb1fa5a81018e datapathConfiguration="&{false false false false false }" interface=lxcb9763a9d7acb k8sPodName=local-path-storage/helper-pod-create-pvc-c3d3ee22-7e1f-427e-bec4-f96998562372 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=24835369db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2160 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c3d3ee22-7e1f-427e-bec4-f96998562372 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=24835369db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2160 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c3d3ee22-7e1f-427e-bec4-f96998562372 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=24835369db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2160 identity=7112 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c3d3ee22-7e1f-427e-bec4-f96998562372 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=24835369db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2160 identity=7112 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c3d3ee22-7e1f-427e-bec4-f96998562372 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=ovn;k8s:apps.kubernetes.io/pod-index=0;k8s:component=ovn-ovsdb-nb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ovn-ovsdb-nb;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=ovn;k8s:statefulset.kubernetes.io/pod-name=ovn-ovsdb-nb-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=71a56aa5d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3228 identity=14620 identityLabels="k8s:application=ovn,k8s:apps.kubernetes.io/pod-index=0,k8s:component=ovn-ovsdb-nb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ovn-ovsdb-nb,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=ovn,k8s:statefulset.kubernetes.io/pod-name=ovn-ovsdb-nb-0" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=71a56aa5d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3228 identity=14620 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7207e9db39 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=327 identity=22292 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/ovn-ovsdb-sb-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7207e9db39 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=327 identity=22292 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/ovn-ovsdb-sb-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=71a56aa5d0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3228 identity=14620 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=71a56aa5d0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3228 identity=14620 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=24835369db datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2160 identity=7112 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c3d3ee22-7e1f-427e-bec4-f96998562372 subsys=endpoint level=info msg="Successful endpoint creation" containerID=24835369db datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2160 identity=7112 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c3d3ee22-7e1f-427e-bec4-f96998562372 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.137 6fe7180a-868a-4f22-9842-15fe1df7aa5d default }" containerID=7fd4661c3795c9246f4ed29b309322724bdba5e6c46e1861a44a86db8eacc266 datapathConfiguration="&{false false false false false }" interface=lxc68bd38a31700 k8sPodName=local-path-storage/helper-pod-create-pvc-42d0ae5e-f1f0-4cc9-b025-3b20fe66d85b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7fd4661c37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1319 ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42d0ae5e-f1f0-4cc9-b025-3b20fe66d85b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7fd4661c37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1319 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42d0ae5e-f1f0-4cc9-b025-3b20fe66d85b subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7fd4661c37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1319 identity=7112 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42d0ae5e-f1f0-4cc9-b025-3b20fe66d85b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7fd4661c37 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1319 identity=7112 ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42d0ae5e-f1f0-4cc9-b025-3b20fe66d85b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7fd4661c37 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1319 identity=7112 ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42d0ae5e-f1f0-4cc9-b025-3b20fe66d85b subsys=endpoint level=info msg="Successful endpoint creation" containerID=7fd4661c37 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1319 identity=7112 ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42d0ae5e-f1f0-4cc9-b025-3b20fe66d85b subsys=daemon level=info msg="Delete endpoint request" containerID=70d0732e07 endpointID=457 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3435ac59-0c4b-466e-b0b0-a6642572bad5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=70d0732e07 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=457 identity=7112 ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3435ac59-0c4b-466e-b0b0-a6642572bad5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.201 f6510fd6-50ca-4acc-b7ce-3d03acf17d9a default }" containerID=65460193a0905294196f14d6816f1ac71b37a0e4d0ec1c37a418c694f9609ed2 datapathConfiguration="&{false false false false false }" interface=lxcc554420620c3 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65460193a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=552 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65460193a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=552 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=65460193a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=552 identity=52339 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=65460193a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=552 identity=52339 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=65460193a0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=552 identity=52339 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=65460193a0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=552 identity=52339 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=24835369db endpointID=2160 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c3d3ee22-7e1f-427e-bec4-f96998562372 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=7fd4661c37 endpointID=1319 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-42d0ae5e-f1f0-4cc9-b025-3b20fe66d85b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=24835369db datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2160 identity=7112 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c3d3ee22-7e1f-427e-bec4-f96998562372 subsys=endpoint level=info msg="Removed endpoint" containerID=7fd4661c37 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1319 identity=7112 ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42d0ae5e-f1f0-4cc9-b025-3b20fe66d85b subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.99 e5b32f7d-da10-476a-b2e5-f1b29196c944 default }" containerID=cac840189f29b89eda7f7911e25ee02878d84e4cf1231b90eae3b3a68fbb5b42 datapathConfiguration="&{false false false false false }" interface=lxcfbaf523222aa k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cac840189f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1812 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cac840189f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1812 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cac840189f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1812 identity=5086 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cac840189f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1812 identity=5086 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cac840189f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1812 identity=5086 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cac840189f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1812 identity=5086 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.38 52d5e913-c09e-467b-8f4b-46df3035ce63 default }" containerID=823eaee62eea9bbf8afd0206172443c414c04359d5075a6fae098623d27b41c4 datapathConfiguration="&{false false false false false }" interface=lxc83cb7c4fc3cc k8sPodName=monitoring/vector-bkbh6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=823eaee62e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3600 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/vector-bkbh6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=823eaee62e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3600 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/vector-bkbh6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=823eaee62e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3600 identity=505 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/vector-bkbh6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=823eaee62e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3600 identity=505 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/vector-bkbh6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=823eaee62e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3600 identity=505 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/vector-bkbh6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=823eaee62e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3600 identity=505 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/vector-bkbh6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.57 65b48f02-f006-4f09-9a73-398a9b32935a default }" containerID=9240cee10425e249b68998d66859e181f7ce880e52a9b7eeb87a2e1e5475780e datapathConfiguration="&{false false false false false }" interface=lxc281a3b94112b k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9240cee104 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2320 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9240cee104 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2320 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9240cee104 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2320 identity=5778 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9240cee104 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2320 identity=5778 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9240cee104 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2320 identity=5778 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9240cee104 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2320 identity=5778 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.136 9fce6567-41e3-4e34-a8e5-f322e88e7db8 default }" containerID=90d93fba6e2fb00f5cf673b2beb931c0211691df5dee93b3917218270014d712 datapathConfiguration="&{false false false false false }" interface=lxcb743ed73d9f2 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=90d93fba6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=206 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=90d93fba6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=206 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=90d93fba6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=206 identity=8470 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=90d93fba6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=206 identity=8470 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=90d93fba6e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=206 identity=8470 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=90d93fba6e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=206 identity=8470 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=03589a89-d74f-4cb0-ada6-d3a77489535a] Description:}]" policyAddRequest=23d60b17-692e-4bb9-b016-dee70fb14227 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=23d60b17-692e-4bb9-b016-dee70fb14227 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.21 437894ce-389c-4c9d-b916-ef7b2df7fe01 default }" containerID=552ce90981714c6145105dbb2bce74aed841172d5c08c0fa4a86017b740d1722 datapathConfiguration="&{false false false false false }" interface=lxc67a3c65d2875 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=552ce90981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 ipv4=10.0.0.21 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=552ce90981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.21 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=552ce90981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 identity=18166 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.21 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=552ce90981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 identity=18166 ipv4=10.0.0.21 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=552ce90981 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=236 identity=18166 ipv4=10.0.0.21 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=552ce90981 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=236 identity=18166 ipv4=10.0.0.21 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.146 f56cd479-d746-4865-97ae-79773c640005 default }" containerID=6fe962e48fb4f15b1f078eedae90155ebd761914aabaf52e5d55cf5d146eb3e6 datapathConfiguration="&{false false false false false }" interface=lxca59dae77e50d k8sPodName=local-path-storage/helper-pod-create-pvc-59055198-19be-4c15-932e-481101e9847f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6fe962e48f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-59055198-19be-4c15-932e-481101e9847f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6fe962e48f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-59055198-19be-4c15-932e-481101e9847f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6fe962e48f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identity=7112 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-59055198-19be-4c15-932e-481101e9847f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6fe962e48f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identity=7112 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-59055198-19be-4c15-932e-481101e9847f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6fe962e48f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=187 identity=7112 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-59055198-19be-4c15-932e-481101e9847f subsys=endpoint level=info msg="Successful endpoint creation" containerID=6fe962e48f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=187 identity=7112 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-59055198-19be-4c15-932e-481101e9847f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6fe962e48f endpointID=187 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-59055198-19be-4c15-932e-481101e9847f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6fe962e48f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=187 identity=7112 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-59055198-19be-4c15-932e-481101e9847f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.2 72c1243c-6bb5-4783-8206-258dc74d8fd9 default }" containerID=59dd2c76c66c86c987d1940c9980187661a3d9aab40a2b3b56663136d3b68d1f datapathConfiguration="&{false false false false false }" interface=lxc02815e531c4e k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=59dd2c76c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=59dd2c76c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=59dd2c76c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 identity=19953 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=59dd2c76c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 identity=19953 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=59dd2c76c6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1380 identity=19953 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=59dd2c76c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1380 identity=19953 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.181 f8eb11ff-d65d-448e-b3a2-09d00a158df7 default }" containerID=74570c6d675fa363c3c3893f03d0987c5fe399029f4b9796b5b6c9478bcb7a44 datapathConfiguration="&{false false false false false }" interface=lxce78c94609406 k8sPodName=openstack/keystone-credential-setup-mvhr9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74570c6d67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-credential-setup-mvhr9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74570c6d67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fdf24dfd-4e75-4860-9847-06b4e0167438,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=fdf24dfd-4e75-4860-9847-06b4e0167438,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-credential-setup-mvhr9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=74570c6d67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-credential-setup-mvhr9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=fdf24dfd-4e75-4860-9847-06b4e0167438;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=fdf24dfd-4e75-4860-9847-06b4e0167438;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=74570c6d67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 identity=11745 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fdf24dfd-4e75-4860-9847-06b4e0167438,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=fdf24dfd-4e75-4860-9847-06b4e0167438,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-credential-setup-mvhr9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=74570c6d67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 identity=11745 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-credential-setup-mvhr9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=74570c6d67 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=127 identity=11745 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-credential-setup-mvhr9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=74570c6d67 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=127 identity=11745 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-credential-setup-mvhr9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=74570c6d67 endpointID=127 k8sNamespace=openstack k8sPodName=keystone-credential-setup-mvhr9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=fdf24dfd-4e75-4860-9847-06b4e0167438 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=fdf24dfd-4e75-4860-9847-06b4e0167438 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=74570c6d67 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=127 identity=11745 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-credential-setup-mvhr9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 8fac6125-36a2-4763-895a-1c5dfda01b3c default }" containerID=f1856ca13323db6d9d79e5ba609a451755f99423672bd2e390b4753b6d78c1fb datapathConfiguration="&{false false false false false }" interface=lxc3a5c23bec550 k8sPodName=openstack/keystone-db-init-d95s8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f1856ca133 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-db-init-d95s8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f1856ca133 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a45eeabb-7c71-4d8d-90df-875fd5a355ca,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=a45eeabb-7c71-4d8d-90df-875fd5a355ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-db-init-d95s8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a45eeabb-7c71-4d8d-90df-875fd5a355ca;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=a45eeabb-7c71-4d8d-90df-875fd5a355ca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f1856ca133 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 identity=29094 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a45eeabb-7c71-4d8d-90df-875fd5a355ca,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=a45eeabb-7c71-4d8d-90df-875fd5a355ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-db-init-d95s8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f1856ca133 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 identity=29094 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-db-init-d95s8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f1856ca133 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=975 identity=29094 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-db-init-d95s8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f1856ca133 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=975 identity=29094 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-db-init-d95s8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f1856ca133 endpointID=975 k8sNamespace=openstack k8sPodName=keystone-db-init-d95s8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a45eeabb-7c71-4d8d-90df-875fd5a355ca k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=a45eeabb-7c71-4d8d-90df-875fd5a355ca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f1856ca133 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=975 identity=29094 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-db-init-d95s8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 3ec3503a-1b9b-4c26-bfed-6381579db4c9 default }" containerID=228626d7a260b6d8b96473e9ae1b899b91c113096e308de7b1885ad45c2fc5e7 datapathConfiguration="&{false false false false false }" interface=lxc1964921f188e k8sPodName=openstack/keystone-fernet-setup-m7v7c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=228626d7a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=269 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/keystone-fernet-setup-m7v7c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=228626d7a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=269 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8a3d7bd9-8322-4b5a-aa88-483b722e842f,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=8a3d7bd9-8322-4b5a-aa88-483b722e842f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/keystone-fernet-setup-m7v7c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8a3d7bd9-8322-4b5a-aa88-483b722e842f;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=8a3d7bd9-8322-4b5a-aa88-483b722e842f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=228626d7a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=269 identity=10645 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8a3d7bd9-8322-4b5a-aa88-483b722e842f,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=8a3d7bd9-8322-4b5a-aa88-483b722e842f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/keystone-fernet-setup-m7v7c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=228626d7a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=269 identity=10645 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/keystone-fernet-setup-m7v7c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=228626d7a2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=269 identity=10645 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/keystone-fernet-setup-m7v7c subsys=endpoint level=info msg="Successful endpoint creation" containerID=228626d7a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=269 identity=10645 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/keystone-fernet-setup-m7v7c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=228626d7a2 endpointID=269 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-m7v7c subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8a3d7bd9-8322-4b5a-aa88-483b722e842f k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=8a3d7bd9-8322-4b5a-aa88-483b722e842f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=228626d7a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=269 identity=10645 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/keystone-fernet-setup-m7v7c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.55 c9c82f9e-3131-4e50-b27f-143c8b227a5c default }" containerID=922f873ad8f72d2375453f81e086828e5e2156b6a191e7b7254d24ada4097481 datapathConfiguration="&{false false false false false }" interface=lxca6fe9cd9ca7b k8sPodName=openstack/keystone-db-sync-cdk7f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=922f873ad8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2117 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/keystone-db-sync-cdk7f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=922f873ad8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2117 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4a751a15-a2a1-4c8b-8640-7397f95da467,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=4a751a15-a2a1-4c8b-8640-7397f95da467,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/keystone-db-sync-cdk7f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=922f873ad8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2117 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.55 ipv6= k8sPodName=openstack/keystone-db-sync-cdk7f line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4a751a15-a2a1-4c8b-8640-7397f95da467;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=4a751a15-a2a1-4c8b-8640-7397f95da467;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=922f873ad8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2117 identity=30940 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4a751a15-a2a1-4c8b-8640-7397f95da467,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=4a751a15-a2a1-4c8b-8640-7397f95da467,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/keystone-db-sync-cdk7f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=922f873ad8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2117 identity=30940 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/keystone-db-sync-cdk7f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=922f873ad8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2117 identity=30940 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/keystone-db-sync-cdk7f subsys=endpoint level=info msg="Successful endpoint creation" containerID=922f873ad8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2117 identity=30940 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/keystone-db-sync-cdk7f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=922f873ad8 endpointID=2117 k8sNamespace=openstack k8sPodName=keystone-db-sync-cdk7f subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4a751a15-a2a1-4c8b-8640-7397f95da467 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=4a751a15-a2a1-4c8b-8640-7397f95da467 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=922f873ad8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2117 identity=30940 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/keystone-db-sync-cdk7f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.11 9fd01b67-99c5-4b0b-8ef2-9d1593873f11 default }" containerID=1f26aa613cdc1fed8cc1de34c38274202b5184d0078f8860aba43be18ed43d33 datapathConfiguration="&{false false false false false }" interface=lxc4e6e7af39035 k8sPodName=openstack/keystone-rabbit-init-5xfr6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f26aa613c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3449 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-rabbit-init-5xfr6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f26aa613c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3449 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=68bc016d-8f0b-4b79-8db4-4a030d625c9a,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=68bc016d-8f0b-4b79-8db4-4a030d625c9a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-rabbit-init-5xfr6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=68bc016d-8f0b-4b79-8db4-4a030d625c9a;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=68bc016d-8f0b-4b79-8db4-4a030d625c9a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1f26aa613c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3449 identity=33071 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=68bc016d-8f0b-4b79-8db4-4a030d625c9a,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=68bc016d-8f0b-4b79-8db4-4a030d625c9a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-rabbit-init-5xfr6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f26aa613c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3449 identity=33071 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-rabbit-init-5xfr6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1f26aa613c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3449 identity=33071 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-rabbit-init-5xfr6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f26aa613c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3449 identity=33071 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-rabbit-init-5xfr6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1f26aa613c endpointID=3449 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-5xfr6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=68bc016d-8f0b-4b79-8db4-4a030d625c9a k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=68bc016d-8f0b-4b79-8db4-4a030d625c9a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1f26aa613c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3449 identity=33071 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-rabbit-init-5xfr6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 1609fa94-58a6-4649-95a4-6193d9112f69 default }" containerID=24528c0c7cd1ab2e696124950b7864cdfc7dfed340fbbdf40bf0edb86082a507 datapathConfiguration="&{false false false false false }" interface=lxc7d9b6cc51747 k8sPodName=openstack/keystone-domain-manage-ghs6v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=24528c0c7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-domain-manage-ghs6v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=24528c0c7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2c4e6224-a7a8-454f-915f-f37fa11ff628,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=2c4e6224-a7a8-454f-915f-f37fa11ff628,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-domain-manage-ghs6v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2c4e6224-a7a8-454f-915f-f37fa11ff628;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=2c4e6224-a7a8-454f-915f-f37fa11ff628;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=24528c0c7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 identity=20732 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2c4e6224-a7a8-454f-915f-f37fa11ff628,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=2c4e6224-a7a8-454f-915f-f37fa11ff628,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-domain-manage-ghs6v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=24528c0c7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 identity=20732 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-domain-manage-ghs6v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=24528c0c7c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=103 identity=20732 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-domain-manage-ghs6v subsys=endpoint level=info msg="Successful endpoint creation" containerID=24528c0c7c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=103 identity=20732 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-domain-manage-ghs6v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.01869749888403425 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.20 3e8a004c-e9fa-4f02-97d3-b403f5548d10 default }" containerID=22018dcbd69e985ec7b375d686656d0c40cf0236dc4acdd918ed32f1627637a4 datapathConfiguration="&{false false false false false }" interface=lxcdf8063a2b0ee k8sPodName=openstack/keystone-api-74664f9854-f4jjm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=22018dcbd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1640 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-api-74664f9854-f4jjm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=22018dcbd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1640 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-api-74664f9854-f4jjm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=22018dcbd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1640 identity=63530 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-api-74664f9854-f4jjm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=22018dcbd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1640 identity=63530 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-api-74664f9854-f4jjm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=22018dcbd6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1640 identity=63530 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-api-74664f9854-f4jjm subsys=endpoint level=info msg="Successful endpoint creation" containerID=22018dcbd6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1640 identity=63530 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-api-74664f9854-f4jjm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=24528c0c7c endpointID=103 k8sNamespace=openstack k8sPodName=keystone-domain-manage-ghs6v subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2c4e6224-a7a8-454f-915f-f37fa11ff628 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=2c4e6224-a7a8-454f-915f-f37fa11ff628 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=24528c0c7c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=103 identity=20732 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-domain-manage-ghs6v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 f37fc51b-420e-4b6c-b8c4-153552eb4407 default }" containerID=39d241c359fc2057b13a953fd0b5eff72ff66f77e01ea8d794103f2741d3a84c datapathConfiguration="&{false false false false false }" interface=lxc61a81a7ff89a k8sPodName=openstack/keystone-bootstrap-l6fch labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39d241c359 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-bootstrap-l6fch subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39d241c359 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4b16d128-54de-4f18-a290-f96aa722e26c,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=4b16d128-54de-4f18-a290-f96aa722e26c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-bootstrap-l6fch subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=39d241c359 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-bootstrap-l6fch line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4b16d128-54de-4f18-a290-f96aa722e26c;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=4b16d128-54de-4f18-a290-f96aa722e26c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=39d241c359 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identity=45470 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4b16d128-54de-4f18-a290-f96aa722e26c,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=4b16d128-54de-4f18-a290-f96aa722e26c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-bootstrap-l6fch oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=39d241c359 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identity=45470 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-bootstrap-l6fch subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=39d241c359 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1479 identity=45470 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-bootstrap-l6fch subsys=endpoint level=info msg="Successful endpoint creation" containerID=39d241c359 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1479 identity=45470 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-bootstrap-l6fch subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=39d241c359 endpointID=1479 k8sNamespace=openstack k8sPodName=keystone-bootstrap-l6fch subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4b16d128-54de-4f18-a290-f96aa722e26c k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=4b16d128-54de-4f18-a290-f96aa722e26c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=39d241c359 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1479 identity=45470 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-bootstrap-l6fch subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 b2f52ace-ef1f-4f27-9603-15a949064d67 default }" containerID=d062a3aa2c7d8d12c98e38c06ac4587e15715e7d9a90bcc4da4982db09f28b73 datapathConfiguration="&{false false false false false }" interface=lxcd24a94aa69c8 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7989m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d062a3aa2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2357 ipv4=10.0.0.158 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7989m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d062a3aa2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2357 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.158 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7989m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d062a3aa2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2357 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.158 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7989m line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d062a3aa2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2357 identity=47772 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.158 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7989m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d062a3aa2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2357 identity=47772 ipv4=10.0.0.158 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7989m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d062a3aa2c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2357 identity=47772 ipv4=10.0.0.158 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7989m subsys=endpoint level=info msg="Successful endpoint creation" containerID=d062a3aa2c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2357 identity=47772 ipv4=10.0.0.158 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7989m subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.241 0e7c3d13-16d3-4f31-927f-a34bf6f4f97c default }" containerID=c80d09bb8ab15b35b6f72ba2b2b558225d14e53818301bad9f834249178e84f9 datapathConfiguration="&{false false false false false }" interface=lxc9d477e870299 k8sPodName=local-path-storage/helper-pod-create-pvc-9db7202c-802e-4c81-a210-67a8eb6f8df7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c80d09bb8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1245 ipv4=10.0.0.241 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9db7202c-802e-4c81-a210-67a8eb6f8df7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c80d09bb8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1245 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.241 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9db7202c-802e-4c81-a210-67a8eb6f8df7 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c80d09bb8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1245 identity=7112 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.241 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9db7202c-802e-4c81-a210-67a8eb6f8df7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c80d09bb8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1245 identity=7112 ipv4=10.0.0.241 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9db7202c-802e-4c81-a210-67a8eb6f8df7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c80d09bb8a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1245 identity=7112 ipv4=10.0.0.241 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9db7202c-802e-4c81-a210-67a8eb6f8df7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c80d09bb8a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1245 identity=7112 ipv4=10.0.0.241 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9db7202c-802e-4c81-a210-67a8eb6f8df7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.67 6c38d2f9-ddcf-4e34-9d97-d25005e40cfc default }" containerID=1a2eb6258841b908e6d009a75cd25a312640464879326e079a30e3b478c0b4dd datapathConfiguration="&{false false false false false }" interface=lxc5b9bf774c6ea k8sPodName=local-path-storage/helper-pod-create-pvc-9765f9b6-52d5-484a-91ab-6bb735f783b1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1a2eb62588 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3800 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9765f9b6-52d5-484a-91ab-6bb735f783b1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1a2eb62588 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3800 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9765f9b6-52d5-484a-91ab-6bb735f783b1 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1a2eb62588 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3800 identity=7112 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9765f9b6-52d5-484a-91ab-6bb735f783b1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1a2eb62588 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3800 identity=7112 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9765f9b6-52d5-484a-91ab-6bb735f783b1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1a2eb62588 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3800 identity=7112 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9765f9b6-52d5-484a-91ab-6bb735f783b1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1a2eb62588 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3800 identity=7112 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9765f9b6-52d5-484a-91ab-6bb735f783b1 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.52 9d8ecc78-9940-45a9-af80-bd4231367a5e default }" containerID=1fbd2cb16150257378d7269a05f6bbde32c9a0585793cb47abe1b6e35b87d1b9 datapathConfiguration="&{false false false false false }" interface=lxc906d399bee4f k8sPodName=local-path-storage/helper-pod-create-pvc-fea44fe0-9565-44b1-aa2b-6d3985857ad9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1fbd2cb161 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fea44fe0-9565-44b1-aa2b-6d3985857ad9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1fbd2cb161 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fea44fe0-9565-44b1-aa2b-6d3985857ad9 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1fbd2cb161 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 identity=7112 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fea44fe0-9565-44b1-aa2b-6d3985857ad9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1fbd2cb161 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 identity=7112 ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fea44fe0-9565-44b1-aa2b-6d3985857ad9 subsys=endpoint level=info msg="Delete endpoint request" containerID=c80d09bb8a endpointID=1245 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-9db7202c-802e-4c81-a210-67a8eb6f8df7 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c80d09bb8a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1245 identity=7112 ipv4=10.0.0.241 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9db7202c-802e-4c81-a210-67a8eb6f8df7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 28e2c85d-8b0f-45fb-b1f3-89c9c355c49f default }" containerID=b3688b912831cfec01bacf6a1a5a07416b4d005f7d457a1f37f84e45320b6e6b datapathConfiguration="&{false false false false false }" interface=lxcac61871170e8 k8sPodName=openstack/placement-api-5554767bf6-q72th labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b3688b9128 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/placement-api-5554767bf6-q72th subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b3688b9128 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/placement-api-5554767bf6-q72th subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b3688b9128 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 identity=7642 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/placement-api-5554767bf6-q72th oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b3688b9128 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 identity=7642 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/placement-api-5554767bf6-q72th subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1fbd2cb161 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1553 identity=7112 ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fea44fe0-9565-44b1-aa2b-6d3985857ad9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1fbd2cb161 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1553 identity=7112 ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fea44fe0-9565-44b1-aa2b-6d3985857ad9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.234 9191ff19-b83b-458a-9765-c9be486f525b default }" containerID=dc531130dbe4b213d0aeeeb0ba063ad9a8ad570faf0fffd87db88786394c7292 datapathConfiguration="&{false false false false false }" interface=lxc4bfaf1d2c2e3 k8sPodName=openstack/placement-db-init-cnpwm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc531130db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2371 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/placement-db-init-cnpwm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc531130db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2371 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=5689c412-e44f-40f0-aaac-0c919209b79f,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=5689c412-e44f-40f0-aaac-0c919209b79f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/placement-db-init-cnpwm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=5689c412-e44f-40f0-aaac-0c919209b79f;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=5689c412-e44f-40f0-aaac-0c919209b79f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc531130db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2371 identity=55078 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=5689c412-e44f-40f0-aaac-0c919209b79f,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=5689c412-e44f-40f0-aaac-0c919209b79f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/placement-db-init-cnpwm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc531130db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2371 identity=55078 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/placement-db-init-cnpwm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b3688b9128 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=526 identity=7642 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/placement-api-5554767bf6-q72th subsys=endpoint level=info msg="Successful endpoint creation" containerID=b3688b9128 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=526 identity=7642 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/placement-api-5554767bf6-q72th subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.146 4540593e-5c31-4470-b2ec-dc29adec68ea default }" containerID=76ab37842cbae78dd42cd2e7c8736203e28efb22d9d8e7e0b328e34eda92f99f datapathConfiguration="&{false false false false false }" interface=lxc7fd0e885ee23 k8sPodName=openstack/horizon-5957dc965c-7g48s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76ab37842c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=363 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/horizon-5957dc965c-7g48s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76ab37842c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=363 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/horizon-5957dc965c-7g48s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76ab37842c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=363 identity=21292 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/horizon-5957dc965c-7g48s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76ab37842c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=363 identity=21292 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/horizon-5957dc965c-7g48s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.250 7e7b8816-848e-40cc-83c3-6d0257361ab4 default }" containerID=0040a6156f04a0135b3426e73c36517a34cd19e6d0f459849ffe9384975c8aeb datapathConfiguration="&{false false false false false }" interface=lxc618ac4f2247f k8sPodName=openstack/horizon-db-init-z4bzg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0040a6156f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1929 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/horizon-db-init-z4bzg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0040a6156f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1929 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=cc47abfa-b204-45cc-948f-6c20461f5a1f,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=cc47abfa-b204-45cc-948f-6c20461f5a1f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/horizon-db-init-z4bzg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=cc47abfa-b204-45cc-948f-6c20461f5a1f;k8s:batch.kubernetes.io/job-name=horizon-db-init;k8s:component=db-init;k8s:controller-uid=cc47abfa-b204-45cc-948f-6c20461f5a1f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-init;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0040a6156f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1929 identity=9977 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=cc47abfa-b204-45cc-948f-6c20461f5a1f,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=cc47abfa-b204-45cc-948f-6c20461f5a1f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/horizon-db-init-z4bzg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0040a6156f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1929 identity=9977 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/horizon-db-init-z4bzg subsys=endpoint level=info msg="Delete endpoint request" containerID=1a2eb62588 endpointID=3800 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-9765f9b6-52d5-484a-91ab-6bb735f783b1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1a2eb62588 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3800 identity=7112 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9765f9b6-52d5-484a-91ab-6bb735f783b1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dc531130db datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2371 identity=55078 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/placement-db-init-cnpwm subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc531130db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2371 identity=55078 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/placement-db-init-cnpwm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=76ab37842c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=363 identity=21292 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/horizon-5957dc965c-7g48s subsys=endpoint level=info msg="Successful endpoint creation" containerID=76ab37842c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=363 identity=21292 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/horizon-5957dc965c-7g48s subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0040a6156f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1929 identity=9977 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/horizon-db-init-z4bzg subsys=endpoint level=info msg="Successful endpoint creation" containerID=0040a6156f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1929 identity=9977 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/horizon-db-init-z4bzg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.162 40414d9f-9ef5-4edc-bedf-0cae61f285f2 default }" containerID=1e9924139176a041a5375bd1beb04bb1522fea85021def78b048c2d6135fa249 datapathConfiguration="&{false false false false false }" interface=lxc4a2e87119da2 k8sPodName=openstack/rabbitmq-heat-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e99241391 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=640 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e99241391 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=640 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-heat,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-heat-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-heat-server-0" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-heat;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-heat-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-heat-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e99241391 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=640 identity=23239 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-heat,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-heat-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-heat-server-0" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e99241391 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=640 identity=23239 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e99241391 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=640 identity=23239 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e99241391 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=640 identity=23239 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1fbd2cb161 endpointID=1553 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fea44fe0-9565-44b1-aa2b-6d3985857ad9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1fbd2cb161 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1553 identity=7112 ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fea44fe0-9565-44b1-aa2b-6d3985857ad9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 b14af54f-bed6-4b3d-b9d4-a9bfe3fcec96 default }" containerID=1b10232b50650fd541a7992e301c838e738ad345be46b1091df8d30141409bdc datapathConfiguration="&{false false false false false }" interface=lxc6396d811a3e5 k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b10232b50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2308 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b10232b50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2308 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1b10232b50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2308 identity=19484 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b10232b50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2308 identity=19484 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1b10232b50 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2308 identity=19484 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b10232b50 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2308 identity=19484 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.115 a2ea85ba-b27b-4dbf-9d70-f351b58f9ae1 default }" containerID=4b13d2d3eb83fa177f707676c2d260f07061581fa21a03d9d19b8c709ab4ec3b datapathConfiguration="&{false false false false false }" interface=lxc17e4493be163 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b13d2d3eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4b13d2d3eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4b13d2d3eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identity=10631 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4b13d2d3eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identity=10631 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4b13d2d3eb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=502 identity=10631 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b13d2d3eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=502 identity=10631 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dc531130db endpointID=2371 k8sNamespace=openstack k8sPodName=placement-db-init-cnpwm subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=5689c412-e44f-40f0-aaac-0c919209b79f k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=5689c412-e44f-40f0-aaac-0c919209b79f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Delete endpoint request" containerID=0040a6156f endpointID=1929 k8sNamespace=openstack k8sPodName=horizon-db-init-z4bzg subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=cc47abfa-b204-45cc-948f-6c20461f5a1f k8s:batch.kubernetes.io/job-name=horizon-db-init k8s:component=db-init k8s:controller-uid=cc47abfa-b204-45cc-948f-6c20461f5a1f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-init k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=dc531130db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2371 identity=55078 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/placement-db-init-cnpwm subsys=endpoint level=info msg="Removed endpoint" containerID=0040a6156f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1929 identity=9977 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/horizon-db-init-z4bzg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 7dc5f193-b98f-48dd-af5c-c0ee085afa15 default }" containerID=fdb042c682011b0027f1f00aefcdf81780293271c166fe0570aba8ff3f02205f datapathConfiguration="&{false false false false false }" interface=lxcb2f0b9cb7826 k8sPodName=openstack/horizon-db-sync-hvk4t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fdb042c682 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/horizon-db-sync-hvk4t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fdb042c682 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=f1d8fc19-52d8-492d-87d2-c8b145e26566,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=f1d8fc19-52d8-492d-87d2-c8b145e26566,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/horizon-db-sync-hvk4t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.182 bacc16b3-8ed7-444a-bca6-0093b943b290 default }" containerID=19a8295b0bcf9b14138481f54af5077d8c9315cb76b7bfeb4f8853d6365a514e datapathConfiguration="&{false false false false false }" interface=lxc75332336c8cd k8sPodName=openstack/placement-db-sync-2pbd5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19a8295b0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/placement-db-sync-2pbd5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19a8295b0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=05975432-78f1-4398-95b2-c883acb1eb4e,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=05975432-78f1-4398-95b2-c883acb1eb4e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/placement-db-sync-2pbd5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fdb042c682 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.159 ipv6= k8sPodName=openstack/horizon-db-sync-hvk4t line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=19a8295b0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.182 ipv6= k8sPodName=openstack/placement-db-sync-2pbd5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=f1d8fc19-52d8-492d-87d2-c8b145e26566;k8s:batch.kubernetes.io/job-name=horizon-db-sync;k8s:component=db-sync;k8s:controller-uid=f1d8fc19-52d8-492d-87d2-c8b145e26566;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-sync;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fdb042c682 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 identity=2470 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=f1d8fc19-52d8-492d-87d2-c8b145e26566,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=f1d8fc19-52d8-492d-87d2-c8b145e26566,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/horizon-db-sync-hvk4t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fdb042c682 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 identity=2470 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/horizon-db-sync-hvk4t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=05975432-78f1-4398-95b2-c883acb1eb4e;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=05975432-78f1-4398-95b2-c883acb1eb4e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19a8295b0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identity=42951 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=05975432-78f1-4398-95b2-c883acb1eb4e,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=05975432-78f1-4398-95b2-c883acb1eb4e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/placement-db-sync-2pbd5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19a8295b0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identity=42951 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/placement-db-sync-2pbd5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=19a8295b0b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2047 identity=42951 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/placement-db-sync-2pbd5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=19a8295b0b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2047 identity=42951 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/placement-db-sync-2pbd5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fdb042c682 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=62 identity=2470 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/horizon-db-sync-hvk4t subsys=endpoint level=info msg="Successful endpoint creation" containerID=fdb042c682 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=62 identity=2470 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/horizon-db-sync-hvk4t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.200 5ce888c2-6b49-480f-90e2-c2874970bac8 default }" containerID=4b0c501d6a0aaac13f8e08c5621cb55c7cec800eaccd1b1c96653401ffcdb673 datapathConfiguration="&{false false false false false }" interface=lxce27aaf431c56 k8sPodName=local-path-storage/helper-pod-create-pvc-6f291977-2cd9-4e61-8ed0-eac3ea459aee labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b0c501d6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6f291977-2cd9-4e61-8ed0-eac3ea459aee subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4b0c501d6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6f291977-2cd9-4e61-8ed0-eac3ea459aee subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4b0c501d6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 identity=7112 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6f291977-2cd9-4e61-8ed0-eac3ea459aee oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4b0c501d6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 identity=7112 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6f291977-2cd9-4e61-8ed0-eac3ea459aee subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4b0c501d6a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=164 identity=7112 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6f291977-2cd9-4e61-8ed0-eac3ea459aee subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b0c501d6a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=164 identity=7112 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6f291977-2cd9-4e61-8ed0-eac3ea459aee subsys=daemon level=info msg="Delete endpoint request" containerID=4b0c501d6a endpointID=164 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6f291977-2cd9-4e61-8ed0-eac3ea459aee subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4b0c501d6a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=164 identity=7112 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6f291977-2cd9-4e61-8ed0-eac3ea459aee subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.11 5ea72da9-4646-4ac6-a475-1769a6dbe3d7 default }" containerID=f5919877d24221f552d8e3cf636a660f70f24df0e029a21fff46b3de3b072a62 datapathConfiguration="&{false false false false false }" interface=lxc0b1c6c4656c1 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5919877d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3461 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5919877d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3461 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f5919877d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3461 identity=29008 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f5919877d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3461 identity=29008 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f5919877d2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3461 identity=29008 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5919877d2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3461 identity=29008 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=19a8295b0b endpointID=2047 k8sNamespace=openstack k8sPodName=placement-db-sync-2pbd5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=05975432-78f1-4398-95b2-c883acb1eb4e k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=05975432-78f1-4398-95b2-c883acb1eb4e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=19a8295b0b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2047 identity=42951 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/placement-db-sync-2pbd5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 699e4449-cad8-4493-8912-3a650307f7c2 default }" containerID=372943a6bff994a5dd6f4a4bc75b09a239a63149616792d8319bcda8c86258c1 datapathConfiguration="&{false false false false false }" interface=lxc8ee1cba3cb6e k8sPodName=openstack/placement-ks-service-r8fcm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=372943a6bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3916 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/placement-ks-service-r8fcm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=372943a6bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3916 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=104b8743-a649-4c86-b94d-187189431ab5,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=104b8743-a649-4c86-b94d-187189431ab5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/placement-ks-service-r8fcm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=372943a6bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3916 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.241 ipv6= k8sPodName=openstack/placement-ks-service-r8fcm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=104b8743-a649-4c86-b94d-187189431ab5;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=104b8743-a649-4c86-b94d-187189431ab5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=372943a6bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3916 identity=48833 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=104b8743-a649-4c86-b94d-187189431ab5,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=104b8743-a649-4c86-b94d-187189431ab5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/placement-ks-service-r8fcm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=372943a6bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3916 identity=48833 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/placement-ks-service-r8fcm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=372943a6bf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3916 identity=48833 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/placement-ks-service-r8fcm subsys=endpoint level=info msg="Successful endpoint creation" containerID=372943a6bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3916 identity=48833 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/placement-ks-service-r8fcm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.32 de99770a-3186-4548-8504-74aa38d56f1b default }" containerID=7b35ae1e152fbf25856380962ffeca032b5b05b3b15a20c8a64a3e7e9da2ffd2 datapathConfiguration="&{false false false false false }" interface=lxcd553636c156e k8sPodName=openstack/heat-api-575dcf8978-2gzc2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7b35ae1e15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3105 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/heat-api-575dcf8978-2gzc2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7b35ae1e15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3105 identityLabels="k8s:application=heat,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/heat-api-575dcf8978-2gzc2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=heat;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7b35ae1e15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3105 identity=14848 identityLabels="k8s:application=heat,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/heat-api-575dcf8978-2gzc2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7b35ae1e15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3105 identity=14848 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/heat-api-575dcf8978-2gzc2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 1a85f01b-2312-438d-b66f-81ca3ad7b6df default }" containerID=9cfede2790780d1be4dcd41c058540af7c18c31ad0e2501dcafb136233bec345 datapathConfiguration="&{false false false false false }" interface=lxc90e81ec400b1 k8sPodName=openstack/heat-cfn-6d774c7688-8ptkv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9cfede2790 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2354 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/heat-cfn-6d774c7688-8ptkv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9cfede2790 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2354 identityLabels="k8s:application=heat,k8s:component=cfn,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-cfn,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/heat-cfn-6d774c7688-8ptkv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.139 0aa94aaa-6ac0-42a1-a846-4e4326555dee default }" containerID=fb6ee4b8bb113aa520f060d1612686ce82b9db960ff03304d5c9eb937c676722 datapathConfiguration="&{false false false false false }" interface=lxc5ee093cf87db k8sPodName=openstack/heat-engine-7bc86c5f5-h2jv6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb6ee4b8bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/heat-engine-7bc86c5f5-h2jv6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb6ee4b8bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identityLabels="k8s:application=heat,k8s:component=engine,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/heat-engine-7bc86c5f5-h2jv6 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:component=cfn;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-cfn;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9cfede2790 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2354 identity=6249 identityLabels="k8s:application=heat,k8s:component=cfn,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-cfn,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/heat-cfn-6d774c7688-8ptkv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9cfede2790 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2354 identity=6249 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/heat-cfn-6d774c7688-8ptkv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:component=engine;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb6ee4b8bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identity=23793 identityLabels="k8s:application=heat,k8s:component=engine,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/heat-engine-7bc86c5f5-h2jv6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fb6ee4b8bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identity=23793 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/heat-engine-7bc86c5f5-h2jv6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7b35ae1e15 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3105 identity=14848 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/heat-api-575dcf8978-2gzc2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7b35ae1e15 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3105 identity=14848 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/heat-api-575dcf8978-2gzc2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.41 29f4991c-f7e8-48af-8267-a3a936a8217f default }" containerID=9d3bd8bfaf08921dce208773bb3fe2888ff691293b04063c8654bf704dd69676 datapathConfiguration="&{false false false false false }" interface=lxc29ad62c909b3 k8sPodName=openstack/heat-db-init-ck8mg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d3bd8bfaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=938 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/heat-db-init-ck8mg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d3bd8bfaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=938 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=06b4c554-f90d-457c-9efa-aed47830d1e8,k8s:batch.kubernetes.io/job-name=heat-db-init,k8s:component=db-init,k8s:controller-uid=06b4c554-f90d-457c-9efa-aed47830d1e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-init,k8s:release_group=heat" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/heat-db-init-ck8mg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=06b4c554-f90d-457c-9efa-aed47830d1e8;k8s:batch.kubernetes.io/job-name=heat-db-init;k8s:component=db-init;k8s:controller-uid=06b4c554-f90d-457c-9efa-aed47830d1e8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-db-init;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d3bd8bfaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=938 identity=26665 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=06b4c554-f90d-457c-9efa-aed47830d1e8,k8s:batch.kubernetes.io/job-name=heat-db-init,k8s:component=db-init,k8s:controller-uid=06b4c554-f90d-457c-9efa-aed47830d1e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-init,k8s:release_group=heat" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/heat-db-init-ck8mg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d3bd8bfaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=938 identity=26665 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/heat-db-init-ck8mg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9cfede2790 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2354 identity=6249 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/heat-cfn-6d774c7688-8ptkv subsys=endpoint level=info msg="Successful endpoint creation" containerID=9cfede2790 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2354 identity=6249 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/heat-cfn-6d774c7688-8ptkv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fb6ee4b8bb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=51 identity=23793 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/heat-engine-7bc86c5f5-h2jv6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb6ee4b8bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=51 identity=23793 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/heat-engine-7bc86c5f5-h2jv6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9d3bd8bfaf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=938 identity=26665 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/heat-db-init-ck8mg subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d3bd8bfaf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=938 identity=26665 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/heat-db-init-ck8mg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.225 8adbad32-9169-4a3e-8ab9-585b97e759b4 default }" containerID=e561d770f70beb3eb32c4c588062f557cda97704628afc1e89951dd547a27316 datapathConfiguration="&{false false false false false }" interface=lxcf5caf62a5d5d k8sPodName=openstack/cinder-scheduler-587465cb97-xphlb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e561d770f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2103 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/cinder-scheduler-587465cb97-xphlb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e561d770f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2103 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/cinder-scheduler-587465cb97-xphlb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e561d770f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2103 identity=52540 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/cinder-scheduler-587465cb97-xphlb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e561d770f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2103 identity=52540 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/cinder-scheduler-587465cb97-xphlb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 d89bf589-726c-4861-9701-f13300e6bf22 default }" containerID=71062d483d87c6ed6ea167481ecd65c450fc9144894d9716b82b75719a209b0f datapathConfiguration="&{false false false false false }" interface=lxccc47342846cc k8sPodName=openstack/cinder-api-764f6d5dc-884mw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=71062d483d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3005 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/cinder-api-764f6d5dc-884mw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=71062d483d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3005 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/cinder-api-764f6d5dc-884mw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.207 69a74839-9686-4e06-abe7-5c815b0f88e3 default }" containerID=0ea526704fb55a4eb87f46864f88a61829f1a16fbc8bcdbbff8652694a86f19c datapathConfiguration="&{false false false false false }" interface=lxcac8338c8b9dc k8sPodName=openstack/cinder-db-init-zgs6p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ea526704f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-db-init-zgs6p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ea526704f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a64b492e-6428-4b0a-8d6c-e4cf88e42ca4,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=a64b492e-6428-4b0a-8d6c-e4cf88e42ca4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-db-init-zgs6p subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=71062d483d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3005 identity=21687 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/cinder-api-764f6d5dc-884mw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=71062d483d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3005 identity=21687 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/cinder-api-764f6d5dc-884mw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0ea526704f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-db-init-zgs6p line=611 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e561d770f7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2103 identity=52540 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/cinder-scheduler-587465cb97-xphlb subsys=endpoint level=info msg="Successful endpoint creation" containerID=e561d770f7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2103 identity=52540 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/cinder-scheduler-587465cb97-xphlb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=71062d483d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3005 identity=21687 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/cinder-api-764f6d5dc-884mw subsys=endpoint level=info msg="Successful endpoint creation" containerID=71062d483d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3005 identity=21687 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/cinder-api-764f6d5dc-884mw subsys=daemon level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=a64b492e-6428-4b0a-8d6c-e4cf88e42ca4;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=a64b492e-6428-4b0a-8d6c-e4cf88e42ca4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0ea526704f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 identity=62311 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a64b492e-6428-4b0a-8d6c-e4cf88e42ca4,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=a64b492e-6428-4b0a-8d6c-e4cf88e42ca4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-db-init-zgs6p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ea526704f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 identity=62311 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-db-init-zgs6p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0ea526704f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=163 identity=62311 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-db-init-zgs6p subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ea526704f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=163 identity=62311 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-db-init-zgs6p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.188 2c7c33a4-2239-4bda-97ff-250e4352205c default }" containerID=2ad380ce54a73c458b15e18b91f5b09c4ad1352e93118360de843bbb9ab8ab36 datapathConfiguration="&{false false false false false }" interface=lxc26e522137280 k8sPodName=openstack/glance-db-init-mn7vg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ad380ce54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1031 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-db-init-mn7vg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ad380ce54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1031 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2c7cf90f-5e84-4d05-b366-3b637bd51b5f,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=2c7cf90f-5e84-4d05-b366-3b637bd51b5f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-db-init-mn7vg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=2c7cf90f-5e84-4d05-b366-3b637bd51b5f;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=2c7cf90f-5e84-4d05-b366-3b637bd51b5f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2ad380ce54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1031 identity=20706 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2c7cf90f-5e84-4d05-b366-3b637bd51b5f,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=2c7cf90f-5e84-4d05-b366-3b637bd51b5f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-db-init-mn7vg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ad380ce54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1031 identity=20706 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-db-init-mn7vg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2ad380ce54 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1031 identity=20706 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-db-init-mn7vg subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ad380ce54 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1031 identity=20706 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-db-init-mn7vg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fdb042c682 endpointID=62 k8sNamespace=openstack k8sPodName=horizon-db-sync-hvk4t subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=f1d8fc19-52d8-492d-87d2-c8b145e26566 k8s:batch.kubernetes.io/job-name=horizon-db-sync k8s:component=db-sync k8s:controller-uid=f1d8fc19-52d8-492d-87d2-c8b145e26566 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-sync k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=fdb042c682 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=62 identity=2470 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/horizon-db-sync-hvk4t subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.73 e5959644-23ea-4208-8b4c-9c95c2777c1f default }" containerID=da3270ab8e01b7bc5833d6af0ee41f859e6b99d44e71df4700e91da6641668c8 datapathConfiguration="&{false false false false false }" interface=lxc81dfb482dfd9 k8sPodName=openstack/rook-ceph-detect-version-mfxlb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da3270ab8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3437 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rook-ceph-detect-version-mfxlb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da3270ab8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3437 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=69d04b0c-5b83-4d26-bed1-feddf9988d31,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=69d04b0c-5b83-4d26-bed1-feddf9988d31,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rook-ceph-detect-version-mfxlb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=69d04b0c-5b83-4d26-bed1-feddf9988d31;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=69d04b0c-5b83-4d26-bed1-feddf9988d31;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da3270ab8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3437 identity=42501 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=69d04b0c-5b83-4d26-bed1-feddf9988d31,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=69d04b0c-5b83-4d26-bed1-feddf9988d31,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rook-ceph-detect-version-mfxlb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da3270ab8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3437 identity=42501 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rook-ceph-detect-version-mfxlb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=da3270ab8e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3437 identity=42501 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rook-ceph-detect-version-mfxlb subsys=endpoint level=info msg="Successful endpoint creation" containerID=da3270ab8e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3437 identity=42501 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rook-ceph-detect-version-mfxlb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9d3bd8bfaf endpointID=938 k8sNamespace=openstack k8sPodName=heat-db-init-ck8mg subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=06b4c554-f90d-457c-9efa-aed47830d1e8 k8s:batch.kubernetes.io/job-name=heat-db-init k8s:component=db-init k8s:controller-uid=06b4c554-f90d-457c-9efa-aed47830d1e8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-db-init k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=9d3bd8bfaf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=938 identity=26665 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/heat-db-init-ck8mg subsys=endpoint level=info msg="Delete endpoint request" containerID=0ea526704f endpointID=163 k8sNamespace=openstack k8sPodName=cinder-db-init-zgs6p subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=a64b492e-6428-4b0a-8d6c-e4cf88e42ca4 k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=a64b492e-6428-4b0a-8d6c-e4cf88e42ca4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=0ea526704f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=163 identity=62311 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-db-init-zgs6p subsys=endpoint level=info msg="Delete endpoint request" containerID=2ad380ce54 endpointID=1031 k8sNamespace=openstack k8sPodName=glance-db-init-mn7vg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=2c7cf90f-5e84-4d05-b366-3b637bd51b5f k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=2c7cf90f-5e84-4d05-b366-3b637bd51b5f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2ad380ce54 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1031 identity=20706 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-db-init-mn7vg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.249 fe0b74ad-b6b0-422f-875c-aa3c91ef78ec default }" containerID=0b24fab65714638645186687cd530dec8fd5628594b8cdc695ea81406ae4821e datapathConfiguration="&{false false false false false }" interface=lxc96d05a199f07 k8sPodName=openstack/heat-db-sync-fgmhr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b24fab657 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/heat-db-sync-fgmhr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b24fab657 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=8ad253a2-81e2-4088-b434-66a21a00e5fe,k8s:batch.kubernetes.io/job-name=heat-db-sync,k8s:component=db-sync,k8s:controller-uid=8ad253a2-81e2-4088-b434-66a21a00e5fe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-sync,k8s:release_group=heat" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/heat-db-sync-fgmhr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=8ad253a2-81e2-4088-b434-66a21a00e5fe;k8s:batch.kubernetes.io/job-name=heat-db-sync;k8s:component=db-sync;k8s:controller-uid=8ad253a2-81e2-4088-b434-66a21a00e5fe;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-db-sync;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b24fab657 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 identity=42582 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=8ad253a2-81e2-4088-b434-66a21a00e5fe,k8s:batch.kubernetes.io/job-name=heat-db-sync,k8s:component=db-sync,k8s:controller-uid=8ad253a2-81e2-4088-b434-66a21a00e5fe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-sync,k8s:release_group=heat" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/heat-db-sync-fgmhr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b24fab657 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 identity=42582 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/heat-db-sync-fgmhr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0b24fab657 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2616 identity=42582 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/heat-db-sync-fgmhr subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b24fab657 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2616 identity=42582 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/heat-db-sync-fgmhr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.254 e67ed71e-d1c9-4bfa-90be-1e93eada7478 default }" containerID=43108e5a6fc8e2be0a71839e48ad0c3ce44637834fc25e9fda4d57cebb80079d datapathConfiguration="&{false false false false false }" interface=lxc8d1271ac2a9d k8sPodName=openstack/cinder-db-sync-nt4ww labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=43108e5a6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=371 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/cinder-db-sync-nt4ww subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43108e5a6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=371 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e73b9644-2609-4b48-92c6-a3b512367652,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=e73b9644-2609-4b48-92c6-a3b512367652,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/cinder-db-sync-nt4ww subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=e73b9644-2609-4b48-92c6-a3b512367652;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=e73b9644-2609-4b48-92c6-a3b512367652;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=43108e5a6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=371 identity=43637 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e73b9644-2609-4b48-92c6-a3b512367652,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=e73b9644-2609-4b48-92c6-a3b512367652,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/cinder-db-sync-nt4ww oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=43108e5a6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=371 identity=43637 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/cinder-db-sync-nt4ww subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=43108e5a6f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=371 identity=43637 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/cinder-db-sync-nt4ww subsys=endpoint level=info msg="Successful endpoint creation" containerID=43108e5a6f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=371 identity=43637 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/cinder-db-sync-nt4ww subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.226 0f2b6aec-e782-4512-9a8e-9dd459996791 default }" containerID=9cd62f96a0230e7cf3c91280bc992642d44b794555c2839e1c012154901f25b8 datapathConfiguration="&{false false false false false }" interface=lxc7f58fc302c19 k8sPodName=openstack/glance-db-sync-hp76n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9cd62f96a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=872 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-db-sync-hp76n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9cd62f96a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=872 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bae32a43-bca3-4555-9a8c-2afe66dca949,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=bae32a43-bca3-4555-9a8c-2afe66dca949,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-db-sync-hp76n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=bae32a43-bca3-4555-9a8c-2afe66dca949;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=bae32a43-bca3-4555-9a8c-2afe66dca949;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9cd62f96a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=872 identity=2550 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bae32a43-bca3-4555-9a8c-2afe66dca949,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=bae32a43-bca3-4555-9a8c-2afe66dca949,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-db-sync-hp76n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9cd62f96a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=872 identity=2550 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-db-sync-hp76n subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9cd62f96a0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=872 identity=2550 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-db-sync-hp76n subsys=endpoint level=info msg="Successful endpoint creation" containerID=9cd62f96a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=872 identity=2550 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-db-sync-hp76n subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.184 32ededa5-e7cd-4366-96fe-ebbe36a74812 default }" containerID=9c865c9a071446c44a5baaddb7197357e0b0e760a30822b1a2e7aec6aa1fe080 datapathConfiguration="&{false false false false false }" interface=lxc60a5f480d261 k8sPodName=openstack/heat-engine-cleaner-29618625-t4pzq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c865c9a07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618625-t4pzq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c865c9a07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=f906801a-a8bb-44dc-8e8f-a618ccd49608,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29618625,k8s:component=engine-cleaner,k8s:controller-uid=f906801a-a8bb-44dc-8e8f-a618ccd49608,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29618625,k8s:release_group=heat" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618625-t4pzq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9c865c9a07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.184 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618625-t4pzq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=f906801a-a8bb-44dc-8e8f-a618ccd49608;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29618625;k8s:component=engine-cleaner;k8s:controller-uid=f906801a-a8bb-44dc-8e8f-a618ccd49608;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29618625;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c865c9a07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 identity=23025 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=f906801a-a8bb-44dc-8e8f-a618ccd49608,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29618625,k8s:component=engine-cleaner,k8s:controller-uid=f906801a-a8bb-44dc-8e8f-a618ccd49608,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29618625,k8s:release_group=heat" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618625-t4pzq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c865c9a07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 identity=23025 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618625-t4pzq subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.62 3327474b-8425-47fc-9124-f3dab75950e0 default }" containerID=31cf61b8296f3ae8d41711859f858f38d6439111f8a17e827273fb538a3ea958 datapathConfiguration="&{false false false false false }" interface=lxc6b2e6987a272 k8sPodName=openstack/barbican-api-779547b64-jzrhb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=31cf61b829 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-api-779547b64-jzrhb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=31cf61b829 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-api-779547b64-jzrhb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=31cf61b829 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 identity=7191 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-api-779547b64-jzrhb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=31cf61b829 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 identity=7191 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-api-779547b64-jzrhb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9c865c9a07 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=27 identity=23025 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618625-t4pzq subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c865c9a07 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=27 identity=23025 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618625-t4pzq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.238 e8c9d0df-2008-4950-94e4-3694c84c5568 default }" containerID=df41a3acc451a50f7f281f8e766174d3dc7eb9ef5f9bf137993d0bc6cc47305d datapathConfiguration="&{false false false false false }" interface=lxc5c6274440c14 k8sPodName=openstack/barbican-db-init-tmcjw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df41a3acc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1538 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/barbican-db-init-tmcjw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df41a3acc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1538 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e71d8ba1-0728-4d3f-a888-d39b8c003486,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=e71d8ba1-0728-4d3f-a888-d39b8c003486,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/barbican-db-init-tmcjw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e71d8ba1-0728-4d3f-a888-d39b8c003486;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=e71d8ba1-0728-4d3f-a888-d39b8c003486;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df41a3acc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1538 identity=26291 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e71d8ba1-0728-4d3f-a888-d39b8c003486,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=e71d8ba1-0728-4d3f-a888-d39b8c003486,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/barbican-db-init-tmcjw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df41a3acc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1538 identity=26291 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/barbican-db-init-tmcjw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=31cf61b829 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1217 identity=7191 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-api-779547b64-jzrhb subsys=endpoint level=info msg="Successful endpoint creation" containerID=31cf61b829 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1217 identity=7191 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-api-779547b64-jzrhb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=df41a3acc4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1538 identity=26291 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/barbican-db-init-tmcjw subsys=endpoint level=info msg="Successful endpoint creation" containerID=df41a3acc4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1538 identity=26291 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/barbican-db-init-tmcjw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=372943a6bf endpointID=3916 k8sNamespace=openstack k8sPodName=placement-ks-service-r8fcm subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=104b8743-a649-4c86-b94d-187189431ab5 k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=104b8743-a649-4c86-b94d-187189431ab5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=372943a6bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3916 identity=48833 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/placement-ks-service-r8fcm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 a3d25289-8c99-4b6d-b908-11959d7d7d17 default }" containerID=5f6f33e3b28a4df57ba0d8e94ea501ffc61c1ad440d29fd0930f31160d4380c7 datapathConfiguration="&{false false false false false }" interface=lxc9b81fdb168c9 k8sPodName=openstack/placement-ks-user-4pd9h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f6f33e3b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/placement-ks-user-4pd9h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f6f33e3b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=4b98b674-62fd-49f0-8564-588d6c0c1686,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=4b98b674-62fd-49f0-8564-588d6c0c1686,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/placement-ks-user-4pd9h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=4b98b674-62fd-49f0-8564-588d6c0c1686;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=4b98b674-62fd-49f0-8564-588d6c0c1686;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5f6f33e3b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 identity=31727 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=4b98b674-62fd-49f0-8564-588d6c0c1686,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=4b98b674-62fd-49f0-8564-588d6c0c1686,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/placement-ks-user-4pd9h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f6f33e3b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 identity=31727 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/placement-ks-user-4pd9h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5f6f33e3b2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=166 identity=31727 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/placement-ks-user-4pd9h subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f6f33e3b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=166 identity=31727 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/placement-ks-user-4pd9h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=da3270ab8e endpointID=3437 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-mfxlb subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=69d04b0c-5b83-4d26-bed1-feddf9988d31 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=69d04b0c-5b83-4d26-bed1-feddf9988d31 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Delete endpoint request" containerID=0b24fab657 endpointID=2616 k8sNamespace=openstack k8sPodName=heat-db-sync-fgmhr subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=8ad253a2-81e2-4088-b434-66a21a00e5fe k8s:batch.kubernetes.io/job-name=heat-db-sync k8s:component=db-sync k8s:controller-uid=8ad253a2-81e2-4088-b434-66a21a00e5fe k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-db-sync k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=da3270ab8e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3437 identity=42501 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rook-ceph-detect-version-mfxlb subsys=endpoint level=info msg="Removed endpoint" containerID=0b24fab657 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2616 identity=42582 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/heat-db-sync-fgmhr subsys=endpoint level=info msg="Delete endpoint request" containerID=df41a3acc4 endpointID=1538 k8sNamespace=openstack k8sPodName=barbican-db-init-tmcjw subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e71d8ba1-0728-4d3f-a888-d39b8c003486 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=e71d8ba1-0728-4d3f-a888-d39b8c003486 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=df41a3acc4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1538 identity=26291 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/barbican-db-init-tmcjw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.28 699fd6ec-e20d-4de6-8046-c2e30f9d05ba default }" containerID=ba626711fdad8973c0384056bc692ab6a52e602b1d17a5581b31d4d7401bd1f9 datapathConfiguration="&{false false false false false }" interface=lxcb3ed0feca252 k8sPodName=openstack/heat-rabbit-init-x6npx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba626711fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1918 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/heat-rabbit-init-x6npx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba626711fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1918 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=4249075b-e44d-4502-9099-130db882a367,k8s:batch.kubernetes.io/job-name=heat-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4249075b-e44d-4502-9099-130db882a367,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-rabbit-init,k8s:release_group=heat" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/heat-rabbit-init-x6npx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=4249075b-e44d-4502-9099-130db882a367;k8s:batch.kubernetes.io/job-name=heat-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=4249075b-e44d-4502-9099-130db882a367;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-rabbit-init;k8s:release_group=heat;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=ba626711fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1918 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.28 ipv6= k8sPodName=openstack/heat-rabbit-init-x6npx line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ba626711fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1918 identity=49317 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=4249075b-e44d-4502-9099-130db882a367,k8s:batch.kubernetes.io/job-name=heat-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4249075b-e44d-4502-9099-130db882a367,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-rabbit-init,k8s:release_group=heat" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/heat-rabbit-init-x6npx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba626711fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1918 identity=49317 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/heat-rabbit-init-x6npx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 ab76b816-1f94-4867-ad75-edc438a4ed5a default }" containerID=74cd39774eab8d12eb11b16528f696662f317e4b2b64e35613b2a3a5a4500fa2 datapathConfiguration="&{false false false false false }" interface=lxcecedaf126924 k8sPodName=openstack/barbican-db-sync-cspgf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74cd39774e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/barbican-db-sync-cspgf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74cd39774e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2197630b-44d5-4177-b214-fdac46725390,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=2197630b-44d5-4177-b214-fdac46725390,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/barbican-db-sync-cspgf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=2197630b-44d5-4177-b214-fdac46725390;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=2197630b-44d5-4177-b214-fdac46725390;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=74cd39774e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 identity=10537 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2197630b-44d5-4177-b214-fdac46725390,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=2197630b-44d5-4177-b214-fdac46725390,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/barbican-db-sync-cspgf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=74cd39774e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 identity=10537 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/barbican-db-sync-cspgf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ba626711fd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1918 identity=49317 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/heat-rabbit-init-x6npx subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba626711fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1918 identity=49317 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/heat-rabbit-init-x6npx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=74cd39774e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=434 identity=10537 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/barbican-db-sync-cspgf subsys=endpoint level=info msg="Successful endpoint creation" containerID=74cd39774e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=434 identity=10537 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/barbican-db-sync-cspgf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.122 b6c18b95-2bbb-4891-b21c-49fadbb57c61 default }" containerID=2fa8e34f4b00bb109e6a654348dc940401cece53dd2b634b9d4eeba0a860a96e datapathConfiguration="&{false false false false false }" interface=lxc7b4c92a6aa45 k8sPodName=openstack/ceph-object-controller-detect-version-nvb4r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2fa8e34f4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=63 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nvb4r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2fa8e34f4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=63 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=b8a188a9-5f20-40c9-9ef7-0fea18de10a6,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=b8a188a9-5f20-40c9-9ef7-0fea18de10a6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nvb4r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2fa8e34f4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=63 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.122 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nvb4r line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=b8a188a9-5f20-40c9-9ef7-0fea18de10a6;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=b8a188a9-5f20-40c9-9ef7-0fea18de10a6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2fa8e34f4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=63 identity=17108 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=b8a188a9-5f20-40c9-9ef7-0fea18de10a6,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=b8a188a9-5f20-40c9-9ef7-0fea18de10a6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nvb4r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2fa8e34f4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=63 identity=17108 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nvb4r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2fa8e34f4b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=63 identity=17108 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nvb4r subsys=endpoint level=info msg="Successful endpoint creation" containerID=2fa8e34f4b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=63 identity=17108 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nvb4r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5f6f33e3b2 endpointID=166 k8sNamespace=openstack k8sPodName=placement-ks-user-4pd9h subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=4b98b674-62fd-49f0-8564-588d6c0c1686 k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=4b98b674-62fd-49f0-8564-588d6c0c1686 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=5f6f33e3b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=166 identity=31727 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/placement-ks-user-4pd9h subsys=endpoint level=info msg="Delete endpoint request" containerID=ba626711fd endpointID=1918 k8sNamespace=openstack k8sPodName=heat-rabbit-init-x6npx subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=4249075b-e44d-4502-9099-130db882a367 k8s:batch.kubernetes.io/job-name=heat-rabbit-init k8s:component=rabbit-init k8s:controller-uid=4249075b-e44d-4502-9099-130db882a367 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-rabbit-init k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=ba626711fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1918 identity=49317 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/heat-rabbit-init-x6npx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 b81ebb3a-96b2-497c-b9e2-c95a408b25b8 default }" containerID=88875361dcbff2411b73d849bb802f5d13b77f94c33c9236aa9f746b49ba932e datapathConfiguration="&{false false false false false }" interface=lxc2909b2581a68 k8sPodName=openstack/placement-ks-endpoints-m8s6t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=88875361dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3098 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/placement-ks-endpoints-m8s6t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=88875361dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3098 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=e39e50b3-f3af-46f0-a712-590a9c256d89,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=e39e50b3-f3af-46f0-a712-590a9c256d89,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/placement-ks-endpoints-m8s6t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Delete endpoint request" containerID=2fa8e34f4b endpointID=63 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-nvb4r subsys=daemon level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=e39e50b3-f3af-46f0-a712-590a9c256d89;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=e39e50b3-f3af-46f0-a712-590a9c256d89;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=88875361dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3098 identity=38978 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=e39e50b3-f3af-46f0-a712-590a9c256d89,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=e39e50b3-f3af-46f0-a712-590a9c256d89,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/placement-ks-endpoints-m8s6t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=88875361dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3098 identity=38978 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/placement-ks-endpoints-m8s6t subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=b8a188a9-5f20-40c9-9ef7-0fea18de10a6 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=b8a188a9-5f20-40c9-9ef7-0fea18de10a6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=2fa8e34f4b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=63 identity=17108 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nvb4r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=88875361dc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3098 identity=38978 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/placement-ks-endpoints-m8s6t subsys=endpoint level=info msg="Successful endpoint creation" containerID=88875361dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3098 identity=38978 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/placement-ks-endpoints-m8s6t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.238 8ef7ad4d-9668-4252-aed0-9b086a1ecb52 default }" containerID=18a8d6dcf202fbe03c41969481ccb9e44586ef808ee3d8ec6321babf828b5271 datapathConfiguration="&{false false false false false }" interface=lxc85d01a6f476f k8sPodName=openstack/heat-ks-service-85d48 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18a8d6dcf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=197 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/heat-ks-service-85d48 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18a8d6dcf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=197 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=474d6f85-4337-48e6-b64e-977f015f16eb,k8s:batch.kubernetes.io/job-name=heat-ks-service,k8s:component=ks-service,k8s:controller-uid=474d6f85-4337-48e6-b64e-977f015f16eb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-service,k8s:release_group=heat" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/heat-ks-service-85d48 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=474d6f85-4337-48e6-b64e-977f015f16eb;k8s:batch.kubernetes.io/job-name=heat-ks-service;k8s:component=ks-service;k8s:controller-uid=474d6f85-4337-48e6-b64e-977f015f16eb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-ks-service;k8s:release_group=heat;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=18a8d6dcf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=197 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.238 ipv6= k8sPodName=openstack/heat-ks-service-85d48 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=18a8d6dcf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=197 identity=60356 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=474d6f85-4337-48e6-b64e-977f015f16eb,k8s:batch.kubernetes.io/job-name=heat-ks-service,k8s:component=ks-service,k8s:controller-uid=474d6f85-4337-48e6-b64e-977f015f16eb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-service,k8s:release_group=heat" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/heat-ks-service-85d48 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=18a8d6dcf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=197 identity=60356 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/heat-ks-service-85d48 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=18a8d6dcf2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=197 identity=60356 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/heat-ks-service-85d48 subsys=endpoint level=info msg="Successful endpoint creation" containerID=18a8d6dcf2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=197 identity=60356 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/heat-ks-service-85d48 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.165 90feb9ae-ba48-4c6a-b9a8-b2e501a604d6 default }" containerID=144c67e501d1b22d5b63b0164f4ee6785fa5c0a4dd82accfa2201921fcc5ed96 datapathConfiguration="&{false false false false false }" interface=lxc9c0df2096215 k8sPodName=monitoring/kube-prometheus-stack-admission-create-ch9tn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=144c67e501 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3284 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ch9tn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=144c67e501 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3284 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=856fa5b4-b38d-4a93-b11d-2a41d5b9015d,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=856fa5b4-b38d-4a93-b11d-2a41d5b9015d,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ch9tn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=856fa5b4-b38d-4a93-b11d-2a41d5b9015d;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=856fa5b4-b38d-4a93-b11d-2a41d5b9015d;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=144c67e501 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3284 identity=44822 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=856fa5b4-b38d-4a93-b11d-2a41d5b9015d,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=856fa5b4-b38d-4a93-b11d-2a41d5b9015d,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ch9tn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=144c67e501 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3284 identity=44822 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ch9tn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=144c67e501 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3284 identity=44822 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ch9tn subsys=endpoint level=info msg="Successful endpoint creation" containerID=144c67e501 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3284 identity=44822 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ch9tn subsys=daemon level=info msg="Delete endpoint request" containerID=88875361dc endpointID=3098 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-m8s6t subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=e39e50b3-f3af-46f0-a712-590a9c256d89 k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=e39e50b3-f3af-46f0-a712-590a9c256d89 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=88875361dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3098 identity=38978 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/placement-ks-endpoints-m8s6t subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=18a8d6dcf2 endpointID=197 k8sNamespace=openstack k8sPodName=heat-ks-service-85d48 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=474d6f85-4337-48e6-b64e-977f015f16eb k8s:batch.kubernetes.io/job-name=heat-ks-service k8s:component=ks-service k8s:controller-uid=474d6f85-4337-48e6-b64e-977f015f16eb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-ks-service k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=18a8d6dcf2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=197 identity=60356 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/heat-ks-service-85d48 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 2e7042f3-86f8-4885-8396-501a7603fabe default }" containerID=9c4b82145eb95c653b6ce60b06f3bf0fd196c20be76f495a0fb31dca00332465 datapathConfiguration="&{false false false false false }" interface=lxc58949add4839 k8sPodName=openstack/heat-ks-endpoints-f2shh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c4b82145e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=550 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/heat-ks-endpoints-f2shh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c4b82145e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=550 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=8e8654a2-cc97-4837-9d04-d66ac056b970,k8s:batch.kubernetes.io/job-name=heat-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=8e8654a2-cc97-4837-9d04-d66ac056b970,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-endpoints,k8s:release_group=heat" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/heat-ks-endpoints-f2shh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=8e8654a2-cc97-4837-9d04-d66ac056b970;k8s:batch.kubernetes.io/job-name=heat-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=8e8654a2-cc97-4837-9d04-d66ac056b970;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-ks-endpoints;k8s:release_group=heat;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=9c4b82145e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=550 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.137 ipv6= k8sPodName=openstack/heat-ks-endpoints-f2shh line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9c4b82145e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=550 identity=44818 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=8e8654a2-cc97-4837-9d04-d66ac056b970,k8s:batch.kubernetes.io/job-name=heat-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=8e8654a2-cc97-4837-9d04-d66ac056b970,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-endpoints,k8s:release_group=heat" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/heat-ks-endpoints-f2shh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c4b82145e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=550 identity=44818 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/heat-ks-endpoints-f2shh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9c4b82145e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=550 identity=44818 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/heat-ks-endpoints-f2shh subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c4b82145e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=550 identity=44818 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/heat-ks-endpoints-f2shh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=144c67e501 endpointID=3284 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-ch9tn subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=856fa5b4-b38d-4a93-b11d-2a41d5b9015d k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=856fa5b4-b38d-4a93-b11d-2a41d5b9015d k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=144c67e501 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3284 identity=44822 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ch9tn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 7e06967e-c01a-4d41-9f3a-9b4891bd6daa default }" containerID=b4424b503d69e91900ed47d151dbce7662cb93d3133db4124b4daa0dc97ce163 datapathConfiguration="&{false false false false false }" interface=lxcafd138cd5389 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-6hqm5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4424b503d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1145 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-6hqm5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4424b503d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1145 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-6hqm5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b4424b503d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1145 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-6hqm5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b4424b503d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1145 identity=259 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-6hqm5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b4424b503d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1145 identity=259 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-6hqm5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 e278b7fc-82ea-4552-92a5-d8defed79e4f default }" containerID=656c6d7e1927cf78191b5b20edeff912a796ccf6070a602f9f360d5abb30410e datapathConfiguration="&{false false false false false }" interface=lxc7bb8ff1ec495 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-jkwr7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=656c6d7e19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-jkwr7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=656c6d7e19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-jkwr7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=656c6d7e19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 identity=32132 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-jkwr7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=656c6d7e19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 identity=32132 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-jkwr7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 f9437a21-00dd-42a3-a4f4-bc09f48b0c1b default }" containerID=59ee795e2c3d8ee3a738bf5726b2bc39592aca2bfe4738d8983a6981f4058a92 datapathConfiguration="&{false false false false false }" interface=lxc11b5822255f7 k8sPodName=monitoring/kube-prometheus-stack-grafana-57b99bcf4c-4fzqz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=59ee795e2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-57b99bcf4c-4fzqz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=59ee795e2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-57b99bcf4c-4fzqz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=59ee795e2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 identity=25272 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-57b99bcf4c-4fzqz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=59ee795e2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 identity=25272 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-57b99bcf4c-4fzqz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b4424b503d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1145 identity=259 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-6hqm5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4424b503d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1145 identity=259 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-6hqm5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=656c6d7e19 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=155 identity=32132 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-jkwr7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=656c6d7e19 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=155 identity=32132 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-jkwr7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=59ee795e2c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=56 identity=25272 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-57b99bcf4c-4fzqz subsys=endpoint level=info msg="Successful endpoint creation" containerID=59ee795e2c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=56 identity=25272 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-57b99bcf4c-4fzqz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.51 1db273c1-ff5f-4303-aed7-3a762a142b1b default }" containerID=23fa2dde1be9cfe2b9e7bd4dd13ac3e3524fe31a7e3537012e2670b57e858ef7 datapathConfiguration="&{false false false false false }" interface=lxca82a179edc60 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-mtgp9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23fa2dde1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1239 ipv4=10.0.0.51 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-mtgp9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23fa2dde1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1239 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=eac37719-60ca-4e97-b50f-493bd76ce58b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=eac37719-60ca-4e97-b50f-493bd76ce58b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.51 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-mtgp9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=eac37719-60ca-4e97-b50f-493bd76ce58b;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=eac37719-60ca-4e97-b50f-493bd76ce58b;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23fa2dde1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1239 identity=10845 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=eac37719-60ca-4e97-b50f-493bd76ce58b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=eac37719-60ca-4e97-b50f-493bd76ce58b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.51 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-mtgp9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=23fa2dde1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1239 identity=10845 ipv4=10.0.0.51 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-mtgp9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=23fa2dde1b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1239 identity=10845 ipv4=10.0.0.51 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-mtgp9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=23fa2dde1b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1239 identity=10845 ipv4=10.0.0.51 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-mtgp9 subsys=daemon level=info msg="Delete endpoint request" containerID=23fa2dde1b endpointID=1239 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-mtgp9 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=eac37719-60ca-4e97-b50f-493bd76ce58b k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=eac37719-60ca-4e97-b50f-493bd76ce58b k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=23fa2dde1b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1239 identity=10845 ipv4=10.0.0.51 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-mtgp9 subsys=endpoint level=info msg="Delete endpoint request" containerID=9c4b82145e endpointID=550 k8sNamespace=openstack k8sPodName=heat-ks-endpoints-f2shh subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=8e8654a2-cc97-4837-9d04-d66ac056b970 k8s:batch.kubernetes.io/job-name=heat-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=8e8654a2-cc97-4837-9d04-d66ac056b970 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-ks-endpoints k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=9c4b82145e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=550 identity=44818 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/heat-ks-endpoints-f2shh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 55fcc362-fcdc-475a-95e9-8d2888297a64 default }" containerID=a0afe8fe464396ec5922bb1c60f3d1378e927aec5d03c1069df0d7540deccae0 datapathConfiguration="&{false false false false false }" interface=lxcba3ad837c724 k8sPodName=openstack/heat-ks-user-x92sc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a0afe8fe46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=100 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/heat-ks-user-x92sc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a0afe8fe46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=100 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=aa7ee0c9-e5b0-4360-b1c0-e0cf74cb453a,k8s:batch.kubernetes.io/job-name=heat-ks-user,k8s:component=ks-user,k8s:controller-uid=aa7ee0c9-e5b0-4360-b1c0-e0cf74cb453a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-user,k8s:release_group=heat" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/heat-ks-user-x92sc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=aa7ee0c9-e5b0-4360-b1c0-e0cf74cb453a;k8s:batch.kubernetes.io/job-name=heat-ks-user;k8s:component=ks-user;k8s:controller-uid=aa7ee0c9-e5b0-4360-b1c0-e0cf74cb453a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-ks-user;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a0afe8fe46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=100 identity=60387 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=aa7ee0c9-e5b0-4360-b1c0-e0cf74cb453a,k8s:batch.kubernetes.io/job-name=heat-ks-user,k8s:component=ks-user,k8s:controller-uid=aa7ee0c9-e5b0-4360-b1c0-e0cf74cb453a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-user,k8s:release_group=heat" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/heat-ks-user-x92sc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a0afe8fe46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=100 identity=60387 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/heat-ks-user-x92sc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a0afe8fe46 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=100 identity=60387 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/heat-ks-user-x92sc subsys=endpoint level=info msg="Successful endpoint creation" containerID=a0afe8fe46 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=100 identity=60387 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/heat-ks-user-x92sc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.120 e5aa6768-869b-49ac-a30a-01c6a09a9113 default }" containerID=b28281afe4fb4191ea0a5fdaf541d5a1984fab8d1591905662a051862fc23ee2 datapathConfiguration="&{false false false false false }" interface=lxc66373561df62 k8sPodName=local-path-storage/helper-pod-create-pvc-f6d3aa1b-f93b-4c51-9c94-3d2a895b0270 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b28281afe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=674 ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f6d3aa1b-f93b-4c51-9c94-3d2a895b0270 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b28281afe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=674 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f6d3aa1b-f93b-4c51-9c94-3d2a895b0270 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b28281afe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=674 identity=7112 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f6d3aa1b-f93b-4c51-9c94-3d2a895b0270 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b28281afe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=674 identity=7112 ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f6d3aa1b-f93b-4c51-9c94-3d2a895b0270 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b28281afe4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=674 identity=7112 ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f6d3aa1b-f93b-4c51-9c94-3d2a895b0270 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b28281afe4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=674 identity=7112 ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f6d3aa1b-f93b-4c51-9c94-3d2a895b0270 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.71 1b052d65-6592-460f-ae7c-cad62983d4d9 default }" containerID=10b69a31a70310b88494de622c356fdc083b7f7d6a342caa63a31916e51620a7 datapathConfiguration="&{false false false false false }" interface=lxc144f0afdfd8a k8sPodName=local-path-storage/helper-pod-create-pvc-959871b5-3d24-4cf9-a799-db3a0f4769a3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=10b69a31a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-959871b5-3d24-4cf9-a799-db3a0f4769a3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=10b69a31a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-959871b5-3d24-4cf9-a799-db3a0f4769a3 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=10b69a31a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identity=7112 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-959871b5-3d24-4cf9-a799-db3a0f4769a3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=10b69a31a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identity=7112 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-959871b5-3d24-4cf9-a799-db3a0f4769a3 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=10b69a31a7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=228 identity=7112 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-959871b5-3d24-4cf9-a799-db3a0f4769a3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=10b69a31a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=228 identity=7112 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-959871b5-3d24-4cf9-a799-db3a0f4769a3 subsys=daemon level=info msg="Delete endpoint request" containerID=10b69a31a7 endpointID=228 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-959871b5-3d24-4cf9-a799-db3a0f4769a3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=b28281afe4 endpointID=674 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f6d3aa1b-f93b-4c51-9c94-3d2a895b0270 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=74cd39774e endpointID=434 k8sNamespace=openstack k8sPodName=barbican-db-sync-cspgf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=2197630b-44d5-4177-b214-fdac46725390 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=2197630b-44d5-4177-b214-fdac46725390 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=10b69a31a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=228 identity=7112 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-959871b5-3d24-4cf9-a799-db3a0f4769a3 subsys=endpoint level=info msg="Removed endpoint" containerID=b28281afe4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=674 identity=7112 ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f6d3aa1b-f93b-4c51-9c94-3d2a895b0270 subsys=endpoint level=info msg="Removed endpoint" containerID=74cd39774e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=434 identity=10537 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/barbican-db-sync-cspgf subsys=endpoint level=info msg="Delete endpoint request" containerID=43108e5a6f endpointID=371 k8sNamespace=openstack k8sPodName=cinder-db-sync-nt4ww subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=e73b9644-2609-4b48-92c6-a3b512367652 k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=e73b9644-2609-4b48-92c6-a3b512367652 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=43108e5a6f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=371 identity=43637 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/cinder-db-sync-nt4ww subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 b8ae6f9f-c746-40a2-bac6-39a5f208302c default }" containerID=a8f8ccee1d62e37c55f3277c8a30af503d134366c1b3457ba4c2ea422665dfa9 datapathConfiguration="&{false false false false false }" interface=lxc19b01458e8e4 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-q8nv5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a8f8ccee1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3905 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-q8nv5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a8f8ccee1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3905 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-q8nv5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a8f8ccee1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3905 identity=2586 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-q8nv5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a8f8ccee1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3905 identity=2586 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-q8nv5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a8f8ccee1d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3905 identity=2586 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-q8nv5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a8f8ccee1d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3905 identity=2586 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-q8nv5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9cd62f96a0 endpointID=872 k8sNamespace=openstack k8sPodName=glance-db-sync-hp76n subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=bae32a43-bca3-4555-9a8c-2afe66dca949 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=bae32a43-bca3-4555-9a8c-2afe66dca949 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9cd62f96a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=872 identity=2550 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-db-sync-hp76n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 b5330520-0a34-4b1d-81d0-8b1e80759404 default }" containerID=33c08d9395f8cc50d2dfa61db4b6a48c33b771af58d9ce067b5749b46eb87ce5 datapathConfiguration="&{false false false false false }" interface=lxcd8fb90676cc0 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=33c08d9395 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1436 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=33c08d9395 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1436 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=33c08d9395 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1436 identity=58225 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=33c08d9395 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1436 identity=58225 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 20ee6636-4b10-4c73-a150-7ea21c306005 default }" containerID=8aec2723d3d29e7af198e82e20eed06abd8a21dfbf400e56ede0508eeb814709 datapathConfiguration="&{false false false false false }" interface=lxccb62e49f7fc4 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8aec2723d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=437 ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8aec2723d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=437 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8aec2723d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=437 identity=62561 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8aec2723d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=437 identity=62561 ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=33c08d9395 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1436 identity=58225 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=33c08d9395 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1436 identity=58225 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.56 d1b13eb3-cf81-4e7d-b82d-d6f04fd51c4d default }" containerID=685a08af81ec61f5716fe71daced5e2e2b2b9beccc359a333fa750509d60d7e8 datapathConfiguration="&{false false false false false }" interface=lxc322a671cb58d k8sPodName=openstack/barbican-rabbit-init-dmqtt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=685a08af81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1970 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/barbican-rabbit-init-dmqtt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=685a08af81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1970 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=93532af6-f19f-4fb3-a814-e434ca1f3682,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=93532af6-f19f-4fb3-a814-e434ca1f3682,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/barbican-rabbit-init-dmqtt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=93532af6-f19f-4fb3-a814-e434ca1f3682;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=93532af6-f19f-4fb3-a814-e434ca1f3682;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=685a08af81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1970 identity=18928 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=93532af6-f19f-4fb3-a814-e434ca1f3682,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=93532af6-f19f-4fb3-a814-e434ca1f3682,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/barbican-rabbit-init-dmqtt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=685a08af81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1970 identity=18928 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/barbican-rabbit-init-dmqtt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8aec2723d3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=437 identity=62561 ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8aec2723d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=437 identity=62561 ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.45 69a85661-1fe7-4be3-8f08-c31185afa676 default }" containerID=8f22f3e73af22bdf28e77396ea0758d680dba80c58ed125d7568c1ac7557c3bd datapathConfiguration="&{false false false false false }" interface=lxc92e3911424dc k8sPodName=openstack/cinder-rabbit-init-5bjnb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f22f3e73a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3460 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/cinder-rabbit-init-5bjnb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f22f3e73a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3460 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1475d120-efe2-4dab-ba83-18833dd08c4e,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1475d120-efe2-4dab-ba83-18833dd08c4e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/cinder-rabbit-init-5bjnb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=1475d120-efe2-4dab-ba83-18833dd08c4e;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=1475d120-efe2-4dab-ba83-18833dd08c4e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8f22f3e73a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3460 identity=49030 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1475d120-efe2-4dab-ba83-18833dd08c4e,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1475d120-efe2-4dab-ba83-18833dd08c4e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/cinder-rabbit-init-5bjnb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f22f3e73a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3460 identity=49030 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/cinder-rabbit-init-5bjnb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=685a08af81 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1970 identity=18928 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/barbican-rabbit-init-dmqtt subsys=endpoint level=info msg="Successful endpoint creation" containerID=685a08af81 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1970 identity=18928 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/barbican-rabbit-init-dmqtt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8f22f3e73a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3460 identity=49030 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/cinder-rabbit-init-5bjnb subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f22f3e73a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3460 identity=49030 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/cinder-rabbit-init-5bjnb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.137 5f2845c4-0c1b-4f80-9e1d-61223fdf0612 default }" containerID=9ed0b7b24fa236c9e69bf3aa1039816bf41f0dad9b586a40f52743f951191cc2 datapathConfiguration="&{false false false false false }" interface=lxccfb843e2001d k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-kcwnk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ed0b7b24f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-kcwnk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ed0b7b24f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-kcwnk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9ed0b7b24f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 identity=3981 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-kcwnk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ed0b7b24f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 identity=3981 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-kcwnk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 0f640d68-f6f0-46c9-ae7d-ea6abb15889a default }" containerID=1c5a57cb2dc05f66013608afdb1368f42028bb4ff4892c886d20a5187c591a2f datapathConfiguration="&{false false false false false }" interface=lxc000d5458226a k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-kdbgb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c5a57cb2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-kdbgb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c5a57cb2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-kdbgb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=9ed0b7b24f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1559 identity=3981 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-kcwnk subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ed0b7b24f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1559 identity=3981 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-kcwnk subsys=daemon level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1c5a57cb2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identity=2807 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-kdbgb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1c5a57cb2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identity=2807 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-kdbgb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1c5a57cb2d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=555 identity=2807 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-kdbgb subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c5a57cb2d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=555 identity=2807 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-kdbgb subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.73 7d8fb311-ed37-45c5-93ee-f8a7e07c53b6 default }" containerID=a23ef3cb3b50df5ecb8f9616a99574b4ff7571a82dcac91fa7511e60ec3d876c datapathConfiguration="&{false false false false false }" interface=lxc4c78da548712 k8sPodName=openstack/glance-rabbit-init-z595b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a23ef3cb3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=705 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-rabbit-init-z595b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a23ef3cb3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=705 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2f4d1f3b-d7bd-40da-a9bc-2105b2844227,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2f4d1f3b-d7bd-40da-a9bc-2105b2844227,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-rabbit-init-z595b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a23ef3cb3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=705 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-rabbit-init-z595b line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=2f4d1f3b-d7bd-40da-a9bc-2105b2844227;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=2f4d1f3b-d7bd-40da-a9bc-2105b2844227;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a23ef3cb3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=705 identity=26687 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2f4d1f3b-d7bd-40da-a9bc-2105b2844227,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2f4d1f3b-d7bd-40da-a9bc-2105b2844227,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-rabbit-init-z595b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a23ef3cb3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=705 identity=26687 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-rabbit-init-z595b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a23ef3cb3b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=705 identity=26687 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-rabbit-init-z595b subsys=endpoint level=info msg="Successful endpoint creation" containerID=a23ef3cb3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=705 identity=26687 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-rabbit-init-z595b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=685a08af81 endpointID=1970 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-dmqtt subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=93532af6-f19f-4fb3-a814-e434ca1f3682 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=93532af6-f19f-4fb3-a814-e434ca1f3682 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Delete endpoint request" containerID=8f22f3e73a endpointID=3460 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-5bjnb subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=1475d120-efe2-4dab-ba83-18833dd08c4e k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=1475d120-efe2-4dab-ba83-18833dd08c4e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=685a08af81 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1970 identity=18928 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/barbican-rabbit-init-dmqtt subsys=endpoint level=info msg="Removed endpoint" containerID=8f22f3e73a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3460 identity=49030 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/cinder-rabbit-init-5bjnb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 7d2c7f7a-c3d1-42c4-9ffc-c38981e0cf29 default }" containerID=38e40b507190688ec77742f1716d87fd7150c0ab2f5b002acd32399458bed699 datapathConfiguration="&{false false false false false }" interface=lxcbb046f034875 k8sPodName=openstack/cinder-ks-service-kcn74 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=38e40b5071 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-ks-service-kcn74 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=38e40b5071 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=953f55ad-b781-4627-99d6-d72f70d8c6f3,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=953f55ad-b781-4627-99d6-d72f70d8c6f3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-ks-service-kcn74 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=953f55ad-b781-4627-99d6-d72f70d8c6f3;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=953f55ad-b781-4627-99d6-d72f70d8c6f3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=38e40b5071 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identity=2225 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=953f55ad-b781-4627-99d6-d72f70d8c6f3,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=953f55ad-b781-4627-99d6-d72f70d8c6f3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-ks-service-kcn74 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=38e40b5071 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identity=2225 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-ks-service-kcn74 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=38e40b5071 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=15 identity=2225 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-ks-service-kcn74 subsys=endpoint level=info msg="Successful endpoint creation" containerID=38e40b5071 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=15 identity=2225 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-ks-service-kcn74 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.190 6b4d16d9-be2f-4df7-bfe5-0d0bd52729f7 default }" containerID=681ab4cec1457bb8fd691deb6ed8d1a3fc12bd8f7484d555e69d00e3452d22af datapathConfiguration="&{false false false false false }" interface=lxc10ddcc9da74d k8sPodName=openstack/barbican-ks-service-lbjxm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=681ab4cec1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1796 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-ks-service-lbjxm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=681ab4cec1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1796 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3560bc4e-99f1-49dc-ad15-d9a1d95930fa,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=3560bc4e-99f1-49dc-ad15-d9a1d95930fa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-ks-service-lbjxm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3560bc4e-99f1-49dc-ad15-d9a1d95930fa;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=3560bc4e-99f1-49dc-ad15-d9a1d95930fa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=681ab4cec1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1796 identity=16933 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3560bc4e-99f1-49dc-ad15-d9a1d95930fa,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=3560bc4e-99f1-49dc-ad15-d9a1d95930fa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-ks-service-lbjxm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=681ab4cec1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1796 identity=16933 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-ks-service-lbjxm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=681ab4cec1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1796 identity=16933 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-ks-service-lbjxm subsys=endpoint level=info msg="Successful endpoint creation" containerID=681ab4cec1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1796 identity=16933 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-ks-service-lbjxm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a23ef3cb3b endpointID=705 k8sNamespace=openstack k8sPodName=glance-rabbit-init-z595b subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=2f4d1f3b-d7bd-40da-a9bc-2105b2844227 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=2f4d1f3b-d7bd-40da-a9bc-2105b2844227 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a23ef3cb3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=705 identity=26687 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-rabbit-init-z595b subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.178 0acb94b7-b84d-47bb-b876-aa264e9fb9be default }" containerID=f243b29e825ba77aed26d57cbf58aec98a47e7e7a165b0ba7fa410af63cef0e5 datapathConfiguration="&{false false false false false }" interface=lxc47e5e410c789 k8sPodName=openstack/glance-ks-service-lr8dv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f243b29e82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-ks-service-lr8dv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f243b29e82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5b0fb7c8-98a6-4b72-8196-576fc581dea5,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=5b0fb7c8-98a6-4b72-8196-576fc581dea5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-ks-service-lr8dv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f243b29e82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-ks-service-lr8dv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5b0fb7c8-98a6-4b72-8196-576fc581dea5;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=5b0fb7c8-98a6-4b72-8196-576fc581dea5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f243b29e82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 identity=6748 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5b0fb7c8-98a6-4b72-8196-576fc581dea5,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=5b0fb7c8-98a6-4b72-8196-576fc581dea5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-ks-service-lr8dv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f243b29e82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 identity=6748 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-ks-service-lr8dv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f243b29e82 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2292 identity=6748 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-ks-service-lr8dv subsys=endpoint level=info msg="Successful endpoint creation" containerID=f243b29e82 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2292 identity=6748 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-ks-service-lr8dv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a0afe8fe46 endpointID=100 k8sNamespace=openstack k8sPodName=heat-ks-user-x92sc subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=aa7ee0c9-e5b0-4360-b1c0-e0cf74cb453a k8s:batch.kubernetes.io/job-name=heat-ks-user k8s:component=ks-user k8s:controller-uid=aa7ee0c9-e5b0-4360-b1c0-e0cf74cb453a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-ks-user k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=a0afe8fe46 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=100 identity=60387 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/heat-ks-user-x92sc subsys=endpoint level=info msg="Delete endpoint request" containerID=681ab4cec1 endpointID=1796 k8sNamespace=openstack k8sPodName=barbican-ks-service-lbjxm subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3560bc4e-99f1-49dc-ad15-d9a1d95930fa k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=3560bc4e-99f1-49dc-ad15-d9a1d95930fa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Delete endpoint request" containerID=38e40b5071 endpointID=15 k8sNamespace=openstack k8sPodName=cinder-ks-service-kcn74 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=953f55ad-b781-4627-99d6-d72f70d8c6f3 k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=953f55ad-b781-4627-99d6-d72f70d8c6f3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=681ab4cec1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1796 identity=16933 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-ks-service-lbjxm subsys=endpoint level=info msg="Removed endpoint" containerID=38e40b5071 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=15 identity=2225 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-ks-service-kcn74 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.9 f82d0f06-ef70-465d-be18-07eda3c8b61d default }" containerID=fc231f859f439c358ce6d1bf599eeed9cf9bff64c3efaa77577516c621f2abb8 datapathConfiguration="&{false false false false false }" interface=lxc82e2aa6eff86 k8sPodName=openstack/heat-bootstrap-6bmzf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc231f859f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/heat-bootstrap-6bmzf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc231f859f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=d617760a-f164-477c-a47e-778a1bc4c1c6,k8s:batch.kubernetes.io/job-name=heat-bootstrap,k8s:component=bootstrap,k8s:controller-uid=d617760a-f164-477c-a47e-778a1bc4c1c6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-bootstrap,k8s:release_group=heat" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/heat-bootstrap-6bmzf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=d617760a-f164-477c-a47e-778a1bc4c1c6;k8s:batch.kubernetes.io/job-name=heat-bootstrap;k8s:component=bootstrap;k8s:controller-uid=d617760a-f164-477c-a47e-778a1bc4c1c6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-bootstrap;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc231f859f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identity=8864 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=d617760a-f164-477c-a47e-778a1bc4c1c6,k8s:batch.kubernetes.io/job-name=heat-bootstrap,k8s:component=bootstrap,k8s:controller-uid=d617760a-f164-477c-a47e-778a1bc4c1c6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-bootstrap,k8s:release_group=heat" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/heat-bootstrap-6bmzf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc231f859f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identity=8864 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/heat-bootstrap-6bmzf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fc231f859f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=678 identity=8864 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/heat-bootstrap-6bmzf subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc231f859f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=678 identity=8864 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/heat-bootstrap-6bmzf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.171 c1f22176-90a4-4f8c-a1c4-8b77d014e9b6 default }" containerID=4b2efa66b0c5ed9a032aa7242c612323bcbfb111847f97f40f339ccccfe5e83e datapathConfiguration="&{false false false false false }" interface=lxcf41f8e4fec45 k8sPodName=openstack/barbican-ks-endpoints-dr9bg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b2efa66b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1126 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-endpoints-dr9bg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 97bc4106-57cd-447b-a929-78fffb51b768 default }" containerID=578c8c0e3126d08501534cd00d9099cc8a35783b1b07a83a96c313a08f9df6da datapathConfiguration="&{false false false false false }" interface=lxccecc265d1957 k8sPodName=openstack/cinder-ks-endpoints-wgbh2 labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=4b2efa66b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1126 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=15244829-0b81-4831-97b5-d75011864f99,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=15244829-0b81-4831-97b5-d75011864f99,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-endpoints-dr9bg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="New endpoint" containerID=578c8c0e31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1738 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/cinder-ks-endpoints-wgbh2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=578c8c0e31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1738 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=6946735a-f6a5-4f10-9d13-cb114f012b4b,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=6946735a-f6a5-4f10-9d13-cb114f012b4b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/cinder-ks-endpoints-wgbh2 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=15244829-0b81-4831-97b5-d75011864f99;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=15244829-0b81-4831-97b5-d75011864f99;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4b2efa66b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1126 identity=2598 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=15244829-0b81-4831-97b5-d75011864f99,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=15244829-0b81-4831-97b5-d75011864f99,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-endpoints-dr9bg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4b2efa66b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1126 identity=2598 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-endpoints-dr9bg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=578c8c0e31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1738 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.157 ipv6= k8sPodName=openstack/cinder-ks-endpoints-wgbh2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=6946735a-f6a5-4f10-9d13-cb114f012b4b;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=6946735a-f6a5-4f10-9d13-cb114f012b4b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=578c8c0e31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1738 identity=4363 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=6946735a-f6a5-4f10-9d13-cb114f012b4b,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=6946735a-f6a5-4f10-9d13-cb114f012b4b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/cinder-ks-endpoints-wgbh2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=578c8c0e31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1738 identity=4363 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/cinder-ks-endpoints-wgbh2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4b2efa66b0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1126 identity=2598 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-endpoints-dr9bg subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b2efa66b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1126 identity=2598 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-endpoints-dr9bg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=578c8c0e31 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1738 identity=4363 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/cinder-ks-endpoints-wgbh2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=578c8c0e31 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1738 identity=4363 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/cinder-ks-endpoints-wgbh2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f243b29e82 endpointID=2292 k8sNamespace=openstack k8sPodName=glance-ks-service-lr8dv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5b0fb7c8-98a6-4b72-8196-576fc581dea5 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=5b0fb7c8-98a6-4b72-8196-576fc581dea5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f243b29e82 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2292 identity=6748 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-ks-service-lr8dv subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.138 f81d5dd9-c6d0-4195-8ecf-c4e29d7766aa default }" containerID=5e793a913cb8c0f30f5e76d5cb4915bf418446ffc6fa008896f757aaa89f5513 datapathConfiguration="&{false false false false false }" interface=lxcf788aa734a18 k8sPodName=openstack/glance-ks-endpoints-jfd7k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e793a913c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2030 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-ks-endpoints-jfd7k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e793a913c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2030 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b983ef07-9b2a-439a-846b-aca8d72aa37c,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b983ef07-9b2a-439a-846b-aca8d72aa37c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-ks-endpoints-jfd7k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b983ef07-9b2a-439a-846b-aca8d72aa37c;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=b983ef07-9b2a-439a-846b-aca8d72aa37c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5e793a913c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2030 identity=22410 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b983ef07-9b2a-439a-846b-aca8d72aa37c,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b983ef07-9b2a-439a-846b-aca8d72aa37c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-ks-endpoints-jfd7k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5e793a913c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2030 identity=22410 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-ks-endpoints-jfd7k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5e793a913c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2030 identity=22410 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-ks-endpoints-jfd7k subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e793a913c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2030 identity=22410 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-ks-endpoints-jfd7k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fc231f859f endpointID=678 k8sNamespace=openstack k8sPodName=heat-bootstrap-6bmzf subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=d617760a-f164-477c-a47e-778a1bc4c1c6 k8s:batch.kubernetes.io/job-name=heat-bootstrap k8s:component=bootstrap k8s:controller-uid=d617760a-f164-477c-a47e-778a1bc4c1c6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-bootstrap k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=fc231f859f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=678 identity=8864 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/heat-bootstrap-6bmzf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 659bf75f-6438-463e-bfc3-771c5fbccd6c default }" containerID=3e419df79e4287850eec2f6b62058865837dff3527bc498dd7a81e8469e71453 datapathConfiguration="&{false false false false false }" interface=lxc20f1e9914deb k8sPodName=openstack/heat-domain-ks-user-jcrdp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e419df79e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1326 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/heat-domain-ks-user-jcrdp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e419df79e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1326 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=0728bbe1-7540-42c6-82a4-722522bc77a3,k8s:batch.kubernetes.io/job-name=heat-domain-ks-user,k8s:component=ks-user,k8s:controller-uid=0728bbe1-7540-42c6-82a4-722522bc77a3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-domain-ks-user,k8s:release_group=heat" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/heat-domain-ks-user-jcrdp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=0728bbe1-7540-42c6-82a4-722522bc77a3;k8s:batch.kubernetes.io/job-name=heat-domain-ks-user;k8s:component=ks-user;k8s:controller-uid=0728bbe1-7540-42c6-82a4-722522bc77a3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-domain-ks-user;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e419df79e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1326 identity=34318 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=0728bbe1-7540-42c6-82a4-722522bc77a3,k8s:batch.kubernetes.io/job-name=heat-domain-ks-user,k8s:component=ks-user,k8s:controller-uid=0728bbe1-7540-42c6-82a4-722522bc77a3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-domain-ks-user,k8s:release_group=heat" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/heat-domain-ks-user-jcrdp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e419df79e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1326 identity=34318 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/heat-domain-ks-user-jcrdp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3e419df79e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1326 identity=34318 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/heat-domain-ks-user-jcrdp subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e419df79e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1326 identity=34318 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/heat-domain-ks-user-jcrdp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4b2efa66b0 endpointID=1126 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-dr9bg subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=15244829-0b81-4831-97b5-d75011864f99 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=15244829-0b81-4831-97b5-d75011864f99 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Delete endpoint request" containerID=578c8c0e31 endpointID=1738 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-wgbh2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=6946735a-f6a5-4f10-9d13-cb114f012b4b k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=6946735a-f6a5-4f10-9d13-cb114f012b4b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=4b2efa66b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1126 identity=2598 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-endpoints-dr9bg subsys=endpoint level=info msg="Removed endpoint" containerID=578c8c0e31 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1738 identity=4363 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/cinder-ks-endpoints-wgbh2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 60e77800-75c7-44ef-93eb-14cc7fbea9b3 default }" containerID=d6949071dfb61e86b1fc561083c7ea490ae8b42c40d797cc4b0fbbcb8dcc53c3 datapathConfiguration="&{false false false false false }" interface=lxca4e60bb333e5 k8sPodName=openstack/cinder-ks-user-mztvb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d6949071df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2371 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/cinder-ks-user-mztvb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d6949071df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2371 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e0c61bd7-e8e8-473e-9206-61a03a52c0a8,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=e0c61bd7-e8e8-473e-9206-61a03a52c0a8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/cinder-ks-user-mztvb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=e0c61bd7-e8e8-473e-9206-61a03a52c0a8;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=e0c61bd7-e8e8-473e-9206-61a03a52c0a8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d6949071df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2371 identity=10826 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e0c61bd7-e8e8-473e-9206-61a03a52c0a8,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=e0c61bd7-e8e8-473e-9206-61a03a52c0a8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/cinder-ks-user-mztvb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d6949071df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2371 identity=10826 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/cinder-ks-user-mztvb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d6949071df datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2371 identity=10826 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/cinder-ks-user-mztvb subsys=endpoint level=info msg="Successful endpoint creation" containerID=d6949071df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2371 identity=10826 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/cinder-ks-user-mztvb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.25 959fc5ac-37e6-4c0c-903e-854879d2a4f4 default }" containerID=470fc2efcdcc54b4a55778e0c2068331008a151dd5cc7b5016005894497981ea datapathConfiguration="&{false false false false false }" interface=lxca13c70f15b1c k8sPodName=openstack/barbican-ks-user-nzhbb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=470fc2efcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=779 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-user-nzhbb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=470fc2efcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=779 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=08bf469e-c7fa-4afe-8448-6b9dc17b2c0a,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=08bf469e-c7fa-4afe-8448-6b9dc17b2c0a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-user-nzhbb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=08bf469e-c7fa-4afe-8448-6b9dc17b2c0a;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=08bf469e-c7fa-4afe-8448-6b9dc17b2c0a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=470fc2efcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=779 identity=7416 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=08bf469e-c7fa-4afe-8448-6b9dc17b2c0a,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=08bf469e-c7fa-4afe-8448-6b9dc17b2c0a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-user-nzhbb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=470fc2efcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=779 identity=7416 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-user-nzhbb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=470fc2efcd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=779 identity=7416 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-user-nzhbb subsys=endpoint level=info msg="Successful endpoint creation" containerID=470fc2efcd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=779 identity=7416 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-user-nzhbb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5e793a913c endpointID=2030 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-jfd7k subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b983ef07-9b2a-439a-846b-aca8d72aa37c k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=b983ef07-9b2a-439a-846b-aca8d72aa37c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5e793a913c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2030 identity=22410 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-ks-endpoints-jfd7k subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.181 a4a33018-99b3-4426-b041-f6dc491e26d4 default }" containerID=e834dfa83537ffc50c7d3e0b151d79481a149726e1566743bf0b18bd005f8f1d datapathConfiguration="&{false false false false false }" interface=lxc32d9180bde53 k8sPodName=openstack/glance-ks-user-lm6wv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e834dfa835 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-ks-user-lm6wv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e834dfa835 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=dfd91cf8-5dac-417a-95f8-785b79af5c03,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=dfd91cf8-5dac-417a-95f8-785b79af5c03,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-ks-user-lm6wv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=dfd91cf8-5dac-417a-95f8-785b79af5c03;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=dfd91cf8-5dac-417a-95f8-785b79af5c03;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e834dfa835 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 identity=2694 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=dfd91cf8-5dac-417a-95f8-785b79af5c03,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=dfd91cf8-5dac-417a-95f8-785b79af5c03,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-ks-user-lm6wv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e834dfa835 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 identity=2694 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-ks-user-lm6wv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e834dfa835 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=480 identity=2694 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-ks-user-lm6wv subsys=endpoint level=info msg="Successful endpoint creation" containerID=e834dfa835 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=480 identity=2694 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-ks-user-lm6wv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=470fc2efcd endpointID=779 k8sNamespace=openstack k8sPodName=barbican-ks-user-nzhbb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=08bf469e-c7fa-4afe-8448-6b9dc17b2c0a k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=08bf469e-c7fa-4afe-8448-6b9dc17b2c0a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=470fc2efcd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=779 identity=7416 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-user-nzhbb subsys=endpoint level=info msg="Delete endpoint request" containerID=e834dfa835 endpointID=480 k8sNamespace=openstack k8sPodName=glance-ks-user-lm6wv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=dfd91cf8-5dac-417a-95f8-785b79af5c03 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=dfd91cf8-5dac-417a-95f8-785b79af5c03 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e834dfa835 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=480 identity=2694 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-ks-user-lm6wv subsys=endpoint level=info msg="Delete endpoint request" containerID=d6949071df endpointID=2371 k8sNamespace=openstack k8sPodName=cinder-ks-user-mztvb subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=e0c61bd7-e8e8-473e-9206-61a03a52c0a8 k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=e0c61bd7-e8e8-473e-9206-61a03a52c0a8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=d6949071df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2371 identity=10826 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/cinder-ks-user-mztvb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.222 9858aca3-9641-4b1b-aca4-d92cb9d005b3 default }" containerID=e931f8db1108dbd9d25bb2db74e084fc6371f1ff405970e343e318603e48e8a5 datapathConfiguration="&{false false false false false }" interface=lxc314a17c63647 k8sPodName=openstack/glance-metadefs-load-2mfld labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e931f8db11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=71 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/glance-metadefs-load-2mfld subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e931f8db11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=71 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4a360e29-1a27-4384-a88b-e0a048ab1c28,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=4a360e29-1a27-4384-a88b-e0a048ab1c28,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/glance-metadefs-load-2mfld subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4a360e29-1a27-4384-a88b-e0a048ab1c28;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=4a360e29-1a27-4384-a88b-e0a048ab1c28;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e931f8db11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=71 identity=33839 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4a360e29-1a27-4384-a88b-e0a048ab1c28,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=4a360e29-1a27-4384-a88b-e0a048ab1c28,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/glance-metadefs-load-2mfld oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e931f8db11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=71 identity=33839 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/glance-metadefs-load-2mfld subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e931f8db11 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=71 identity=33839 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/glance-metadefs-load-2mfld subsys=endpoint level=info msg="Successful endpoint creation" containerID=e931f8db11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=71 identity=33839 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/glance-metadefs-load-2mfld subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.217 63a705ca-8aab-45f7-9e3c-b1dfeebc9381 default }" containerID=f448daeb97fc1af24e68965315fe307f01c4ab9a368f914469b3b78eaabc2dec datapathConfiguration="&{false false false false false }" interface=lxc3f8227c5a2c7 k8sPodName=openstack/cinder-backup-storage-init-nzd6x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f448daeb97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3088 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/cinder-backup-storage-init-nzd6x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f448daeb97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3088 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=dbd75937-23c1-476f-9328-a194532a2738,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=dbd75937-23c1-476f-9328-a194532a2738,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/cinder-backup-storage-init-nzd6x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=dbd75937-23c1-476f-9328-a194532a2738;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=dbd75937-23c1-476f-9328-a194532a2738;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=f448daeb97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3088 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.217 ipv6= k8sPodName=openstack/cinder-backup-storage-init-nzd6x line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f448daeb97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3088 identity=8637 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=dbd75937-23c1-476f-9328-a194532a2738,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=dbd75937-23c1-476f-9328-a194532a2738,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/cinder-backup-storage-init-nzd6x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f448daeb97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3088 identity=8637 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/cinder-backup-storage-init-nzd6x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f448daeb97 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3088 identity=8637 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/cinder-backup-storage-init-nzd6x subsys=endpoint level=info msg="Successful endpoint creation" containerID=f448daeb97 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3088 identity=8637 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/cinder-backup-storage-init-nzd6x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3e419df79e endpointID=1326 k8sNamespace=openstack k8sPodName=heat-domain-ks-user-jcrdp subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=0728bbe1-7540-42c6-82a4-722522bc77a3 k8s:batch.kubernetes.io/job-name=heat-domain-ks-user k8s:component=ks-user k8s:controller-uid=0728bbe1-7540-42c6-82a4-722522bc77a3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-domain-ks-user k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=3e419df79e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1326 identity=34318 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/heat-domain-ks-user-jcrdp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.40 4fbb3026-b04e-4bda-8b1e-764017c4c4f1 default }" containerID=255f307f2a1f58ffc2b884aef9e80bde43c0bb8c80154faf0f4f1503ec19ddf7 datapathConfiguration="&{false false false false false }" interface=lxcd86f1e647166 k8sPodName=openstack/heat-trusts-mznp4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=255f307f2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/heat-trusts-mznp4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=255f307f2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=8d005a82-8d42-4d08-9590-cbb1b43de01e,k8s:batch.kubernetes.io/job-name=heat-trusts,k8s:component=trusts,k8s:controller-uid=8d005a82-8d42-4d08-9590-cbb1b43de01e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-trusts,k8s:release_group=heat" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/heat-trusts-mznp4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=8d005a82-8d42-4d08-9590-cbb1b43de01e;k8s:batch.kubernetes.io/job-name=heat-trusts;k8s:component=trusts;k8s:controller-uid=8d005a82-8d42-4d08-9590-cbb1b43de01e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-trusts;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=255f307f2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 identity=10173 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=8d005a82-8d42-4d08-9590-cbb1b43de01e,k8s:batch.kubernetes.io/job-name=heat-trusts,k8s:component=trusts,k8s:controller-uid=8d005a82-8d42-4d08-9590-cbb1b43de01e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-trusts,k8s:release_group=heat" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/heat-trusts-mznp4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=255f307f2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 identity=10173 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/heat-trusts-mznp4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=255f307f2a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1159 identity=10173 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/heat-trusts-mznp4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=255f307f2a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1159 identity=10173 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/heat-trusts-mznp4 subsys=daemon level=info msg="Delete endpoint request" containerID=e931f8db11 endpointID=71 k8sNamespace=openstack k8sPodName=glance-metadefs-load-2mfld subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4a360e29-1a27-4384-a88b-e0a048ab1c28 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=4a360e29-1a27-4384-a88b-e0a048ab1c28 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e931f8db11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=71 identity=33839 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/glance-metadefs-load-2mfld subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 8667c038-2be1-41c5-bb3e-4cf5f2b3b85d default }" containerID=541e2ce12060e5703aa1d6deab57441595f23130f97a9d790663c73a47fbb2cf datapathConfiguration="&{false false false false false }" interface=lxc2696d1ac98e3 k8sPodName=openstack/glance-storage-init-qv8cg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=541e2ce120 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1990 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-storage-init-qv8cg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=541e2ce120 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1990 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4dae8b59-7913-4733-8811-35bc4d4f2214,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=4dae8b59-7913-4733-8811-35bc4d4f2214,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-storage-init-qv8cg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4dae8b59-7913-4733-8811-35bc4d4f2214;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=4dae8b59-7913-4733-8811-35bc4d4f2214;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=541e2ce120 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1990 identity=59697 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4dae8b59-7913-4733-8811-35bc4d4f2214,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=4dae8b59-7913-4733-8811-35bc4d4f2214,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-storage-init-qv8cg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=541e2ce120 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1990 identity=59697 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-storage-init-qv8cg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=541e2ce120 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1990 identity=59697 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-storage-init-qv8cg subsys=endpoint level=info msg="Successful endpoint creation" containerID=541e2ce120 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1990 identity=59697 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-storage-init-qv8cg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9c865c9a07 endpointID=27 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29618625-t4pzq subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=f906801a-a8bb-44dc-8e8f-a618ccd49608 k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29618625 k8s:component=engine-cleaner k8s:controller-uid=f906801a-a8bb-44dc-8e8f-a618ccd49608 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29618625 k8s:release_group=heat]" subsys=allocator level=info msg="Delete endpoint request" containerID=f448daeb97 endpointID=3088 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-nzd6x subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=dbd75937-23c1-476f-9328-a194532a2738 k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=dbd75937-23c1-476f-9328-a194532a2738 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=9c865c9a07 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=27 identity=23025 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618625-t4pzq subsys=endpoint level=info msg="Removed endpoint" containerID=f448daeb97 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3088 identity=8637 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/cinder-backup-storage-init-nzd6x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 13281511-08d0-4b92-8df4-b31494558d25 default }" containerID=b7f03bbbad314fb97b19426f59ee2c4afa1d2746a944f27408159e5dbb305365 datapathConfiguration="&{false false false false false }" interface=lxc20e1a2be615b k8sPodName=openstack/cinder-create-internal-tenant-sj85b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7f03bbbad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3377 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-sj85b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7f03bbbad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3377 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=0d8f5e23-0fdf-456f-8481-e3699e878fe1,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=0d8f5e23-0fdf-456f-8481-e3699e878fe1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-sj85b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=0d8f5e23-0fdf-456f-8481-e3699e878fe1;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=0d8f5e23-0fdf-456f-8481-e3699e878fe1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b7f03bbbad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3377 identity=34081 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=0d8f5e23-0fdf-456f-8481-e3699e878fe1,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=0d8f5e23-0fdf-456f-8481-e3699e878fe1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-sj85b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7f03bbbad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3377 identity=34081 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-sj85b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b7f03bbbad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3377 identity=34081 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-sj85b subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7f03bbbad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3377 identity=34081 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-sj85b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=541e2ce120 endpointID=1990 k8sNamespace=openstack k8sPodName=glance-storage-init-qv8cg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4dae8b59-7913-4733-8811-35bc4d4f2214 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=4dae8b59-7913-4733-8811-35bc4d4f2214 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=541e2ce120 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1990 identity=59697 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-storage-init-qv8cg subsys=endpoint level=info msg="Delete endpoint request" containerID=b7f03bbbad endpointID=3377 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-sj85b subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=0d8f5e23-0fdf-456f-8481-e3699e878fe1 k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=0d8f5e23-0fdf-456f-8481-e3699e878fe1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=b7f03bbbad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3377 identity=34081 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-sj85b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 99299145-281f-4b05-b8fd-b8e5541dfa4a default }" containerID=22637654ed7632f309dd6f8a6125d1ee60acc3feead921f94db4647dc63589f8 datapathConfiguration="&{false false false false false }" interface=lxc47afa313a71b k8sPodName=openstack/cinder-storage-init-k8rgn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=22637654ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=30 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/cinder-storage-init-k8rgn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=22637654ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=30 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a952f8f1-5570-4bc2-a9e6-1ca7c75ebdf6,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=a952f8f1-5570-4bc2-a9e6-1ca7c75ebdf6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/cinder-storage-init-k8rgn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=22637654ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=30 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.151 ipv6= k8sPodName=openstack/cinder-storage-init-k8rgn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=a952f8f1-5570-4bc2-a9e6-1ca7c75ebdf6;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=a952f8f1-5570-4bc2-a9e6-1ca7c75ebdf6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=22637654ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=30 identity=5244 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a952f8f1-5570-4bc2-a9e6-1ca7c75ebdf6,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=a952f8f1-5570-4bc2-a9e6-1ca7c75ebdf6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/cinder-storage-init-k8rgn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=22637654ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=30 identity=5244 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/cinder-storage-init-k8rgn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=22637654ed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=30 identity=5244 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/cinder-storage-init-k8rgn subsys=endpoint level=info msg="Successful endpoint creation" containerID=22637654ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=30 identity=5244 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/cinder-storage-init-k8rgn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=255f307f2a endpointID=1159 k8sNamespace=openstack k8sPodName=heat-trusts-mznp4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=8d005a82-8d42-4d08-9590-cbb1b43de01e k8s:batch.kubernetes.io/job-name=heat-trusts k8s:component=trusts k8s:controller-uid=8d005a82-8d42-4d08-9590-cbb1b43de01e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-trusts k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=255f307f2a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1159 identity=10173 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/heat-trusts-mznp4 subsys=endpoint level=info msg="Delete endpoint request" containerID=22637654ed endpointID=30 k8sNamespace=openstack k8sPodName=cinder-storage-init-k8rgn subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=a952f8f1-5570-4bc2-a9e6-1ca7c75ebdf6 k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=a952f8f1-5570-4bc2-a9e6-1ca7c75ebdf6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=22637654ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=30 identity=5244 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/cinder-storage-init-k8rgn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 3b8df3be-182b-48a4-9a0c-3897b41089b3 default }" containerID=5ba424b760a3051399086de30266e6f0f25dfea38a139d32ef08bddc2c6c9858 datapathConfiguration="&{false false false false false }" interface=lxcd922d83a785a k8sPodName=openstack/cinder-bootstrap-gg2q9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ba424b760 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3091 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-bootstrap-gg2q9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ba424b760 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3091 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=09058e08-4ff8-47e4-bdf9-0e5e6f9e94ce,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=09058e08-4ff8-47e4-bdf9-0e5e6f9e94ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-bootstrap-gg2q9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5ba424b760 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3091 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-bootstrap-gg2q9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=09058e08-4ff8-47e4-bdf9-0e5e6f9e94ce;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=09058e08-4ff8-47e4-bdf9-0e5e6f9e94ce;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ba424b760 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3091 identity=60566 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=09058e08-4ff8-47e4-bdf9-0e5e6f9e94ce,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=09058e08-4ff8-47e4-bdf9-0e5e6f9e94ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-bootstrap-gg2q9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5ba424b760 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3091 identity=60566 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-bootstrap-gg2q9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5ba424b760 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3091 identity=60566 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-bootstrap-gg2q9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ba424b760 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3091 identity=60566 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-bootstrap-gg2q9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.130 45f6bc1a-36fc-49cd-95d7-0f9145d75905 default }" containerID=5ee6410aea51fa843692547796dd9dfe41ab0aa47418778874d8f3ba13b18e2c datapathConfiguration="&{false false false false false }" interface=lxc1a4952b91aa6 k8sPodName=openstack/heat-engine-cleaner-29618630-2h8hr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ee6410aea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618630-2h8hr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ee6410aea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=f9192dd4-f7e9-4538-bf47-6bfded90f823,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29618630,k8s:component=engine-cleaner,k8s:controller-uid=f9192dd4-f7e9-4538-bf47-6bfded90f823,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29618630,k8s:release_group=heat" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618630-2h8hr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5ee6410aea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.130 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618630-2h8hr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=f9192dd4-f7e9-4538-bf47-6bfded90f823;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29618630;k8s:component=engine-cleaner;k8s:controller-uid=f9192dd4-f7e9-4538-bf47-6bfded90f823;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29618630;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ee6410aea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identity=61106 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=f9192dd4-f7e9-4538-bf47-6bfded90f823,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29618630,k8s:component=engine-cleaner,k8s:controller-uid=f9192dd4-f7e9-4538-bf47-6bfded90f823,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29618630,k8s:release_group=heat" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618630-2h8hr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5ee6410aea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identity=61106 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618630-2h8hr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5ee6410aea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=662 identity=61106 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618630-2h8hr subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ee6410aea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=662 identity=61106 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618630-2h8hr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5ee6410aea endpointID=662 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29618630-2h8hr subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=f9192dd4-f7e9-4538-bf47-6bfded90f823 k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29618630 k8s:component=engine-cleaner k8s:controller-uid=f9192dd4-f7e9-4538-bf47-6bfded90f823 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29618630 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=5ee6410aea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=662 identity=61106 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618630-2h8hr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 52c339d8-a64f-4697-8c64-529792e244bb default }" containerID=6473e52ef4f80ecde7692b7d6316b7d6e5924803ad75fd3ad6b20cf09e73144b datapathConfiguration="&{false false false false false }" interface=lxcb73952cdcc31 k8sPodName=openstack/cinder-backup-7c6c99f6f-5tgs6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6473e52ef4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1485 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/cinder-backup-7c6c99f6f-5tgs6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6473e52ef4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1485 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/cinder-backup-7c6c99f6f-5tgs6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6473e52ef4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1485 identity=11203 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/cinder-backup-7c6c99f6f-5tgs6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6473e52ef4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1485 identity=11203 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/cinder-backup-7c6c99f6f-5tgs6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.23 5a1736bf-ee22-4ec5-aa1b-079c34c031d4 default }" containerID=6dadd9ab660bc4eba21e8273fa74fb9eac214094159de8881f00822b9bec605a datapathConfiguration="&{false false false false false }" interface=lxcf9415db47f78 k8sPodName=openstack/cinder-volume-bd4587c9-mxql5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6dadd9ab66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=876 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/cinder-volume-bd4587c9-mxql5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6dadd9ab66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=876 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/cinder-volume-bd4587c9-mxql5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6dadd9ab66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=876 identity=18791 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/cinder-volume-bd4587c9-mxql5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6dadd9ab66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=876 identity=18791 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/cinder-volume-bd4587c9-mxql5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6473e52ef4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1485 identity=11203 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/cinder-backup-7c6c99f6f-5tgs6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6473e52ef4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1485 identity=11203 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/cinder-backup-7c6c99f6f-5tgs6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6dadd9ab66 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=876 identity=18791 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/cinder-volume-bd4587c9-mxql5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6dadd9ab66 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=876 identity=18791 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/cinder-volume-bd4587c9-mxql5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.84 7d12ec83-29f5-43b2-8b25-94dd2b6b6ac0 default }" containerID=f5295df9dbdfa4f67325b46d25a169230dd4058e04f70474c2c812305eac3632 datapathConfiguration="&{false false false false false }" interface=lxc0189c88141a7 k8sPodName=openstack/glance-api-545d688f78-l2kj5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5295df9db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1918 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/glance-api-545d688f78-l2kj5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5295df9db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1918 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/glance-api-545d688f78-l2kj5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f5295df9db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1918 identity=1479 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/glance-api-545d688f78-l2kj5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f5295df9db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1918 identity=1479 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/glance-api-545d688f78-l2kj5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f5295df9db datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1918 identity=1479 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/glance-api-545d688f78-l2kj5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5295df9db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1918 identity=1479 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/glance-api-545d688f78-l2kj5 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5ba424b760 endpointID=3091 k8sNamespace=openstack k8sPodName=cinder-bootstrap-gg2q9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=09058e08-4ff8-47e4-bdf9-0e5e6f9e94ce k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=09058e08-4ff8-47e4-bdf9-0e5e6f9e94ce k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=5ba424b760 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3091 identity=60566 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-bootstrap-gg2q9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 c7859cab-53d2-463a-97ce-a20c10677a8a default }" containerID=c058197a14380791827dd079e02e1207646a4d967ecaf752eca56195ada5efc1 datapathConfiguration="&{false false false false false }" interface=lxcbd7f97655855 k8sPodName=local-path-storage/helper-pod-create-pvc-b84ed721-8ac4-494e-87ab-cc18ae97ecc6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c058197a14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 ipv4=10.0.0.76 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b84ed721-8ac4-494e-87ab-cc18ae97ecc6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c058197a14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.76 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b84ed721-8ac4-494e-87ab-cc18ae97ecc6 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c058197a14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 identity=7112 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.76 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b84ed721-8ac4-494e-87ab-cc18ae97ecc6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c058197a14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 identity=7112 ipv4=10.0.0.76 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b84ed721-8ac4-494e-87ab-cc18ae97ecc6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c058197a14 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1075 identity=7112 ipv4=10.0.0.76 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b84ed721-8ac4-494e-87ab-cc18ae97ecc6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c058197a14 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1075 identity=7112 ipv4=10.0.0.76 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b84ed721-8ac4-494e-87ab-cc18ae97ecc6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.183 8f06d771-e936-47c4-ab20-ac99b5f6975c default }" containerID=3c6f56692c71e9d99575c5a730ec78add28129c455d3b87229051e62511ce2e2 datapathConfiguration="&{false false false false false }" interface=lxc156c91fc596f k8sPodName=local-path-storage/helper-pod-create-pvc-0c8f7407-5a7c-495f-a291-332dc767e5a8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c6f56692c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0c8f7407-5a7c-495f-a291-332dc767e5a8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c6f56692c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0c8f7407-5a7c-495f-a291-332dc767e5a8 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3c6f56692c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 identity=7112 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0c8f7407-5a7c-495f-a291-332dc767e5a8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c6f56692c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 identity=7112 ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0c8f7407-5a7c-495f-a291-332dc767e5a8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c6f56692c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=66 identity=7112 ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0c8f7407-5a7c-495f-a291-332dc767e5a8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c6f56692c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=66 identity=7112 ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0c8f7407-5a7c-495f-a291-332dc767e5a8 subsys=daemon level=info msg="Delete endpoint request" containerID=c058197a14 endpointID=1075 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b84ed721-8ac4-494e-87ab-cc18ae97ecc6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c058197a14 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1075 identity=7112 ipv4=10.0.0.76 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b84ed721-8ac4-494e-87ab-cc18ae97ecc6 subsys=endpoint level=info msg="Delete endpoint request" containerID=3c6f56692c endpointID=66 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0c8f7407-5a7c-495f-a291-332dc767e5a8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3c6f56692c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=66 identity=7112 ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0c8f7407-5a7c-495f-a291-332dc767e5a8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.104 8a9aae0f-a28a-46a1-b845-951a6b009496 default }" containerID=f42835b5a1ed89d3b52badc40cf62dda0839e7091503b64a58bfa7b1921e1081 datapathConfiguration="&{false false false false false }" interface=lxcb48d2262f739 k8sPodName=openstack/rabbitmq-magnum-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f42835b5a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2226 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f42835b5a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2226 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-magnum,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-magnum-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-magnum-server-0" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-magnum;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-magnum-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-magnum-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f42835b5a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2226 identity=37174 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-magnum,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-magnum-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-magnum-server-0" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f42835b5a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2226 identity=37174 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f42835b5a1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2226 identity=37174 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f42835b5a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2226 identity=37174 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.169 f563b604-1ff0-4875-b47d-570bc017f286 default }" containerID=467637a0200aaf1c1c46e8779ba323d851cea9e7912de7098f5f4c34d10be82c datapathConfiguration="&{false false false false false }" interface=lxc8ddd2093884b k8sPodName=openstack/rabbitmq-nova-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=467637a020 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1300 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=467637a020 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1300 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-nova;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=467637a020 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1300 identity=21969 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=467637a020 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1300 identity=21969 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=467637a020 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1300 identity=21969 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=467637a020 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1300 identity=21969 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.199 aa5b314a-2190-41b9-8d1b-50ad3fde3ff6 default }" containerID=52e51a975552cf2fa23527514d7c87d7c46d8b86f6a79fcc7956237c7bb18bb3 datapathConfiguration="&{false false false false false }" interface=lxc7db11ebd9f39 k8sPodName=openstack/staffeln-conductor-667957cc48-cgg4p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=52e51a9755 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2788 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-conductor-667957cc48-cgg4p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=52e51a9755 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2788 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-conductor-667957cc48-cgg4p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=52e51a9755 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2788 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-conductor-667957cc48-cgg4p line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=52e51a9755 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2788 identity=19965 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-conductor-667957cc48-cgg4p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=52e51a9755 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2788 identity=19965 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-conductor-667957cc48-cgg4p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 d35acd8c-5ae6-4024-a584-31e5f3e20a7b default }" containerID=742d46d6bf040e68a36d856594d1e61a7da39358244083ffe216714bc49f1c0e datapathConfiguration="&{false false false false false }" interface=lxcc1ce3a26b84f k8sPodName=openstack/staffeln-db-init-zf84x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=742d46d6bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/staffeln-db-init-zf84x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=742d46d6bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=a554f8d7-25af-49d9-90e0-41ccd1a4005f,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=a554f8d7-25af-49d9-90e0-41ccd1a4005f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/staffeln-db-init-zf84x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=a554f8d7-25af-49d9-90e0-41ccd1a4005f;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=a554f8d7-25af-49d9-90e0-41ccd1a4005f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=742d46d6bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 identity=11734 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=a554f8d7-25af-49d9-90e0-41ccd1a4005f,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=a554f8d7-25af-49d9-90e0-41ccd1a4005f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/staffeln-db-init-zf84x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=742d46d6bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 identity=11734 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/staffeln-db-init-zf84x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=52e51a9755 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2788 identity=19965 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-conductor-667957cc48-cgg4p subsys=endpoint level=info msg="Successful endpoint creation" containerID=52e51a9755 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2788 identity=19965 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-conductor-667957cc48-cgg4p subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=742d46d6bf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=504 identity=11734 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/staffeln-db-init-zf84x subsys=endpoint level=info msg="Successful endpoint creation" containerID=742d46d6bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=504 identity=11734 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/staffeln-db-init-zf84x subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.64 752e4681-b08f-41c7-a0fc-30a25c9cba85 default }" containerID=76be2b20d71041df724052a65b2f699cea05995a2c3637506b8bae1807d31ead datapathConfiguration="&{false false false false false }" interface=lxc26d6bdf458fe k8sPodName=openstack/staffeln-api-586b65bf9c-p5wzt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76be2b20d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2687 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-api-586b65bf9c-p5wzt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76be2b20d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2687 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-api-586b65bf9c-p5wzt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76be2b20d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2687 identity=3629 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-api-586b65bf9c-p5wzt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76be2b20d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2687 identity=3629 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-api-586b65bf9c-p5wzt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=76be2b20d7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2687 identity=3629 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-api-586b65bf9c-p5wzt subsys=endpoint level=info msg="Successful endpoint creation" containerID=76be2b20d7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2687 identity=3629 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-api-586b65bf9c-p5wzt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=742d46d6bf endpointID=504 k8sNamespace=openstack k8sPodName=staffeln-db-init-zf84x subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=a554f8d7-25af-49d9-90e0-41ccd1a4005f k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=a554f8d7-25af-49d9-90e0-41ccd1a4005f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=742d46d6bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=504 identity=11734 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/staffeln-db-init-zf84x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.148 8312652c-9e3b-4412-89a6-55d61cfbc7bf default }" containerID=f68cca3efde999b8fa47df71091bf15f434f1aabba4b7a5c243f8af72bae4df3 datapathConfiguration="&{false false false false false }" interface=lxc4f2a75059bc3 k8sPodName=openstack/staffeln-db-sync-fwltt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f68cca3efd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2369 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/staffeln-db-sync-fwltt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f68cca3efd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2369 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=74bb8f91-5e4c-4fc6-8f74-cadd7b008c60,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=74bb8f91-5e4c-4fc6-8f74-cadd7b008c60,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/staffeln-db-sync-fwltt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=74bb8f91-5e4c-4fc6-8f74-cadd7b008c60;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=74bb8f91-5e4c-4fc6-8f74-cadd7b008c60;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f68cca3efd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2369 identity=21549 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=74bb8f91-5e4c-4fc6-8f74-cadd7b008c60,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=74bb8f91-5e4c-4fc6-8f74-cadd7b008c60,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/staffeln-db-sync-fwltt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f68cca3efd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2369 identity=21549 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/staffeln-db-sync-fwltt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f68cca3efd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2369 identity=21549 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/staffeln-db-sync-fwltt subsys=endpoint level=info msg="Successful endpoint creation" containerID=f68cca3efd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2369 identity=21549 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/staffeln-db-sync-fwltt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f68cca3efd endpointID=2369 k8sNamespace=openstack k8sPodName=staffeln-db-sync-fwltt subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=74bb8f91-5e4c-4fc6-8f74-cadd7b008c60 k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=74bb8f91-5e4c-4fc6-8f74-cadd7b008c60 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=f68cca3efd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2369 identity=21549 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/staffeln-db-sync-fwltt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.78 598510ce-097d-4b05-b7f0-727d6b8bcea7 default }" containerID=9692ba4624184c2192ad0960890a4fee90fba974154948cbffd5139ad3117600 datapathConfiguration="&{false false false false false }" interface=lxc54ae700bbdfc k8sPodName=openstack/nova-scheduler-698dc59767-7b22x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9692ba4624 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=80 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/nova-scheduler-698dc59767-7b22x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9692ba4624 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=80 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/nova-scheduler-698dc59767-7b22x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=9692ba4624 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=80 identity=6678 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/nova-scheduler-698dc59767-7b22x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9692ba4624 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=80 identity=6678 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/nova-scheduler-698dc59767-7b22x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9692ba4624 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=80 identity=6678 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/nova-scheduler-698dc59767-7b22x subsys=endpoint level=info msg="Successful endpoint creation" containerID=9692ba4624 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=80 identity=6678 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/nova-scheduler-698dc59767-7b22x subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.226 89b95b94-1eba-42cb-b079-e09cc6e42326 default }" containerID=390206f1999d95620c84662c80a4376d20b7abd0d1a1f1677371abd9cfc0c7bf datapathConfiguration="&{false false false false false }" interface=lxc748f50894a61 k8sPodName=openstack/nova-bootstrap-khz6s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=390206f199 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/nova-bootstrap-khz6s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=390206f199 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=35ae2559-3eed-4681-b491-ab657c760d5a,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=35ae2559-3eed-4681-b491-ab657c760d5a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/nova-bootstrap-khz6s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.122 247bc867-a944-4763-9b47-ad265d86249d default }" containerID=69cc196f3dbdacb9544120b746bf7403459ab28f7e6a43935ed0597670aed482 datapathConfiguration="&{false false false false false }" interface=lxca84186f19a1b k8sPodName=openstack/nova-api-osapi-765d485bbf-7l5xh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=69cc196f3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1693 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/nova-api-osapi-765d485bbf-7l5xh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=69cc196f3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1693 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/nova-api-osapi-765d485bbf-7l5xh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 0faf35a2-23bc-4c91-b33f-4f89db5dd1df default }" containerID=3d3023d0858871b3b6eaed98fe1baf5137f4d39d1ffc7d8b3a03d2782b19e6f6 datapathConfiguration="&{false false false false false }" interface=lxc3dab142d805f k8sPodName=openstack/nova-cell-setup-5wd72 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d3023d085 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3912 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/nova-cell-setup-5wd72 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d3023d085 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3912 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=b2626059-30a4-41bb-815d-5a97b7ab5707,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=b2626059-30a4-41bb-815d-5a97b7ab5707,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/nova-cell-setup-5wd72 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 30bdf504-0297-4fc8-9e89-6b456db0a2f5 default }" containerID=19d3a3d3f260691e5eaed9b0dd56efcbe85da710b7299973d2618d3972b4996d datapathConfiguration="&{false false false false false }" interface=lxc104aa6e16b99 k8sPodName=openstack/nova-conductor-968bff6dc-z9jrh labels="[]" subsys=daemon sync-build=true level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=35ae2559-3eed-4681-b491-ab657c760d5a;k8s:batch.kubernetes.io/job-name=nova-bootstrap;k8s:component=bootstrap;k8s:controller-uid=35ae2559-3eed-4681-b491-ab657c760d5a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-bootstrap;k8s:release_group=nova;" subsys=allocator level=info msg="New endpoint" containerID=19d3a3d3f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2075 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/nova-conductor-968bff6dc-z9jrh subsys=endpoint level=info msg="Identity of endpoint changed" containerID=390206f199 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 identity=5519 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=35ae2559-3eed-4681-b491-ab657c760d5a,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=35ae2559-3eed-4681-b491-ab657c760d5a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/nova-bootstrap-khz6s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=390206f199 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 identity=5519 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/nova-bootstrap-khz6s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=19d3a3d3f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2075 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/nova-conductor-968bff6dc-z9jrh subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=os-api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=69cc196f3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1693 identity=48419 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/nova-api-osapi-765d485bbf-7l5xh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=69cc196f3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1693 identity=48419 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/nova-api-osapi-765d485bbf-7l5xh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=b2626059-30a4-41bb-815d-5a97b7ab5707;k8s:batch.kubernetes.io/job-name=nova-cell-setup;k8s:component=cell-setup;k8s:controller-uid=b2626059-30a4-41bb-815d-5a97b7ab5707;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3d3023d085 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3912 identity=16861 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=b2626059-30a4-41bb-815d-5a97b7ab5707,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=b2626059-30a4-41bb-815d-5a97b7ab5707,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/nova-cell-setup-5wd72 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3d3023d085 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3912 identity=16861 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/nova-cell-setup-5wd72 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19d3a3d3f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2075 identity=49543 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/nova-conductor-968bff6dc-z9jrh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19d3a3d3f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2075 identity=49543 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/nova-conductor-968bff6dc-z9jrh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.248 07fad359-71de-41ec-869f-08119c0f6968 default }" containerID=6524683a136bc6d7ae64eb35f451fb632439e8b4518b5e828101102981e643c4 datapathConfiguration="&{false false false false false }" interface=lxcd31b9fe1381f k8sPodName=openstack/nova-db-init-qj7x6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6524683a13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3667 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/nova-db-init-qj7x6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6524683a13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3667 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=bb18da7c-256f-4094-8a59-90837d11a8a4,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=bb18da7c-256f-4094-8a59-90837d11a8a4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/nova-db-init-qj7x6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.65 395f8d44-2996-4a96-8933-777c37aed08f default }" containerID=e2dcbe5ffba8748232f0bf3ecb0147565e49c80be9fcda789c8873e5ea09b310 datapathConfiguration="&{false false false false false }" interface=lxcad071f1f7592 k8sPodName=openstack/nova-api-metadata-9b85db748-jcmh8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e2dcbe5ffb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/nova-api-metadata-9b85db748-jcmh8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e2dcbe5ffb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/nova-api-metadata-9b85db748-jcmh8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=390206f199 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=483 identity=5519 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/nova-bootstrap-khz6s subsys=endpoint level=info msg="Successful endpoint creation" containerID=390206f199 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=483 identity=5519 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/nova-bootstrap-khz6s subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=19d3a3d3f2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2075 identity=49543 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/nova-conductor-968bff6dc-z9jrh subsys=endpoint level=info msg="Successful endpoint creation" containerID=19d3a3d3f2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2075 identity=49543 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/nova-conductor-968bff6dc-z9jrh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=69cc196f3d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1693 identity=48419 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/nova-api-osapi-765d485bbf-7l5xh subsys=endpoint level=info msg="Successful endpoint creation" containerID=69cc196f3d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1693 identity=48419 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/nova-api-osapi-765d485bbf-7l5xh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3d3023d085 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3912 identity=16861 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/nova-cell-setup-5wd72 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d3023d085 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3912 identity=16861 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/nova-cell-setup-5wd72 subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=bb18da7c-256f-4094-8a59-90837d11a8a4;k8s:batch.kubernetes.io/job-name=nova-db-init;k8s:component=db-init;k8s:controller-uid=bb18da7c-256f-4094-8a59-90837d11a8a4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6524683a13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3667 identity=59011 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=bb18da7c-256f-4094-8a59-90837d11a8a4,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=bb18da7c-256f-4094-8a59-90837d11a8a4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/nova-db-init-qj7x6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6524683a13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3667 identity=59011 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/nova-db-init-qj7x6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e2dcbe5ffb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.65 ipv6= k8sPodName=openstack/nova-api-metadata-9b85db748-jcmh8 line=611 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6524683a13 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3667 identity=59011 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/nova-db-init-qj7x6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6524683a13 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3667 identity=59011 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/nova-db-init-qj7x6 subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=metadata;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e2dcbe5ffb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 identity=33193 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/nova-api-metadata-9b85db748-jcmh8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e2dcbe5ffb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 identity=33193 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/nova-api-metadata-9b85db748-jcmh8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 794e031c-b7e9-4f13-b80f-2c53adc3f7be default }" containerID=9142438091a1e804a333d575b79c003144ad2bcea2305bd1840727b5e4167adb datapathConfiguration="&{false false false false false }" interface=lxce567bdb953e5 k8sPodName=openstack/nova-novncproxy-77f958dc56-hxzdm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9142438091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/nova-novncproxy-77f958dc56-hxzdm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9142438091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/nova-novncproxy-77f958dc56-hxzdm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=e2dcbe5ffb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=480 identity=33193 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/nova-api-metadata-9b85db748-jcmh8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e2dcbe5ffb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=480 identity=33193 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/nova-api-metadata-9b85db748-jcmh8 subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=novnc-proxy;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9142438091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identity=6234 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/nova-novncproxy-77f958dc56-hxzdm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9142438091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identity=6234 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/nova-novncproxy-77f958dc56-hxzdm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9142438091 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=131 identity=6234 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/nova-novncproxy-77f958dc56-hxzdm subsys=endpoint level=info msg="Successful endpoint creation" containerID=9142438091 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=131 identity=6234 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/nova-novncproxy-77f958dc56-hxzdm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.203 829d0b8e-6ee7-48b6-8524-e7846c0f0ea8 default }" containerID=bf683ef73da07b3063ffb4f3bef46b279bbfb67ef198a782477597bf5ffc20b9 datapathConfiguration="&{false false false false false }" interface=lxca1d4f8ee6bba k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-ptht5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf683ef73d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2232 ipv4=10.0.0.203 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-ptht5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf683ef73d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2232 identityLabels="k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/managed-by=kustomize,k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=orc,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=orc-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=orc-controller-manager,k8s:io.kubernetes.pod.namespace=orc-system" ipv4=10.0.0.203 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-ptht5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/managed-by:kustomize k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name:orc k8s:io.cilium.k8s.namespace.labels.control-plane:controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:orc-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/managed-by=kustomize;k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=orc;k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=orc-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=orc-controller-manager;k8s:io.kubernetes.pod.namespace=orc-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf683ef73d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2232 identity=14521 identityLabels="k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/managed-by=kustomize,k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=orc,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=orc-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=orc-controller-manager,k8s:io.kubernetes.pod.namespace=orc-system" ipv4=10.0.0.203 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-ptht5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf683ef73d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2232 identity=14521 ipv4=10.0.0.203 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-ptht5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bf683ef73d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2232 identity=14521 ipv4=10.0.0.203 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-ptht5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf683ef73d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2232 identity=14521 ipv4=10.0.0.203 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-ptht5 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6524683a13 endpointID=3667 k8sNamespace=openstack k8sPodName=nova-db-init-qj7x6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=bb18da7c-256f-4094-8a59-90837d11a8a4 k8s:batch.kubernetes.io/job-name=nova-db-init k8s:component=db-init k8s:controller-uid=bb18da7c-256f-4094-8a59-90837d11a8a4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=6524683a13 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3667 identity=59011 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/nova-db-init-qj7x6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 ccdc3653-ed18-41c6-b5f4-b6b58a4519ec default }" containerID=f9d08018ac8c783f4f1bcc1a261a0866851a69406ca683767d1b3fb4d78a410d datapathConfiguration="&{false false false false false }" interface=lxcff05afeab774 k8sPodName=capi-system/capi-controller-manager-5fbb4994-vkjjj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9d08018ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3187 ipv4=10.0.0.67 ipv6= k8sPodName=capi-system/capi-controller-manager-5fbb4994-vkjjj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9d08018ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3187 identityLabels="k8s:cluster.x-k8s.io/provider=cluster-api,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-manager,k8s:io.kubernetes.pod.namespace=capi-system" ipv4=10.0.0.67 ipv6= k8sPodName=capi-system/capi-controller-manager-5fbb4994-vkjjj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider:cluster-api k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io: k8s:io.cilium.k8s.namespace.labels.control-plane:controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:capi-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:cluster.x-k8s.io/provider=cluster-api;k8s:control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api;k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io=;k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=capi-manager;k8s:io.kubernetes.pod.namespace=capi-system;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f9d08018ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3187 identity=31686 identityLabels="k8s:cluster.x-k8s.io/provider=cluster-api,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-manager,k8s:io.kubernetes.pod.namespace=capi-system" ipv4=10.0.0.67 ipv6= k8sPodName=capi-system/capi-controller-manager-5fbb4994-vkjjj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9d08018ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3187 identity=31686 ipv4=10.0.0.67 ipv6= k8sPodName=capi-system/capi-controller-manager-5fbb4994-vkjjj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f9d08018ac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3187 identity=31686 ipv4=10.0.0.67 ipv6= k8sPodName=capi-system/capi-controller-manager-5fbb4994-vkjjj subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9d08018ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3187 identity=31686 ipv4=10.0.0.67 ipv6= k8sPodName=capi-system/capi-controller-manager-5fbb4994-vkjjj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.117 556d9591-878b-4294-ae97-3b2c67f35d00 default }" containerID=90538e88abff59a4757a45a70c9c16eb29d57df925d94265af5349abc7593370 datapathConfiguration="&{false false false false false }" interface=lxc5533e4a52aab k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-7b7d6b5594-6zpgh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=90538e88ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1865 ipv4=10.0.0.117 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-7b7d6b5594-6zpgh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=90538e88ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1865 identityLabels="k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system" ipv4=10.0.0.117 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-7b7d6b5594-6zpgh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider:bootstrap-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io: k8s:io.cilium.k8s.namespace.labels.control-plane:controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:capi-kubeadm-bootstrap-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm;k8s:control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm;k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io=;k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager;k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=90538e88ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1865 identity=58770 identityLabels="k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system" ipv4=10.0.0.117 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-7b7d6b5594-6zpgh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=90538e88ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1865 identity=58770 ipv4=10.0.0.117 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-7b7d6b5594-6zpgh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.224 3af79767-aa3a-4ad8-a72e-4a754ee212d7 default }" containerID=58e79dffb7bf4881e7af626837e7e2d1dfa816766af2d854bbe0838fd920f6c8 datapathConfiguration="&{false false false false false }" interface=lxc900480488cff k8sPodName=openstack/nova-db-sync-9x94q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=58e79dffb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=565 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/nova-db-sync-9x94q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=58e79dffb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=565 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=0ce85b71-6a93-403c-9b8d-12aef442b1db,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=0ce85b71-6a93-403c-9b8d-12aef442b1db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/nova-db-sync-9x94q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=0ce85b71-6a93-403c-9b8d-12aef442b1db;k8s:batch.kubernetes.io/job-name=nova-db-sync;k8s:component=db-sync;k8s:controller-uid=0ce85b71-6a93-403c-9b8d-12aef442b1db;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-sync;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=58e79dffb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=565 identity=13333 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=0ce85b71-6a93-403c-9b8d-12aef442b1db,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=0ce85b71-6a93-403c-9b8d-12aef442b1db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/nova-db-sync-9x94q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=58e79dffb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=565 identity=13333 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/nova-db-sync-9x94q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=90538e88ab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1865 identity=58770 ipv4=10.0.0.117 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-7b7d6b5594-6zpgh subsys=endpoint level=info msg="Successful endpoint creation" containerID=90538e88ab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1865 identity=58770 ipv4=10.0.0.117 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-7b7d6b5594-6zpgh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=58e79dffb7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=565 identity=13333 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/nova-db-sync-9x94q subsys=endpoint level=info msg="Successful endpoint creation" containerID=58e79dffb7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=565 identity=13333 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/nova-db-sync-9x94q subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.231 5d8ee005-0bae-4d59-b066-45d907a885bf default }" containerID=fa8cd6ee2f97c5e44303e38ad70d9d9a0af9293ed31d78964b00e68ddf34d849 datapathConfiguration="&{false false false false false }" interface=lxc1d46bc10250f k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7698bf4999-sc9jk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa8cd6ee2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1628 ipv4=10.0.0.231 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7698bf4999-sc9jk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa8cd6ee2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1628 identityLabels="k8s:cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system" ipv4=10.0.0.231 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7698bf4999-sc9jk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider:control-plane-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io: k8s:io.cilium.k8s.namespace.labels.control-plane:controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:capi-kubeadm-control-plane-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:cluster.x-k8s.io/provider=control-plane-kubeadm;k8s:control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm;k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io=;k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager;k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa8cd6ee2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1628 identity=31032 identityLabels="k8s:cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system" ipv4=10.0.0.231 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7698bf4999-sc9jk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa8cd6ee2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1628 identity=31032 ipv4=10.0.0.231 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7698bf4999-sc9jk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fa8cd6ee2f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1628 identity=31032 ipv4=10.0.0.231 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7698bf4999-sc9jk subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa8cd6ee2f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1628 identity=31032 ipv4=10.0.0.231 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7698bf4999-sc9jk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.127 b42d0308-8fd2-4fbe-b579-e61832a65bff default }" containerID=4dfa64623c1805b8d54d17453942b4c40f75d62a72dedc26df851bcb0d026369 datapathConfiguration="&{false false false false false }" interface=lxc36b205f3c1bb k8sPodName=capo-system/capo-controller-manager-78487c64cd-fk88b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4dfa64623c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4029 ipv4=10.0.0.127 ipv6= k8sPodName=capo-system/capo-controller-manager-78487c64cd-fk88b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4dfa64623c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4029 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.127 ipv6= k8sPodName=capo-system/capo-controller-manager-78487c64cd-fk88b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider:infrastructure-openstack k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io: k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:capo-system k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit:restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce:restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn:restricted]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:cluster.x-k8s.io/provider=infrastructure-openstack;k8s:control-plane=capo-controller-manager;k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack;k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io=;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system;k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted;k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted;k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=capo-manager;k8s:io.kubernetes.pod.namespace=capo-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4dfa64623c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4029 identity=37185 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.127 ipv6= k8sPodName=capo-system/capo-controller-manager-78487c64cd-fk88b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4dfa64623c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4029 identity=37185 ipv4=10.0.0.127 ipv6= k8sPodName=capo-system/capo-controller-manager-78487c64cd-fk88b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4dfa64623c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4029 identity=37185 ipv4=10.0.0.127 ipv6= k8sPodName=capo-system/capo-controller-manager-78487c64cd-fk88b subsys=endpoint level=info msg="Successful endpoint creation" containerID=4dfa64623c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4029 identity=37185 ipv4=10.0.0.127 ipv6= k8sPodName=capo-system/capo-controller-manager-78487c64cd-fk88b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.207 9846f391-c998-46d2-bb5f-dff28f16daf4 default }" containerID=fa5a9fa480bdcd3a8dbe85ff058adea0f5c5d252ebe48bf1540e76da706709e1 datapathConfiguration="&{false false false false false }" interface=lxc4594dfaf6066 k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6558cd8d7f-6r5ns labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa5a9fa480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 ipv4=10.0.0.207 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6558cd8d7f-6r5ns subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa5a9fa480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 identityLabels="k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system" ipv4=10.0.0.207 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6558cd8d7f-6r5ns subsys=endpoint level=info msg="Identity of endpoint changed" containerID=fa5a9fa480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 identity=58770 identityLabels="k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system" ipv4=10.0.0.207 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6558cd8d7f-6r5ns oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa5a9fa480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 identity=58770 ipv4=10.0.0.207 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6558cd8d7f-6r5ns subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fa5a9fa480 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=256 identity=58770 ipv4=10.0.0.207 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6558cd8d7f-6r5ns subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa5a9fa480 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=256 identity=58770 ipv4=10.0.0.207 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6558cd8d7f-6r5ns subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.12 e82b3b80-4e17-4d0f-a413-6826f539cc5e default }" containerID=38c496b184e35bf4d2eabd85ce84b58e9dc94fdfa49dd1e377d5e499d816b61d datapathConfiguration="&{false false false false false }" interface=lxc8bb1dd073145 k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-bdfc6fdd8-t6t27 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=38c496b184 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 ipv4=10.0.0.12 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-bdfc6fdd8-t6t27 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=38c496b184 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 identityLabels="k8s:cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system" ipv4=10.0.0.12 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-bdfc6fdd8-t6t27 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=38c496b184 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 identity=31032 identityLabels="k8s:cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system" ipv4=10.0.0.12 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-bdfc6fdd8-t6t27 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=38c496b184 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 identity=31032 ipv4=10.0.0.12 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-bdfc6fdd8-t6t27 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=38c496b184 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=417 identity=31032 ipv4=10.0.0.12 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-bdfc6fdd8-t6t27 subsys=endpoint level=info msg="Successful endpoint creation" containerID=38c496b184 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=417 identity=31032 ipv4=10.0.0.12 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-bdfc6fdd8-t6t27 subsys=daemon level=info msg="Delete endpoint request" containerID=90538e88ab endpointID=1865 k8sNamespace=capi-kubeadm-bootstrap-system k8sPodName=capi-kubeadm-bootstrap-controller-manager-7b7d6b5594-6zpgh subsys=daemon level=info msg="Releasing key" key="[k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm k8s:control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system]" subsys=allocator level=info msg="Removed endpoint" containerID=90538e88ab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1865 identity=58770 ipv4=10.0.0.117 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-7b7d6b5594-6zpgh subsys=endpoint level=info msg="Delete endpoint request" containerID=fa8cd6ee2f endpointID=1628 k8sNamespace=capi-kubeadm-control-plane-system k8sPodName=capi-kubeadm-control-plane-controller-manager-7698bf4999-sc9jk subsys=daemon level=info msg="Releasing key" key="[k8s:cluster.x-k8s.io/provider=control-plane-kubeadm k8s:control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system]" subsys=allocator level=info msg="Removed endpoint" containerID=fa8cd6ee2f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1628 identity=31032 ipv4=10.0.0.231 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7698bf4999-sc9jk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 c321f1fb-7366-4b8d-b5b6-e441dbb7f30e default }" containerID=c6c277d33ca6778dfe23bc70d0cc7fb758efb4b8ef2b4f24ab394be7dba08c26 datapathConfiguration="&{false false false false false }" interface=lxc4ba26ba373c5 k8sPodName=capi-system/capi-controller-manager-bc4cf8c95-8b6cd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c6c277d33c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2409 ipv4=10.0.0.68 ipv6= k8sPodName=capi-system/capi-controller-manager-bc4cf8c95-8b6cd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c6c277d33c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2409 identityLabels="k8s:cluster.x-k8s.io/provider=cluster-api,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-manager,k8s:io.kubernetes.pod.namespace=capi-system" ipv4=10.0.0.68 ipv6= k8sPodName=capi-system/capi-controller-manager-bc4cf8c95-8b6cd subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c6c277d33c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2409 identity=31686 identityLabels="k8s:cluster.x-k8s.io/provider=cluster-api,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-manager,k8s:io.kubernetes.pod.namespace=capi-system" ipv4=10.0.0.68 ipv6= k8sPodName=capi-system/capi-controller-manager-bc4cf8c95-8b6cd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c6c277d33c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2409 identity=31686 ipv4=10.0.0.68 ipv6= k8sPodName=capi-system/capi-controller-manager-bc4cf8c95-8b6cd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c6c277d33c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2409 identity=31686 ipv4=10.0.0.68 ipv6= k8sPodName=capi-system/capi-controller-manager-bc4cf8c95-8b6cd subsys=endpoint level=info msg="Successful endpoint creation" containerID=c6c277d33c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2409 identity=31686 ipv4=10.0.0.68 ipv6= k8sPodName=capi-system/capi-controller-manager-bc4cf8c95-8b6cd subsys=daemon level=info msg="Delete endpoint request" containerID=f9d08018ac endpointID=3187 k8sNamespace=capi-system k8sPodName=capi-controller-manager-5fbb4994-vkjjj subsys=daemon level=info msg="Releasing key" key="[k8s:cluster.x-k8s.io/provider=cluster-api k8s:control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capi-manager k8s:io.kubernetes.pod.namespace=capi-system]" subsys=allocator level=info msg="Removed endpoint" containerID=f9d08018ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3187 identity=31686 ipv4=10.0.0.67 ipv6= k8sPodName=capi-system/capi-controller-manager-5fbb4994-vkjjj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.98 08b075db-9784-45b6-9600-e3e3272404de default }" containerID=fc0f2cb34420b9e8d9d473570c59b51c1b7c3f89ebccbc1d019663efcb9e312a datapathConfiguration="&{false false false false false }" interface=lxc29d3ff9343ca k8sPodName=capo-system/capo-controller-manager-57786d8f6c-2kqxv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc0f2cb344 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1984 ipv4=10.0.0.98 ipv6= k8sPodName=capo-system/capo-controller-manager-57786d8f6c-2kqxv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc0f2cb344 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1984 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.98 ipv6= k8sPodName=capo-system/capo-controller-manager-57786d8f6c-2kqxv subsys=endpoint level=info msg="Identity of endpoint changed" containerID=fc0f2cb344 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1984 identity=37185 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.98 ipv6= k8sPodName=capo-system/capo-controller-manager-57786d8f6c-2kqxv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc0f2cb344 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1984 identity=37185 ipv4=10.0.0.98 ipv6= k8sPodName=capo-system/capo-controller-manager-57786d8f6c-2kqxv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fc0f2cb344 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1984 identity=37185 ipv4=10.0.0.98 ipv6= k8sPodName=capo-system/capo-controller-manager-57786d8f6c-2kqxv subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc0f2cb344 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1984 identity=37185 ipv4=10.0.0.98 ipv6= k8sPodName=capo-system/capo-controller-manager-57786d8f6c-2kqxv subsys=daemon level=info msg="Delete endpoint request" containerID=4dfa64623c endpointID=4029 k8sNamespace=capo-system k8sPodName=capo-controller-manager-78487c64cd-fk88b subsys=daemon level=info msg="Releasing key" key="[k8s:cluster.x-k8s.io/provider=infrastructure-openstack k8s:control-plane=capo-controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capo-manager k8s:io.kubernetes.pod.namespace=capo-system]" subsys=allocator level=info msg="Removed endpoint" containerID=4dfa64623c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4029 identity=37185 ipv4=10.0.0.127 ipv6= k8sPodName=capo-system/capo-controller-manager-78487c64cd-fk88b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.231 2f60ac80-b925-4267-ad3c-87b15c43db2b default }" containerID=22863ea8fd94109cb095473b8ec6e8ec49091b492ace061a954215d52cff2735 datapathConfiguration="&{false false false false false }" interface=lxc2c70d3df490d k8sPodName=capo-system/capo-controller-manager-65565fdb7f-2njs7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=22863ea8fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1633 ipv4=10.0.0.231 ipv6= k8sPodName=capo-system/capo-controller-manager-65565fdb7f-2njs7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=22863ea8fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1633 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.231 ipv6= k8sPodName=capo-system/capo-controller-manager-65565fdb7f-2njs7 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=22863ea8fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1633 identity=37185 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.231 ipv6= k8sPodName=capo-system/capo-controller-manager-65565fdb7f-2njs7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=22863ea8fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1633 identity=37185 ipv4=10.0.0.231 ipv6= k8sPodName=capo-system/capo-controller-manager-65565fdb7f-2njs7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=22863ea8fd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1633 identity=37185 ipv4=10.0.0.231 ipv6= k8sPodName=capo-system/capo-controller-manager-65565fdb7f-2njs7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=22863ea8fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1633 identity=37185 ipv4=10.0.0.231 ipv6= k8sPodName=capo-system/capo-controller-manager-65565fdb7f-2njs7 subsys=daemon level=info msg="Delete endpoint request" containerID=fc0f2cb344 endpointID=1984 k8sNamespace=capo-system k8sPodName=capo-controller-manager-57786d8f6c-2kqxv subsys=daemon level=info msg="Releasing key" key="[k8s:cluster.x-k8s.io/provider=infrastructure-openstack k8s:control-plane=capo-controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capo-manager k8s:io.kubernetes.pod.namespace=capo-system]" subsys=allocator level=info msg="Removed endpoint" containerID=fc0f2cb344 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1984 identity=37185 ipv4=10.0.0.98 ipv6= k8sPodName=capo-system/capo-controller-manager-57786d8f6c-2kqxv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 e39e9fef-5248-441b-a947-869b9ea93901 default }" containerID=0b3cfb3c8a38786b5c46412601626c55d2c4cbf236b05c21a3170403df4bbe5a datapathConfiguration="&{false false false false false }" interface=lxc4e1ef14154c7 k8sPodName=openstack/magnum-api-68645fbf64-4hcpq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b3cfb3c8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1607 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/magnum-api-68645fbf64-4hcpq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b3cfb3c8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1607 identityLabels="k8s:application=magnum,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=magnum" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/magnum-api-68645fbf64-4hcpq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.27 1ecb21f5-f178-40c3-be1c-6db5fc23f1a1 default }" containerID=5ddc9d3cb7ed7e8286e63460bbdeec568c8da95754f6aa9f7f85c69bd9e82530 datapathConfiguration="&{false false false false false }" interface=lxcac1e077cfaa7 k8sPodName=openstack/magnum-conductor-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ddc9d3cb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1148 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/magnum-conductor-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ddc9d3cb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1148 identityLabels="k8s:application=magnum,k8s:apps.kubernetes.io/pod-index=0,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=magnum,k8s:statefulset.kubernetes.io/pod-name=magnum-conductor-0" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/magnum-conductor-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=magnum;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b3cfb3c8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1607 identity=30164 identityLabels="k8s:application=magnum,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=magnum" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/magnum-api-68645fbf64-4hcpq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b3cfb3c8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1607 identity=30164 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/magnum-api-68645fbf64-4hcpq subsys=endpoint level=info msg="Invalid state transition skipped" containerID=5ddc9d3cb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1148 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.27 ipv6= k8sPodName=openstack/magnum-conductor-0 line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:apps.kubernetes.io/pod-index=0;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=magnum;k8s:statefulset.kubernetes.io/pod-name=magnum-conductor-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ddc9d3cb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1148 identity=13001 identityLabels="k8s:application=magnum,k8s:apps.kubernetes.io/pod-index=0,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=magnum,k8s:statefulset.kubernetes.io/pod-name=magnum-conductor-0" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/magnum-conductor-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5ddc9d3cb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1148 identity=13001 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/magnum-conductor-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.218 0eb9fc95-a150-4111-b907-697342d0847d default }" containerID=b7d59adfce6f0cf34abf7c1f9a5641754c4ff94c1b0dda131701a935459fc413 datapathConfiguration="&{false false false false false }" interface=lxc05cabd0ea140 k8sPodName=openstack/magnum-db-init-vmm6k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7d59adfce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2854 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/magnum-db-init-vmm6k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7d59adfce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2854 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=4c611c76-bfb2-484a-99bc-2309dee97b2d,k8s:batch.kubernetes.io/job-name=magnum-db-init,k8s:component=db-init,k8s:controller-uid=4c611c76-bfb2-484a-99bc-2309dee97b2d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-db-init,k8s:release_group=magnum" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/magnum-db-init-vmm6k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:batch.kubernetes.io/controller-uid=4c611c76-bfb2-484a-99bc-2309dee97b2d;k8s:batch.kubernetes.io/job-name=magnum-db-init;k8s:component=db-init;k8s:controller-uid=4c611c76-bfb2-484a-99bc-2309dee97b2d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=magnum-db-init;k8s:release_group=magnum;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b7d59adfce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2854 identity=5273 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=4c611c76-bfb2-484a-99bc-2309dee97b2d,k8s:batch.kubernetes.io/job-name=magnum-db-init,k8s:component=db-init,k8s:controller-uid=4c611c76-bfb2-484a-99bc-2309dee97b2d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-db-init,k8s:release_group=magnum" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/magnum-db-init-vmm6k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7d59adfce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2854 identity=5273 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/magnum-db-init-vmm6k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0b3cfb3c8a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1607 identity=30164 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/magnum-api-68645fbf64-4hcpq subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b3cfb3c8a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1607 identity=30164 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/magnum-api-68645fbf64-4hcpq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5ddc9d3cb7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1148 identity=13001 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/magnum-conductor-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ddc9d3cb7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1148 identity=13001 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/magnum-conductor-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b7d59adfce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2854 identity=5273 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/magnum-db-init-vmm6k subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7d59adfce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2854 identity=5273 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/magnum-db-init-vmm6k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b7d59adfce endpointID=2854 k8sNamespace=openstack k8sPodName=magnum-db-init-vmm6k subsys=daemon level=info msg="Releasing key" key="[k8s:application=magnum k8s:batch.kubernetes.io/controller-uid=4c611c76-bfb2-484a-99bc-2309dee97b2d k8s:batch.kubernetes.io/job-name=magnum-db-init k8s:component=db-init k8s:controller-uid=4c611c76-bfb2-484a-99bc-2309dee97b2d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=magnum-db-init k8s:release_group=magnum]" subsys=allocator level=info msg="Removed endpoint" containerID=b7d59adfce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2854 identity=5273 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/magnum-db-init-vmm6k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 9b09fd8c-d471-4952-bc3b-32ad5aa06e59 default }" containerID=27cbbee9efccc60cf3d8d92dc6e02b15b0b8eb4b52022ad88b9e53dcc76cb12a datapathConfiguration="&{false false false false false }" interface=lxc7d33a509239b k8sPodName=openstack/magnum-db-sync-rjlrn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=27cbbee9ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1358 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/magnum-db-sync-rjlrn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=27cbbee9ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1358 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=8a0e3f35-9bff-4300-9beb-b68957bda8c6,k8s:batch.kubernetes.io/job-name=magnum-db-sync,k8s:component=db-sync,k8s:controller-uid=8a0e3f35-9bff-4300-9beb-b68957bda8c6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-db-sync,k8s:release_group=magnum" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/magnum-db-sync-rjlrn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:batch.kubernetes.io/controller-uid=8a0e3f35-9bff-4300-9beb-b68957bda8c6;k8s:batch.kubernetes.io/job-name=magnum-db-sync;k8s:component=db-sync;k8s:controller-uid=8a0e3f35-9bff-4300-9beb-b68957bda8c6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=magnum-db-sync;k8s:release_group=magnum;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=27cbbee9ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1358 identity=49287 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=8a0e3f35-9bff-4300-9beb-b68957bda8c6,k8s:batch.kubernetes.io/job-name=magnum-db-sync,k8s:component=db-sync,k8s:controller-uid=8a0e3f35-9bff-4300-9beb-b68957bda8c6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-db-sync,k8s:release_group=magnum" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/magnum-db-sync-rjlrn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=27cbbee9ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1358 identity=49287 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/magnum-db-sync-rjlrn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=27cbbee9ef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1358 identity=49287 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/magnum-db-sync-rjlrn subsys=endpoint level=info msg="Successful endpoint creation" containerID=27cbbee9ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1358 identity=49287 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/magnum-db-sync-rjlrn subsys=daemon level=info msg="Delete endpoint request" containerID=58e79dffb7 endpointID=565 k8sNamespace=openstack k8sPodName=nova-db-sync-9x94q subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=0ce85b71-6a93-403c-9b8d-12aef442b1db k8s:batch.kubernetes.io/job-name=nova-db-sync k8s:component=db-sync k8s:controller-uid=0ce85b71-6a93-403c-9b8d-12aef442b1db k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-sync k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=58e79dffb7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=565 identity=13333 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/nova-db-sync-9x94q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.222 f6e0f02a-d945-4048-bd2b-7527b985a674 default }" containerID=2984d99c34fb17b62546a3a1735b29c3c890c32378e11905d01a3bc39d0ab32a datapathConfiguration="&{false false false false false }" interface=lxc555c10d6d9c7 k8sPodName=openstack/nova-rabbit-init-8slcv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2984d99c34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1758 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-rabbit-init-8slcv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2984d99c34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1758 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=eed78ab8-0623-4981-9cac-39447b55b5a8,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=eed78ab8-0623-4981-9cac-39447b55b5a8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-rabbit-init-8slcv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=eed78ab8-0623-4981-9cac-39447b55b5a8;k8s:batch.kubernetes.io/job-name=nova-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=eed78ab8-0623-4981-9cac-39447b55b5a8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-rabbit-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2984d99c34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1758 identity=1882 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=eed78ab8-0623-4981-9cac-39447b55b5a8,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=eed78ab8-0623-4981-9cac-39447b55b5a8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-rabbit-init-8slcv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2984d99c34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1758 identity=1882 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-rabbit-init-8slcv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2984d99c34 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1758 identity=1882 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-rabbit-init-8slcv subsys=endpoint level=info msg="Successful endpoint creation" containerID=2984d99c34 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1758 identity=1882 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-rabbit-init-8slcv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2984d99c34 endpointID=1758 k8sNamespace=openstack k8sPodName=nova-rabbit-init-8slcv subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=eed78ab8-0623-4981-9cac-39447b55b5a8 k8s:batch.kubernetes.io/job-name=nova-rabbit-init k8s:component=rabbit-init k8s:controller-uid=eed78ab8-0623-4981-9cac-39447b55b5a8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-rabbit-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=2984d99c34 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1758 identity=1882 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-rabbit-init-8slcv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 1fa6051b-08a6-4f1f-9523-e71a7c9e8314 default }" containerID=6cc53ebe3a818e89e2e4f6858551196c07ec31f227f6d458c9465180d6bf8ccc datapathConfiguration="&{false false false false false }" interface=lxc0f4d94ae5f8b k8sPodName=openstack/nova-ks-service-bdxt7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6cc53ebe3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2941 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/nova-ks-service-bdxt7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6cc53ebe3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2941 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=9e94ce61-3379-4738-b9d0-ee273d48bce5,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=9e94ce61-3379-4738-b9d0-ee273d48bce5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/nova-ks-service-bdxt7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6cc53ebe3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2941 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.13 ipv6= k8sPodName=openstack/nova-ks-service-bdxt7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=9e94ce61-3379-4738-b9d0-ee273d48bce5;k8s:batch.kubernetes.io/job-name=nova-ks-service;k8s:component=ks-service;k8s:controller-uid=9e94ce61-3379-4738-b9d0-ee273d48bce5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-service;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6cc53ebe3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2941 identity=52621 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=9e94ce61-3379-4738-b9d0-ee273d48bce5,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=9e94ce61-3379-4738-b9d0-ee273d48bce5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/nova-ks-service-bdxt7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6cc53ebe3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2941 identity=52621 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/nova-ks-service-bdxt7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6cc53ebe3a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2941 identity=52621 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/nova-ks-service-bdxt7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6cc53ebe3a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2941 identity=52621 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/nova-ks-service-bdxt7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=27cbbee9ef endpointID=1358 k8sNamespace=openstack k8sPodName=magnum-db-sync-rjlrn subsys=daemon level=info msg="Releasing key" key="[k8s:application=magnum k8s:batch.kubernetes.io/controller-uid=8a0e3f35-9bff-4300-9beb-b68957bda8c6 k8s:batch.kubernetes.io/job-name=magnum-db-sync k8s:component=db-sync k8s:controller-uid=8a0e3f35-9bff-4300-9beb-b68957bda8c6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=magnum-db-sync k8s:release_group=magnum]" subsys=allocator level=info msg="Removed endpoint" containerID=27cbbee9ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1358 identity=49287 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/magnum-db-sync-rjlrn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 48d8fcee-1ec9-4c51-a240-d0cb51199c73 default }" containerID=30ee52d62c379c1347bfcd183d8104ca63cf9f81c4e2b73c685a31ef6daca458 datapathConfiguration="&{false false false false false }" interface=lxcf9d3daddf14a k8sPodName=openstack/magnum-rabbit-init-x8tgf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=30ee52d62c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=302 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/magnum-rabbit-init-x8tgf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=30ee52d62c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=302 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=ef0361ed-e85a-4546-b899-22cf82e5d125,k8s:batch.kubernetes.io/job-name=magnum-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ef0361ed-e85a-4546-b899-22cf82e5d125,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-rabbit-init,k8s:release_group=magnum" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/magnum-rabbit-init-x8tgf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=30ee52d62c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=302 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.217 ipv6= k8sPodName=openstack/magnum-rabbit-init-x8tgf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:batch.kubernetes.io/controller-uid=ef0361ed-e85a-4546-b899-22cf82e5d125;k8s:batch.kubernetes.io/job-name=magnum-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ef0361ed-e85a-4546-b899-22cf82e5d125;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=magnum-rabbit-init;k8s:release_group=magnum;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=30ee52d62c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=302 identity=14947 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=ef0361ed-e85a-4546-b899-22cf82e5d125,k8s:batch.kubernetes.io/job-name=magnum-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ef0361ed-e85a-4546-b899-22cf82e5d125,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-rabbit-init,k8s:release_group=magnum" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/magnum-rabbit-init-x8tgf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=30ee52d62c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=302 identity=14947 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/magnum-rabbit-init-x8tgf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=30ee52d62c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=302 identity=14947 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/magnum-rabbit-init-x8tgf subsys=endpoint level=info msg="Successful endpoint creation" containerID=30ee52d62c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=302 identity=14947 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/magnum-rabbit-init-x8tgf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=30ee52d62c endpointID=302 k8sNamespace=openstack k8sPodName=magnum-rabbit-init-x8tgf subsys=daemon level=info msg="Releasing key" key="[k8s:application=magnum k8s:batch.kubernetes.io/controller-uid=ef0361ed-e85a-4546-b899-22cf82e5d125 k8s:batch.kubernetes.io/job-name=magnum-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ef0361ed-e85a-4546-b899-22cf82e5d125 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=magnum-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=magnum-rabbit-init k8s:release_group=magnum]" subsys=allocator level=info msg="Removed endpoint" containerID=30ee52d62c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=302 identity=14947 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/magnum-rabbit-init-x8tgf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 3383c8f9-3c79-40d0-ade3-593b0bdaa6d8 default }" containerID=434b81d750bc3f7d33bb86cfe6988d05739494df47ea69def767e64aaccd883e datapathConfiguration="&{false false false false false }" interface=lxc8b53657fd05d k8sPodName=openstack/magnum-ks-service-zszbk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=434b81d750 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3861 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/magnum-ks-service-zszbk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=434b81d750 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3861 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=690fee46-644d-422f-a44a-c1f343418e39,k8s:batch.kubernetes.io/job-name=magnum-ks-service,k8s:component=ks-service,k8s:controller-uid=690fee46-644d-422f-a44a-c1f343418e39,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-ks-service,k8s:release_group=magnum" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/magnum-ks-service-zszbk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:batch.kubernetes.io/controller-uid=690fee46-644d-422f-a44a-c1f343418e39;k8s:batch.kubernetes.io/job-name=magnum-ks-service;k8s:component=ks-service;k8s:controller-uid=690fee46-644d-422f-a44a-c1f343418e39;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=magnum-ks-service;k8s:release_group=magnum;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=434b81d750 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3861 identity=1187 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=690fee46-644d-422f-a44a-c1f343418e39,k8s:batch.kubernetes.io/job-name=magnum-ks-service,k8s:component=ks-service,k8s:controller-uid=690fee46-644d-422f-a44a-c1f343418e39,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-ks-service,k8s:release_group=magnum" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/magnum-ks-service-zszbk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=434b81d750 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3861 identity=1187 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/magnum-ks-service-zszbk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=434b81d750 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3861 identity=1187 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/magnum-ks-service-zszbk subsys=endpoint level=info msg="Successful endpoint creation" containerID=434b81d750 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3861 identity=1187 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/magnum-ks-service-zszbk subsys=daemon level=info msg="Delete endpoint request" containerID=6cc53ebe3a endpointID=2941 k8sNamespace=openstack k8sPodName=nova-ks-service-bdxt7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=9e94ce61-3379-4738-b9d0-ee273d48bce5 k8s:batch.kubernetes.io/job-name=nova-ks-service k8s:component=ks-service k8s:controller-uid=9e94ce61-3379-4738-b9d0-ee273d48bce5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-service k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=6cc53ebe3a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2941 identity=52621 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/nova-ks-service-bdxt7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.113 dba4138f-747f-4a1e-90da-e353919751c2 default }" containerID=987cd44e9c6a3eae5840dcb36e16eb2d5a767bc88e0881fbb352422b7ab62937 datapathConfiguration="&{false false false false false }" interface=lxc4c8df8df83c9 k8sPodName=openstack/nova-ks-endpoints-72xtc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=987cd44e9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=927 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/nova-ks-endpoints-72xtc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=987cd44e9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=927 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=6d691241-b443-472c-863e-2f90c341a7cf,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=6d691241-b443-472c-863e-2f90c341a7cf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/nova-ks-endpoints-72xtc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=987cd44e9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=927 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.113 ipv6= k8sPodName=openstack/nova-ks-endpoints-72xtc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=6d691241-b443-472c-863e-2f90c341a7cf;k8s:batch.kubernetes.io/job-name=nova-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=6d691241-b443-472c-863e-2f90c341a7cf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-endpoints;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=987cd44e9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=927 identity=49664 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=6d691241-b443-472c-863e-2f90c341a7cf,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=6d691241-b443-472c-863e-2f90c341a7cf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/nova-ks-endpoints-72xtc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=987cd44e9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=927 identity=49664 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/nova-ks-endpoints-72xtc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=987cd44e9c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=927 identity=49664 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/nova-ks-endpoints-72xtc subsys=endpoint level=info msg="Successful endpoint creation" containerID=987cd44e9c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=927 identity=49664 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/nova-ks-endpoints-72xtc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=987cd44e9c endpointID=927 k8sNamespace=openstack k8sPodName=nova-ks-endpoints-72xtc subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=6d691241-b443-472c-863e-2f90c341a7cf k8s:batch.kubernetes.io/job-name=nova-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=6d691241-b443-472c-863e-2f90c341a7cf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-endpoints k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=987cd44e9c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=927 identity=49664 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/nova-ks-endpoints-72xtc subsys=endpoint level=info msg="Delete endpoint request" containerID=434b81d750 endpointID=3861 k8sNamespace=openstack k8sPodName=magnum-ks-service-zszbk subsys=daemon level=info msg="Releasing key" key="[k8s:application=magnum k8s:batch.kubernetes.io/controller-uid=690fee46-644d-422f-a44a-c1f343418e39 k8s:batch.kubernetes.io/job-name=magnum-ks-service k8s:component=ks-service k8s:controller-uid=690fee46-644d-422f-a44a-c1f343418e39 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=magnum-ks-service k8s:release_group=magnum]" subsys=allocator level=info msg="Removed endpoint" containerID=434b81d750 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3861 identity=1187 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/magnum-ks-service-zszbk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 f2b78096-7e93-4065-a075-522511b8a188 default }" containerID=a2fc2b365497fab0749da39ee2096a566eff0ef0fbfcdb103de94e9252b61d2d datapathConfiguration="&{false false false false false }" interface=lxceaab9191be72 k8sPodName=openstack/magnum-ks-endpoints-9ngwh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2fc2b3654 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3848 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/magnum-ks-endpoints-9ngwh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2fc2b3654 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3848 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=4ec541ae-4012-440a-a512-eafa6a4d1d30,k8s:batch.kubernetes.io/job-name=magnum-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=4ec541ae-4012-440a-a512-eafa6a4d1d30,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-ks-endpoints,k8s:release_group=magnum" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/magnum-ks-endpoints-9ngwh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:batch.kubernetes.io/controller-uid=4ec541ae-4012-440a-a512-eafa6a4d1d30;k8s:batch.kubernetes.io/job-name=magnum-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=4ec541ae-4012-440a-a512-eafa6a4d1d30;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=magnum-ks-endpoints;k8s:release_group=magnum;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a2fc2b3654 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3848 identity=7948 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=4ec541ae-4012-440a-a512-eafa6a4d1d30,k8s:batch.kubernetes.io/job-name=magnum-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=4ec541ae-4012-440a-a512-eafa6a4d1d30,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-ks-endpoints,k8s:release_group=magnum" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/magnum-ks-endpoints-9ngwh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a2fc2b3654 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3848 identity=7948 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/magnum-ks-endpoints-9ngwh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 0d0d850a-aafa-4e6d-9188-33b7a0cf0a97 default }" containerID=589bad8132c59584551b1b1da19f621e7acb998471cda78dd3cb72539bfde75c datapathConfiguration="&{false false false false false }" interface=lxc386ef4cb2a26 k8sPodName=openstack/nova-ks-user-xbwtt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=589bad8132 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=632 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/nova-ks-user-xbwtt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=589bad8132 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=632 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=fa6fb178-8d61-4c7b-81ca-70f149f4ddce,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=fa6fb178-8d61-4c7b-81ca-70f149f4ddce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/nova-ks-user-xbwtt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=a2fc2b3654 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3848 identity=7948 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/magnum-ks-endpoints-9ngwh subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2fc2b3654 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3848 identity=7948 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/magnum-ks-endpoints-9ngwh subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=fa6fb178-8d61-4c7b-81ca-70f149f4ddce;k8s:batch.kubernetes.io/job-name=nova-ks-user;k8s:component=ks-user;k8s:controller-uid=fa6fb178-8d61-4c7b-81ca-70f149f4ddce;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-user;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=589bad8132 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=632 identity=59155 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=fa6fb178-8d61-4c7b-81ca-70f149f4ddce,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=fa6fb178-8d61-4c7b-81ca-70f149f4ddce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/nova-ks-user-xbwtt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=589bad8132 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=632 identity=59155 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/nova-ks-user-xbwtt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=589bad8132 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=632 identity=59155 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/nova-ks-user-xbwtt subsys=endpoint level=info msg="Successful endpoint creation" containerID=589bad8132 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=632 identity=59155 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/nova-ks-user-xbwtt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.102 dfe4a2e3-0a5b-4ccb-9137-797fde83fa31 default }" containerID=53f9cffb99059ff81086d7976d18106283930a884f8f129490ca46c03a5082bb datapathConfiguration="&{false false false false false }" interface=lxc660466a2adf2 k8sPodName=openstack/heat-engine-cleaner-29618635-cpblf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=53f9cffb99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618635-cpblf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=53f9cffb99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=2651d1bf-bfd6-4fad-91c8-4cb66ec052ca,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29618635,k8s:component=engine-cleaner,k8s:controller-uid=2651d1bf-bfd6-4fad-91c8-4cb66ec052ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29618635,k8s:release_group=heat" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618635-cpblf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=2651d1bf-bfd6-4fad-91c8-4cb66ec052ca;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29618635;k8s:component=engine-cleaner;k8s:controller-uid=2651d1bf-bfd6-4fad-91c8-4cb66ec052ca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29618635;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=53f9cffb99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 identity=14854 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=2651d1bf-bfd6-4fad-91c8-4cb66ec052ca,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29618635,k8s:component=engine-cleaner,k8s:controller-uid=2651d1bf-bfd6-4fad-91c8-4cb66ec052ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29618635,k8s:release_group=heat" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618635-cpblf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=53f9cffb99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 identity=14854 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618635-cpblf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=53f9cffb99 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1809 identity=14854 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618635-cpblf subsys=endpoint level=info msg="Successful endpoint creation" containerID=53f9cffb99 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1809 identity=14854 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618635-cpblf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a2fc2b3654 endpointID=3848 k8sNamespace=openstack k8sPodName=magnum-ks-endpoints-9ngwh subsys=daemon level=info msg="Releasing key" key="[k8s:application=magnum k8s:batch.kubernetes.io/controller-uid=4ec541ae-4012-440a-a512-eafa6a4d1d30 k8s:batch.kubernetes.io/job-name=magnum-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=4ec541ae-4012-440a-a512-eafa6a4d1d30 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=magnum-ks-endpoints k8s:release_group=magnum]" subsys=allocator level=info msg="Removed endpoint" containerID=a2fc2b3654 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3848 identity=7948 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/magnum-ks-endpoints-9ngwh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 47a11c9c-dd35-4f32-9973-fcdae6112477 default }" containerID=29928f98483557196cf21c6fb06ca7360fc3bc5fc6d1fc06c280d551070b0f4b datapathConfiguration="&{false false false false false }" interface=lxc70398e2c8f5f k8sPodName=openstack/magnum-ks-user-f5f8s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=29928f9848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1332 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/magnum-ks-user-f5f8s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=29928f9848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1332 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=4ff98d66-c9d0-45d4-a2f8-b304dbcb294d,k8s:batch.kubernetes.io/job-name=magnum-ks-user,k8s:component=ks-user,k8s:controller-uid=4ff98d66-c9d0-45d4-a2f8-b304dbcb294d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-ks-user,k8s:release_group=magnum" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/magnum-ks-user-f5f8s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:batch.kubernetes.io/controller-uid=4ff98d66-c9d0-45d4-a2f8-b304dbcb294d;k8s:batch.kubernetes.io/job-name=magnum-ks-user;k8s:component=ks-user;k8s:controller-uid=4ff98d66-c9d0-45d4-a2f8-b304dbcb294d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=magnum-ks-user;k8s:release_group=magnum;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=29928f9848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1332 identity=34693 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=4ff98d66-c9d0-45d4-a2f8-b304dbcb294d,k8s:batch.kubernetes.io/job-name=magnum-ks-user,k8s:component=ks-user,k8s:controller-uid=4ff98d66-c9d0-45d4-a2f8-b304dbcb294d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-ks-user,k8s:release_group=magnum" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/magnum-ks-user-f5f8s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=29928f9848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1332 identity=34693 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/magnum-ks-user-f5f8s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=29928f9848 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1332 identity=34693 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/magnum-ks-user-f5f8s subsys=endpoint level=info msg="Successful endpoint creation" containerID=29928f9848 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1332 identity=34693 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/magnum-ks-user-f5f8s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=53f9cffb99 endpointID=1809 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29618635-cpblf subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=2651d1bf-bfd6-4fad-91c8-4cb66ec052ca k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29618635 k8s:component=engine-cleaner k8s:controller-uid=2651d1bf-bfd6-4fad-91c8-4cb66ec052ca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29618635 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=53f9cffb99 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1809 identity=14854 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618635-cpblf subsys=endpoint level=info msg="Delete endpoint request" containerID=589bad8132 endpointID=632 k8sNamespace=openstack k8sPodName=nova-ks-user-xbwtt subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=fa6fb178-8d61-4c7b-81ca-70f149f4ddce k8s:batch.kubernetes.io/job-name=nova-ks-user k8s:component=ks-user k8s:controller-uid=fa6fb178-8d61-4c7b-81ca-70f149f4ddce k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-user k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=589bad8132 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=632 identity=59155 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/nova-ks-user-xbwtt subsys=endpoint level=info msg="Delete endpoint request" containerID=29928f9848 endpointID=1332 k8sNamespace=openstack k8sPodName=magnum-ks-user-f5f8s subsys=daemon level=info msg="Releasing key" key="[k8s:application=magnum k8s:batch.kubernetes.io/controller-uid=4ff98d66-c9d0-45d4-a2f8-b304dbcb294d k8s:batch.kubernetes.io/job-name=magnum-ks-user k8s:component=ks-user k8s:controller-uid=4ff98d66-c9d0-45d4-a2f8-b304dbcb294d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=magnum-ks-user k8s:release_group=magnum]" subsys=allocator level=info msg="Removed endpoint" containerID=29928f9848 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1332 identity=34693 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/magnum-ks-user-f5f8s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 53e4efc2-5022-45e4-87e8-6d18b55f319d default }" containerID=227216c028ac66453c4cfd5afd71ea3f01a5cdb22aaf9a0e3244ca1def5c21ba datapathConfiguration="&{false false false false false }" interface=lxcab4d738991e2 k8sPodName=openstack/magnum-domain-ks-user-j7xff labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=227216c028 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3003 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/magnum-domain-ks-user-j7xff subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=227216c028 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3003 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=76fdcd8b-ba61-477b-8694-82c60ea3d043,k8s:batch.kubernetes.io/job-name=magnum-domain-ks-user,k8s:component=ks-user,k8s:controller-uid=76fdcd8b-ba61-477b-8694-82c60ea3d043,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-user-domain,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-domain-ks-user,k8s:release_group=magnum" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/magnum-domain-ks-user-j7xff subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:batch.kubernetes.io/controller-uid=76fdcd8b-ba61-477b-8694-82c60ea3d043;k8s:batch.kubernetes.io/job-name=magnum-domain-ks-user;k8s:component=ks-user;k8s:controller-uid=76fdcd8b-ba61-477b-8694-82c60ea3d043;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-user-domain;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=magnum-domain-ks-user;k8s:release_group=magnum;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=227216c028 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3003 identity=964 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=76fdcd8b-ba61-477b-8694-82c60ea3d043,k8s:batch.kubernetes.io/job-name=magnum-domain-ks-user,k8s:component=ks-user,k8s:controller-uid=76fdcd8b-ba61-477b-8694-82c60ea3d043,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-user-domain,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-domain-ks-user,k8s:release_group=magnum" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/magnum-domain-ks-user-j7xff oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=227216c028 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3003 identity=964 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/magnum-domain-ks-user-j7xff subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=227216c028 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3003 identity=964 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/magnum-domain-ks-user-j7xff subsys=endpoint level=info msg="Successful endpoint creation" containerID=227216c028 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3003 identity=964 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/magnum-domain-ks-user-j7xff subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=390206f199 endpointID=483 k8sNamespace=openstack k8sPodName=nova-bootstrap-khz6s subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=35ae2559-3eed-4681-b491-ab657c760d5a k8s:batch.kubernetes.io/job-name=nova-bootstrap k8s:component=bootstrap k8s:controller-uid=35ae2559-3eed-4681-b491-ab657c760d5a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-bootstrap k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=390206f199 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=483 identity=5519 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/nova-bootstrap-khz6s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 9d522466-c00f-4b45-a44b-096e78700042 default }" containerID=dc996f2fda1a674579a1c4c28fbd266b060133db813b648ac8cc21d3445bf7e8 datapathConfiguration="&{false false false false false }" interface=lxc0dab6424622e k8sPodName=local-path-storage/helper-pod-create-pvc-5a945b47-7e24-44b1-84f4-ddbcb348c948 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc996f2fda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3575 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5a945b47-7e24-44b1-84f4-ddbcb348c948 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc996f2fda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3575 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5a945b47-7e24-44b1-84f4-ddbcb348c948 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc996f2fda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3575 identity=7112 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5a945b47-7e24-44b1-84f4-ddbcb348c948 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc996f2fda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3575 identity=7112 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5a945b47-7e24-44b1-84f4-ddbcb348c948 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dc996f2fda datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3575 identity=7112 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5a945b47-7e24-44b1-84f4-ddbcb348c948 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc996f2fda datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3575 identity=7112 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5a945b47-7e24-44b1-84f4-ddbcb348c948 subsys=daemon level=info msg="Delete endpoint request" containerID=dc996f2fda endpointID=3575 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5a945b47-7e24-44b1-84f4-ddbcb348c948 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=dc996f2fda datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3575 identity=7112 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5a945b47-7e24-44b1-84f4-ddbcb348c948 subsys=endpoint level=info msg="Delete endpoint request" containerID=227216c028 endpointID=3003 k8sNamespace=openstack k8sPodName=magnum-domain-ks-user-j7xff subsys=daemon level=info msg="Releasing key" key="[k8s:application=magnum k8s:batch.kubernetes.io/controller-uid=76fdcd8b-ba61-477b-8694-82c60ea3d043 k8s:batch.kubernetes.io/job-name=magnum-domain-ks-user k8s:component=ks-user k8s:controller-uid=76fdcd8b-ba61-477b-8694-82c60ea3d043 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-user-domain k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=magnum-domain-ks-user k8s:release_group=magnum]" subsys=allocator level=info msg="Removed endpoint" containerID=227216c028 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3003 identity=964 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/magnum-domain-ks-user-j7xff subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 384f1d7e-392c-4e29-a43a-e9170a530935 default }" containerID=68079ea413406f11d9a292dd82dc3f29272222ba03e25adcff6271169ce8ba23 datapathConfiguration="&{false false false false false }" interface=lxc69fa87582951 k8sPodName=openstack/rabbitmq-neutron-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68079ea413 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=823 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68079ea413 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=823 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-neutron;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68079ea413 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=823 identity=21772 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68079ea413 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=823 identity=21772 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=68079ea413 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=823 identity=21772 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=68079ea413 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=823 identity=21772 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.149 382f92a8-3f69-4fc8-ad9d-311534ca510b default }" containerID=b6d760000320c626b4804ea08641f4e320261dcc8ae2b4035f9befdd3ebd1bf9 datapathConfiguration="&{false false false false false }" interface=lxcbc030141b69e k8sPodName=openstack/magnum-cluster-api-proxy-xs8fr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b6d7600003 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2611 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/magnum-cluster-api-proxy-xs8fr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b6d7600003 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2611 identityLabels="k8s:application=magnum,k8s:component=cluster-api-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-conductor,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/magnum-cluster-api-proxy-xs8fr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:component=cluster-api-proxy;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-conductor;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b6d7600003 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2611 identity=7313 identityLabels="k8s:application=magnum,k8s:component=cluster-api-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-conductor,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/magnum-cluster-api-proxy-xs8fr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b6d7600003 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2611 identity=7313 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/magnum-cluster-api-proxy-xs8fr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b6d7600003 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2611 identity=7313 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/magnum-cluster-api-proxy-xs8fr subsys=endpoint level=info msg="Successful endpoint creation" containerID=b6d7600003 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2611 identity=7313 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/magnum-cluster-api-proxy-xs8fr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.130 ce8c36c6-6365-48ca-9de7-4750ab8468ce default }" containerID=894c4c4ffb98fd220e4a1e0124171227193d577c95505f648176a15fa9ad801b datapathConfiguration="&{false false false false false }" interface=lxca7008fd92c6c k8sPodName=openstack/magnum-registry-c45778976-cphn4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=894c4c4ffb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2511 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/magnum-registry-c45778976-cphn4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=894c4c4ffb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2511 identityLabels="k8s:application=magnum,k8s:component=registry,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/magnum-registry-c45778976-cphn4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=894c4c4ffb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2511 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.130 ipv6= k8sPodName=openstack/magnum-registry-c45778976-cphn4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:component=registry;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=894c4c4ffb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2511 identity=27555 identityLabels="k8s:application=magnum,k8s:component=registry,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/magnum-registry-c45778976-cphn4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=894c4c4ffb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2511 identity=27555 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/magnum-registry-c45778976-cphn4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=894c4c4ffb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2511 identity=27555 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/magnum-registry-c45778976-cphn4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=894c4c4ffb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2511 identity=27555 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/magnum-registry-c45778976-cphn4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=warning msg="Network status error received, restarting client connections" error="an error on the server (\"[+]ping ok\\n[+]log ok\\n[-]etcd failed: reason withheld\\n[+]poststarthook/start-kube-apiserver-admission-initializer ok\\n[+]poststarthook/generic-apiserver-start-informers ok\\n[+]poststarthook/priority-and-fairness-config-consumer ok\\n[+]poststarthook/priority-and-fairness-filter ok\\n[+]poststarthook/storage-object-count-tracker-hook ok\\n[+]poststarthook/start-apiextensions-informers ok\\n[+]poststarthook/start-apiextensions-controllers ok\\n[+]poststarthook/crd-informer-synced ok\\n[+]poststarthook/start-service-ip-repair-controllers ok\\n[+]poststarthook/rbac/bootstrap-roles ok\\n[+]poststarthook/scheduling/bootstrap-system-priority-classes ok\\n[+]poststarthook/priority-and-fairness-config-producer ok\\n[+]poststarthook/start-system-namespaces-controller ok\\n[+]poststarthook/bootstrap-controller ok\\n[+]poststarthook/start-cluster-authentication-info-controller ok\\n[+]poststarthook/start-kube-apiserver-identity-lease-controller ok\\n[+]poststarthook/start-deprecated-kube-apiserver-identity-lease-garbage-collector ok\\n[+]poststarthook/start-kube-apiserver-identity-lease-garbage-collector ok\\n[+]poststarthook/start-legacy-token-tracking-controller ok\\n[+]poststarthook/aggregator-reload-proxy-client-cert ok\\n[+]poststarthook/start-kube-aggregator-informers ok\\n[+]poststarthook/apiservice-registration-controller ok\\n[+]poststarthook/apiservice-status-available-controller ok\\n[+]poststarthook/kube-apiserver-autoregistration ok\\n[+]autoregister-completion ok\\n[+]poststarthook/apiservice-openapi-controller ok\\n[+]poststarthook/apiservice-openapiv3-controller ok\\n[+]poststarthook/apiservice-discovery-controller ok\\nhealthz check failed\") has prevented the request from succeeding (get healthz.meta.k8s.io)" subsys=k8s-client level=warning msg="Network status error received, restarting client connections" error="an error on the server (\"[+]ping ok\\n[+]log ok\\n[-]etcd failed: reason withheld\\n[+]poststarthook/start-kube-apiserver-admission-initializer ok\\n[+]poststarthook/generic-apiserver-start-informers ok\\n[+]poststarthook/priority-and-fairness-config-consumer ok\\n[+]poststarthook/priority-and-fairness-filter ok\\n[+]poststarthook/storage-object-count-tracker-hook ok\\n[+]poststarthook/start-apiextensions-informers ok\\n[+]poststarthook/start-apiextensions-controllers ok\\n[+]poststarthook/crd-informer-synced ok\\n[+]poststarthook/start-service-ip-repair-controllers ok\\n[+]poststarthook/rbac/bootstrap-roles ok\\n[+]poststarthook/scheduling/bootstrap-system-priority-classes ok\\n[+]poststarthook/priority-and-fairness-config-producer ok\\n[+]poststarthook/start-system-namespaces-controller ok\\n[+]poststarthook/bootstrap-controller ok\\n[+]poststarthook/start-cluster-authentication-info-controller ok\\n[+]poststarthook/start-kube-apiserver-identity-lease-controller ok\\n[+]poststarthook/start-deprecated-kube-apiserver-identity-lease-garbage-collector ok\\n[+]poststarthook/start-kube-apiserver-identity-lease-garbage-collector ok\\n[+]poststarthook/start-legacy-token-tracking-controller ok\\n[+]poststarthook/aggregator-reload-proxy-client-cert ok\\n[+]poststarthook/start-kube-aggregator-informers ok\\n[+]poststarthook/apiservice-registration-controller ok\\n[+]poststarthook/apiservice-status-available-controller ok\\n[+]poststarthook/kube-apiserver-autoregistration ok\\n[+]autoregister-completion ok\\n[+]poststarthook/apiservice-openapi-controller ok\\n[+]poststarthook/apiservice-openapiv3-controller ok\\n[+]poststarthook/apiservice-discovery-controller ok\\nhealthz check failed\") has prevented the request from succeeding (get healthz.meta.k8s.io)" subsys=k8s-client level=info msg="Create endpoint request" addressing="&{10.0.0.111 726fe80b-60b7-43e0-b340-9687db3b64f0 default }" containerID=55b933a5bfe17135a16442bac12a0d3924b7be5a48f0a7279e30254bd7398eb1 datapathConfiguration="&{false false false false false }" interface=lxc476df4669a4d k8sPodName=openstack/keystone-fernet-rotate-29618640-wphzf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=55b933a5bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4024 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-fernet-rotate-29618640-wphzf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=55b933a5bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4024 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0e58419e-cb35-46b9-b5fe-45fc200fda4f,k8s:batch.kubernetes.io/job-name=keystone-fernet-rotate-29618640,k8s:component=fernet-rotate,k8s:controller-uid=0e58419e-cb35-46b9-b5fe-45fc200fda4f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-rotate,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-rotate-29618640,k8s:release_group=keystone" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-fernet-rotate-29618640-wphzf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0e58419e-cb35-46b9-b5fe-45fc200fda4f;k8s:batch.kubernetes.io/job-name=keystone-fernet-rotate-29618640;k8s:component=fernet-rotate;k8s:controller-uid=0e58419e-cb35-46b9-b5fe-45fc200fda4f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-rotate;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-rotate-29618640;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=55b933a5bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4024 identity=441 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0e58419e-cb35-46b9-b5fe-45fc200fda4f,k8s:batch.kubernetes.io/job-name=keystone-fernet-rotate-29618640,k8s:component=fernet-rotate,k8s:controller-uid=0e58419e-cb35-46b9-b5fe-45fc200fda4f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-rotate,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-rotate-29618640,k8s:release_group=keystone" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-fernet-rotate-29618640-wphzf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=55b933a5bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4024 identity=441 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-fernet-rotate-29618640-wphzf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 b505f45a-0d53-4ae1-8317-0b3225c2eb1f default }" containerID=f30ae5d74794c182895d48cb7458266df3b5b6860fdd1394a90838462bcee50c datapathConfiguration="&{false false false false false }" interface=lxc1b5d742e80d2 k8sPodName=openstack/nova-cell-setup-29618640-2tg8h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f30ae5d747 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1239 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/nova-cell-setup-29618640-2tg8h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f30ae5d747 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1239 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=dbdb56f1-787f-45bc-9dbc-114a294ed3a8,k8s:batch.kubernetes.io/job-name=nova-cell-setup-29618640,k8s:component=cell-setup,k8s:controller-uid=dbdb56f1-787f-45bc-9dbc-114a294ed3a8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup-29618640,k8s:release_group=nova" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/nova-cell-setup-29618640-2tg8h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.131 3629139d-0fcb-4258-b2bd-60517c0c515e default }" containerID=fef000f44b8eaaba50f14ec033aa34dde19881b4236cd502844f54f5de0fc11d datapathConfiguration="&{false false false false false }" interface=lxcf3d92cf5cad2 k8sPodName=openstack/heat-engine-cleaner-29618640-hqlq8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fef000f44b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3957 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618640-hqlq8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fef000f44b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3957 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=29aa69f2-da5a-44f7-a8fd-b8142024a97f,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29618640,k8s:component=engine-cleaner,k8s:controller-uid=29aa69f2-da5a-44f7-a8fd-b8142024a97f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29618640,k8s:release_group=heat" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618640-hqlq8 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=dbdb56f1-787f-45bc-9dbc-114a294ed3a8;k8s:batch.kubernetes.io/job-name=nova-cell-setup-29618640;k8s:component=cell-setup;k8s:controller-uid=dbdb56f1-787f-45bc-9dbc-114a294ed3a8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup-29618640;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f30ae5d747 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1239 identity=25803 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=dbdb56f1-787f-45bc-9dbc-114a294ed3a8,k8s:batch.kubernetes.io/job-name=nova-cell-setup-29618640,k8s:component=cell-setup,k8s:controller-uid=dbdb56f1-787f-45bc-9dbc-114a294ed3a8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup-29618640,k8s:release_group=nova" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/nova-cell-setup-29618640-2tg8h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f30ae5d747 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1239 identity=25803 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/nova-cell-setup-29618640-2tg8h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=29aa69f2-da5a-44f7-a8fd-b8142024a97f;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29618640;k8s:component=engine-cleaner;k8s:controller-uid=29aa69f2-da5a-44f7-a8fd-b8142024a97f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29618640;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fef000f44b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3957 identity=14545 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=29aa69f2-da5a-44f7-a8fd-b8142024a97f,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29618640,k8s:component=engine-cleaner,k8s:controller-uid=29aa69f2-da5a-44f7-a8fd-b8142024a97f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29618640,k8s:release_group=heat" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618640-hqlq8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fef000f44b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3957 identity=14545 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618640-hqlq8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 f3d8a905-5ebb-4f70-99a0-832625d5e3f6 default }" containerID=7315255859bcb79e5500120f508edd42fb38e6bf0319bef69a571de23b55a742 datapathConfiguration="&{false false false false false }" interface=lxc81714cb5aa87 k8sPodName=openstack/nova-service-cleaner-29618640-strmx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7315255859 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2984 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-service-cleaner-29618640-strmx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7315255859 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2984 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=8cf1c00b-dd4e-4329-9265-77e2dd524aa6,k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29618640,k8s:component=service-cleaner,k8s:controller-uid=8cf1c00b-dd4e-4329-9265-77e2dd524aa6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-service-cleaner-29618640,k8s:release_group=nova" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-service-cleaner-29618640-strmx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=8cf1c00b-dd4e-4329-9265-77e2dd524aa6;k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29618640;k8s:component=service-cleaner;k8s:controller-uid=8cf1c00b-dd4e-4329-9265-77e2dd524aa6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-service-cleaner-29618640;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7315255859 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2984 identity=16182 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=8cf1c00b-dd4e-4329-9265-77e2dd524aa6,k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29618640,k8s:component=service-cleaner,k8s:controller-uid=8cf1c00b-dd4e-4329-9265-77e2dd524aa6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-service-cleaner-29618640,k8s:release_group=nova" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-service-cleaner-29618640-strmx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7315255859 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2984 identity=16182 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-service-cleaner-29618640-strmx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=55b933a5bf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4024 identity=441 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-fernet-rotate-29618640-wphzf subsys=endpoint level=info msg="Successful endpoint creation" containerID=55b933a5bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4024 identity=441 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-fernet-rotate-29618640-wphzf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fef000f44b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3957 identity=14545 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618640-hqlq8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fef000f44b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3957 identity=14545 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618640-hqlq8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f30ae5d747 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1239 identity=25803 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/nova-cell-setup-29618640-2tg8h subsys=endpoint level=info msg="Successful endpoint creation" containerID=f30ae5d747 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1239 identity=25803 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/nova-cell-setup-29618640-2tg8h subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7315255859 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2984 identity=16182 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-service-cleaner-29618640-strmx subsys=endpoint level=info msg="Successful endpoint creation" containerID=7315255859 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2984 identity=16182 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-service-cleaner-29618640-strmx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fef000f44b endpointID=3957 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29618640-hqlq8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=29aa69f2-da5a-44f7-a8fd-b8142024a97f k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29618640 k8s:component=engine-cleaner k8s:controller-uid=29aa69f2-da5a-44f7-a8fd-b8142024a97f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29618640 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=fef000f44b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3957 identity=14545 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618640-hqlq8 subsys=endpoint level=info msg="Delete endpoint request" containerID=55b933a5bf endpointID=4024 k8sNamespace=openstack k8sPodName=keystone-fernet-rotate-29618640-wphzf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0e58419e-cb35-46b9-b5fe-45fc200fda4f k8s:batch.kubernetes.io/job-name=keystone-fernet-rotate-29618640 k8s:component=fernet-rotate k8s:controller-uid=0e58419e-cb35-46b9-b5fe-45fc200fda4f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-rotate k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-rotate-29618640 k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=55b933a5bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4024 identity=441 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-fernet-rotate-29618640-wphzf subsys=endpoint level=info msg="Delete endpoint request" containerID=7315255859 endpointID=2984 k8sNamespace=openstack k8sPodName=nova-service-cleaner-29618640-strmx subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=8cf1c00b-dd4e-4329-9265-77e2dd524aa6 k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29618640 k8s:component=service-cleaner k8s:controller-uid=8cf1c00b-dd4e-4329-9265-77e2dd524aa6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-service-cleaner-29618640 k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=7315255859 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2984 identity=16182 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-service-cleaner-29618640-strmx subsys=endpoint