level=info msg="Memory available for map entries (0.003% of 67421626368B): 168554065B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="883.753µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="46.701µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="861.782µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="6.84µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=114.600032ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="13.45µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="18.11µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="52.822µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="60.832µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="72.832µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="791.77µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.59µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=14.349554ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=5.397356ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="33.581µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="37.601µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="241.157µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="98.383µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="69.302µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=49.509234ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="73.481µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="12.98µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="1.58µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.169.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.183784ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="13.19µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.6653ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="1.94µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.721484ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="5.271µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.34µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="5.19µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.69µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.37µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="50.772µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="16.801µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="50.262µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="322.368µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.66µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="10.871µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="234.496µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration="939.293µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.285962ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="5.301µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="62.652µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.169 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.169 ipAddr.ipv6="" k8sNodeIP=199.204.45.169 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.169" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.43" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.169" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.169} {CiliumInternalIP 10.0.0.43}] 10.0.0.0/24 [] [] 10.0.0.77 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:46837" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.471182564s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="20.391µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="7.941µs" function="*job.group.Start" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="43.772µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="5.4µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.530507184s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=298.763957ms file-path=/var/run/cilium/state/templates/9f2ceb3348a90f62e46f89dd7e01183f6cfd3ae1c9a6389796c91dfdf00faaa1/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=410 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 8b9c3bf2-441c-46de-8e66-ccd9a2ca499b default }" containerID=91e87b9f2b80fe455548ad22d43f1d99f278385fd27acc59790a2d32f7c8f832 datapathConfiguration="&{false false false false false }" interface=lxc534fbeefce6f k8sPodName=kube-system/coredns-7c96b6546b-68zzr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=91e87b9f2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=508 ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-68zzr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=91e87b9f2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=508 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-68zzr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=91e87b9f2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=508 identity=40431 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-68zzr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=91e87b9f2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=508 identity=40431 ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-68zzr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.199 840bd0c5-0c6d-42cb-84a0-12f7db09194e default }" containerID=f9b6d60d5045878c29b9979b747a3236931487141ea44721a6d711f4254f0735 datapathConfiguration="&{false false false false false }" interface=lxcb0eb84b58243 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-sgff7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9b6d60d50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2778 ipv4=10.0.0.199 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-sgff7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9b6d60d50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2778 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=09537e61-4d03-4387-9a67-86e37007fa5f,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=09537e61-4d03-4387-9a67-86e37007fa5f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.199 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-sgff7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=09537e61-4d03-4387-9a67-86e37007fa5f;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=09537e61-4d03-4387-9a67-86e37007fa5f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f9b6d60d50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2778 identity=42551 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=09537e61-4d03-4387-9a67-86e37007fa5f,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=09537e61-4d03-4387-9a67-86e37007fa5f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.199 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-sgff7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9b6d60d50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2778 identity=42551 ipv4=10.0.0.199 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-sgff7 subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 ipv4=10.0.0.77 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 identityLabels="reserved:health" ipv4=10.0.0.77 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 identity=4 identityLabels="reserved:health" ipv4=10.0.0.77 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.093800346s file-path=/var/run/cilium/state/templates/e99860f4482e73dbbf8325ec77dca3a3e56fec516476cd461127ae69e9de243c/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=17 identity=4 ipv4=10.0.0.77 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=91e87b9f2b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=508 identity=40431 ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-68zzr subsys=endpoint level=info msg="Successful endpoint creation" containerID=91e87b9f2b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=508 identity=40431 ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-68zzr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f9b6d60d50 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2778 identity=42551 ipv4=10.0.0.199 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-sgff7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9b6d60d50 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2778 identity=42551 ipv4=10.0.0.199 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-sgff7 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f9b6d60d50 endpointID=2778 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-sgff7 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=09537e61-4d03-4387-9a67-86e37007fa5f k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=09537e61-4d03-4387-9a67-86e37007fa5f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=f9b6d60d50 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2778 identity=42551 ipv4=10.0.0.199 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-sgff7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 9542d094-d4a6-464d-951e-75979f3a80a7 default }" containerID=4f2be943df125d3c2fcc4036a872fcb4a564d68977d483a9baee47017f2cba20 datapathConfiguration="&{false false false false false }" interface=lxcc13ae8c6d58b k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jmblh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f2be943df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3903 ipv4=10.0.0.128 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jmblh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f2be943df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3903 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.128 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jmblh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4f2be943df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3903 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.128 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jmblh line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4f2be943df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3903 identity=13919 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.128 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jmblh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4f2be943df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3903 identity=13919 ipv4=10.0.0.128 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jmblh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4f2be943df datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3903 identity=13919 ipv4=10.0.0.128 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jmblh subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f2be943df datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3903 identity=13919 ipv4=10.0.0.128 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jmblh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=410 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00410 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00410 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00410 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00410:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=410 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 db8fe8b7-a19a-4250-be9b-60c1667d8abf default }" containerID=749debce671a1c2d51e629782aa08d270e9f94cca31e45698743863f7c3e51ce datapathConfiguration="&{false false false false false }" interface=lxca52e0c06faf5 k8sPodName=kube-system/coredns-67659f764b-bcfmh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=749debce67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1551 ipv4=10.0.0.176 ipv6= k8sPodName=kube-system/coredns-67659f764b-bcfmh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=749debce67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1551 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.176 ipv6= k8sPodName=kube-system/coredns-67659f764b-bcfmh subsys=endpoint level=info msg="Identity of endpoint changed" containerID=749debce67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1551 identity=40431 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.176 ipv6= k8sPodName=kube-system/coredns-67659f764b-bcfmh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=749debce67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1551 identity=40431 ipv4=10.0.0.176 ipv6= k8sPodName=kube-system/coredns-67659f764b-bcfmh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.98 9d65d2d5-87c1-42fe-8569-f5f4e3161e2f default }" containerID=608db718d8345bd8236db92b3cfe05e621b6eabc85a7daa4e1f225fb46d4d8db datapathConfiguration="&{false false false false false }" interface=lxcdca50cab1cdd k8sPodName=kube-system/coredns-67659f764b-s6m77 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=608db718d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3095 ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-67659f764b-s6m77 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=608db718d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3095 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-67659f764b-s6m77 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=608db718d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3095 identity=40431 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-67659f764b-s6m77 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=608db718d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3095 identity=40431 ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-67659f764b-s6m77 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=608db718d8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3095 identity=40431 ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-67659f764b-s6m77 subsys=endpoint level=info msg="Successful endpoint creation" containerID=608db718d8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3095 identity=40431 ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-67659f764b-s6m77 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=749debce67 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1551 identity=40431 ipv4=10.0.0.176 ipv6= k8sPodName=kube-system/coredns-67659f764b-bcfmh subsys=endpoint level=info msg="Successful endpoint creation" containerID=749debce67 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1551 identity=40431 ipv4=10.0.0.176 ipv6= k8sPodName=kube-system/coredns-67659f764b-bcfmh subsys=daemon level=info msg="Delete endpoint request" containerID=91e87b9f2b endpointID=508 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-68zzr subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=91e87b9f2b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=508 identity=40431 ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-68zzr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 36e45142-b3e5-4e52-ba6e-074e5e3b3816 default }" containerID=c431b2bf83cdbb18dd5b9cee5c9bbcfd9b11f7a81dec7ed535c7df5a44739885 datapathConfiguration="&{false false false false false }" interface=lxc14fb91a38dd8 k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-zrnlw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c431b2bf83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1434 ipv4=10.0.0.74 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-zrnlw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c431b2bf83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1434 identityLabels="k8s:app=ceph-csi-rbd,k8s:chart=ceph-csi-rbd-3.11.0,k8s:component=provisioner,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ceph-csi-rbd-provisioner,k8s:io.kubernetes.pod.namespace=kube-system,k8s:release=ceph-csi-rbd" ipv4=10.0.0.74 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-zrnlw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-csi-rbd;k8s:chart=ceph-csi-rbd-3.11.0;k8s:component=provisioner;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ceph-csi-rbd-provisioner;k8s:io.kubernetes.pod.namespace=kube-system;k8s:release=ceph-csi-rbd;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c431b2bf83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1434 identity=9589 identityLabels="k8s:app=ceph-csi-rbd,k8s:chart=ceph-csi-rbd-3.11.0,k8s:component=provisioner,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ceph-csi-rbd-provisioner,k8s:io.kubernetes.pod.namespace=kube-system,k8s:release=ceph-csi-rbd" ipv4=10.0.0.74 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-zrnlw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c431b2bf83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1434 identity=9589 ipv4=10.0.0.74 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-zrnlw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c431b2bf83 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1434 identity=9589 ipv4=10.0.0.74 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-zrnlw subsys=endpoint level=info msg="Successful endpoint creation" containerID=c431b2bf83 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1434 identity=9589 ipv4=10.0.0.74 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-zrnlw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.173 3849d013-3358-4ca6-baa1-9d2a34b5c62e default }" containerID=ff716dc798d9caeafe386a54d16c1f7c260097ed760fd4cd8cf7644d195a279b datapathConfiguration="&{false false false false false }" interface=lxc1b690f873a9d k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-dnrm4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff716dc798 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1147 ipv4=10.0.0.173 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-dnrm4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff716dc798 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1147 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.173 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-dnrm4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ff716dc798 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1147 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.173 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-dnrm4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff716dc798 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1147 identity=25769 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.173 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-dnrm4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ff716dc798 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1147 identity=25769 ipv4=10.0.0.173 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-dnrm4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 6ee67b37-d8a9-4058-be16-8923c47e6447 default }" containerID=39858f084a776783600c27199bae5e2596292e43172af77c13dcf0855b608933 datapathConfiguration="&{false false false false false }" interface=lxc31c0e883dbc9 k8sPodName=cert-manager/cert-manager-79c48d47db-p2svb labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.68 9a6057bd-7452-4bd8-af02-23847538546e default }" containerID=41f2bdaba56b41cea07b8513776fa094e7225f325bcabe850b269a92bd697d77 datapathConfiguration="&{false false false false false }" interface=lxc5bd1c082f865 k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-zdkfh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39858f084a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1965 ipv4=10.0.0.66 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-p2svb subsys=endpoint level=info msg="New endpoint" containerID=41f2bdaba5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=360 ipv4=10.0.0.68 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-zdkfh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39858f084a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1965 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.66 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-p2svb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=41f2bdaba5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=360 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.68 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-zdkfh subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=39858f084a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1965 identity=15082 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.66 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-p2svb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=39858f084a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1965 identity=15082 ipv4=10.0.0.66 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-p2svb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41f2bdaba5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=360 identity=7313 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.68 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-zdkfh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=41f2bdaba5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=360 identity=7313 ipv4=10.0.0.68 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-zdkfh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ff716dc798 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1147 identity=25769 ipv4=10.0.0.173 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-dnrm4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff716dc798 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1147 identity=25769 ipv4=10.0.0.173 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-dnrm4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=39858f084a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1965 identity=15082 ipv4=10.0.0.66 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-p2svb subsys=endpoint level=info msg="Successful endpoint creation" containerID=39858f084a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1965 identity=15082 ipv4=10.0.0.66 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-p2svb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=41f2bdaba5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=360 identity=7313 ipv4=10.0.0.68 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-zdkfh subsys=endpoint level=info msg="Successful endpoint creation" containerID=41f2bdaba5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=360 identity=7313 ipv4=10.0.0.68 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-zdkfh subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.69 daa8a202-226f-4f15-b14e-76795348dec8 default }" containerID=3f78a34dcbec0871e30a341488ceb791b217d6f026a162e12cd093cb3d51980a datapathConfiguration="&{false false false false false }" interface=lxcaf50794cfb20 k8sPodName=cert-manager/cert-manager-startupapicheck-rbhnt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3f78a34dcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3137 ipv4=10.0.0.69 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rbhnt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3f78a34dcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3137 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=305c0dc2-611e-4795-8592-b2da5bcf49ef,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=305c0dc2-611e-4795-8592-b2da5bcf49ef,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.69 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rbhnt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.15.5;k8s:batch.kubernetes.io/controller-uid=305c0dc2-611e-4795-8592-b2da5bcf49ef;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=305c0dc2-611e-4795-8592-b2da5bcf49ef;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3f78a34dcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3137 identity=59529 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=305c0dc2-611e-4795-8592-b2da5bcf49ef,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=305c0dc2-611e-4795-8592-b2da5bcf49ef,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.69 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rbhnt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3f78a34dcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3137 identity=59529 ipv4=10.0.0.69 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rbhnt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3f78a34dcb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3137 identity=59529 ipv4=10.0.0.69 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rbhnt subsys=endpoint level=info msg="Successful endpoint creation" containerID=3f78a34dcb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3137 identity=59529 ipv4=10.0.0.69 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rbhnt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3f78a34dcb endpointID=3137 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-rbhnt subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.15.5 k8s:batch.kubernetes.io/controller-uid=305c0dc2-611e-4795-8592-b2da5bcf49ef k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=305c0dc2-611e-4795-8592-b2da5bcf49ef k8s:helm.sh/chart=cert-manager-v1.15.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=3f78a34dcb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3137 identity=59529 ipv4=10.0.0.69 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rbhnt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 b79707d5-00ac-4ba2-b4a7-fe8049ca7ad9 default }" containerID=766b5d536c305d4db2ce085c3a30954ef81dfde8e4182a8ee79b450da9e33f3e datapathConfiguration="&{false false false false false }" interface=lxc9ae66eef4dc4 k8sPodName=ingress-nginx/ingress-nginx-admission-create-v8tl8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=766b5d536c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=517 ipv4=10.0.0.154 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-v8tl8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=766b5d536c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=517 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=85db426b-12e3-479b-a067-9c231cfb2238,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=85db426b-12e3-479b-a067-9c231cfb2238,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.154 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-v8tl8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=85db426b-12e3-479b-a067-9c231cfb2238;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=85db426b-12e3-479b-a067-9c231cfb2238;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=766b5d536c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=517 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.154 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-v8tl8 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=766b5d536c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=517 identity=11634 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=85db426b-12e3-479b-a067-9c231cfb2238,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=85db426b-12e3-479b-a067-9c231cfb2238,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.154 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-v8tl8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=766b5d536c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=517 identity=11634 ipv4=10.0.0.154 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-v8tl8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=766b5d536c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=517 identity=11634 ipv4=10.0.0.154 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-v8tl8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=766b5d536c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=517 identity=11634 ipv4=10.0.0.154 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-v8tl8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=766b5d536c endpointID=517 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-v8tl8 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=85db426b-12e3-479b-a067-9c231cfb2238 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=85db426b-12e3-479b-a067-9c231cfb2238 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=766b5d536c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=517 identity=11634 ipv4=10.0.0.154 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-v8tl8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 6174dfbb-a43b-4609-8a35-604e78a7611f default }" containerID=2f8f00148bb92457d9872f92c6df904f7c0ab48a0369494fc3213998894f39c9 datapathConfiguration="&{false false false false false }" interface=lxc4774d3476521 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-t9mp8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2f8f00148b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 ipv4=10.0.0.46 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-t9mp8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2f8f00148b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.46 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-t9mp8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2f8f00148b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 identity=28920 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.46 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-t9mp8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2f8f00148b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 identity=28920 ipv4=10.0.0.46 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-t9mp8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2f8f00148b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=498 identity=28920 ipv4=10.0.0.46 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-t9mp8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2f8f00148b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=498 identity=28920 ipv4=10.0.0.46 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-t9mp8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.12 2136acaf-04ff-4887-9e14-093580441610 default }" containerID=23cee503e97c473c6ff6392bd3cfb0822fdaf53026e7976f70a0470bdee8d0e3 datapathConfiguration="&{false false false false false }" interface=lxc45b3c0ee743a k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vtjrj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23cee503e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3603 ipv4=10.0.0.12 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vtjrj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23cee503e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3603 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=5e09e33e-f859-4665-87ce-1a5c62c49b5a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=5e09e33e-f859-4665-87ce-1a5c62c49b5a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.12 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vtjrj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=5e09e33e-f859-4665-87ce-1a5c62c49b5a;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=5e09e33e-f859-4665-87ce-1a5c62c49b5a;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23cee503e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3603 identity=9683 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=5e09e33e-f859-4665-87ce-1a5c62c49b5a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=5e09e33e-f859-4665-87ce-1a5c62c49b5a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.12 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vtjrj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23cee503e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3603 identity=9683 ipv4=10.0.0.12 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vtjrj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=23cee503e9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3603 identity=9683 ipv4=10.0.0.12 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vtjrj subsys=endpoint level=info msg="Successful endpoint creation" containerID=23cee503e9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3603 identity=9683 ipv4=10.0.0.12 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vtjrj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=23cee503e9 endpointID=3603 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-vtjrj subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=5e09e33e-f859-4665-87ce-1a5c62c49b5a k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=5e09e33e-f859-4665-87ce-1a5c62c49b5a k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=23cee503e9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3603 identity=9683 ipv4=10.0.0.12 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vtjrj subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=8048225b-d10d-43e4-bc6e-4442cbc4aeb6] Description:}]" policyAddRequest=cb6f1273-b8a9-4b9e-87bf-0072de1618ec subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=cb6f1273-b8a9-4b9e-87bf-0072de1618ec policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=9e5a2cdc-c4c2-48fb-a332-79b847d27b4a] Description:}]" policyAddRequest=17f6b084-689e-4d76-9a6e-6eb79233f09c subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=17f6b084-689e-4d76-9a6e-6eb79233f09c policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.253 c1d208a1-6c7d-4d0a-82ba-64be6001cf58 default }" containerID=e5c90bb8084f454c384ef8238400646abed898236bd3dbb419b68eefdd9155a6 datapathConfiguration="&{false false false false false }" interface=lxc0036480a3a51 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rjgsn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e5c90bb808 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1343 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rjgsn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 d10da19f-1f32-4eee-a073-e3140968f727 default }" containerID=3922a0b22e9757bd3506706141c78c7d26382bae10412d7f28242c931f8104aa datapathConfiguration="&{false false false false false }" interface=lxc332cdfe5154b k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-lsgln labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3922a0b22e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-lsgln subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e5c90bb808 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1343 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rjgsn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=3922a0b22e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-lsgln subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3922a0b22e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-lsgln line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=e5c90bb808 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1343 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rjgsn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e5c90bb808 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1343 identity=3481 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rjgsn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e5c90bb808 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1343 identity=3481 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rjgsn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3922a0b22e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identity=28527 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-lsgln oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3922a0b22e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identity=28527 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-lsgln subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e5c90bb808 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1343 identity=3481 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rjgsn subsys=endpoint level=info msg="Successful endpoint creation" containerID=e5c90bb808 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1343 identity=3481 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rjgsn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3922a0b22e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=51 identity=28527 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-lsgln subsys=endpoint level=info msg="Successful endpoint creation" containerID=3922a0b22e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=51 identity=28527 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-lsgln subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.182 570ffbc4-726e-496e-82fd-a6d2e2600ec8 default }" containerID=ca579f4b12af72674bc35f03d27a8446101bfb66cbac360a7f756cb2aefb7178 datapathConfiguration="&{false false false false false }" interface=lxcb3d2ff3e81fe k8sPodName=openstack/pxc-operator-69cb5bbdb9-pm8rn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca579f4b12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=854 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-pm8rn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca579f4b12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=854 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-pm8rn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ca579f4b12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=854 identity=6011 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-pm8rn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca579f4b12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=854 identity=6011 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-pm8rn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ca579f4b12 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=854 identity=6011 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-pm8rn subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca579f4b12 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=854 identity=6011 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-pm8rn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.177 423ac372-a46a-4400-b170-bcd1d3e91964 default }" containerID=542d9aa46be2cfdbda54103d4153ad81c9d16e759f4a8ec035f2637b2a0aa0c9 datapathConfiguration="&{false false false false false }" interface=lxcba0770f281ff k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=542d9aa46b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2908 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=542d9aa46b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2908 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=542d9aa46b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2908 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.177 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=542d9aa46b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2908 identity=31277 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=542d9aa46b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2908 identity=31277 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=542d9aa46b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2908 identity=31277 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=542d9aa46b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2908 identity=31277 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.123 ecfb04c0-62f7-43d5-8e70-808ba2008aca default }" containerID=508c852b3c534ddf1d8d194f939126e05d86e3171b14df36e413460317200d02 datapathConfiguration="&{false false false false false }" interface=lxce43159a60683 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=508c852b3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=508c852b3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=508c852b3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.123 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=508c852b3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identity=43251 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=508c852b3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identity=43251 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=508c852b3c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=57 identity=43251 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=508c852b3c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=57 identity=43251 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=d9eb2b81-696b-45ae-b2d6-775a7d863fcc] Description:}]" policyAddRequest=84254507-93f1-41aa-9609-64e5e7c35212 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=84254507-93f1-41aa-9609-64e5e7c35212 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.57 be2d7fe3-f489-4327-b0b1-d63a6ada4081 default }" containerID=82d391004a0d5d0dc8c517fa2183ffbedaba46d2bd7199c39fca1823f7f8d0ae datapathConfiguration="&{false false false false false }" interface=lxc8097aa59a5a1 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=82d391004a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=82d391004a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=82d391004a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 identity=11902 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=82d391004a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 identity=11902 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=82d391004a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=90 identity=11902 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=82d391004a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=90 identity=11902 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=360d0ad1-bae4-465d-bddd-117a3dbf3ff1] Description:}]" policyAddRequest=05e741de-0930-4187-af18-39781bdf5767 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=05e741de-0930-4187-af18-39781bdf5767 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.26 c1273c1b-810b-4264-aced-6b61b0a132fb default }" containerID=1c76b2b4237412210d32ab1f8c5b0580c5a3d95c08619b3968cfb6b23746c18e datapathConfiguration="&{false false false false false }" interface=lxc62544e4eaa7f k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c76b2b423 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3423 ipv4=10.0.0.26 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c76b2b423 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3423 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.26 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1c76b2b423 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3423 identity=55321 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.26 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1c76b2b423 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3423 identity=55321 ipv4=10.0.0.26 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1c76b2b423 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3423 identity=55321 ipv4=10.0.0.26 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c76b2b423 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3423 identity=55321 ipv4=10.0.0.26 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.0059450539045274396 newInterval=7m30s subsys=map-ct level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03225141017490227 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.104 6e09c559-8d90-4fd6-85f2-eb5d169847d8 default }" containerID=673b5ad5ef0ba1bbd00fe09c34f428c147f87bcbefcf0a5b43a7578f5349b80b datapathConfiguration="&{false false false false false }" interface=lxcc9408b7791ab k8sPodName=openstack/memcached-memcached-cf56b6468-mp4d2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=673b5ad5ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1847 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-mp4d2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=673b5ad5ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1847 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-mp4d2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=673b5ad5ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1847 identity=2569 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-mp4d2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=673b5ad5ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1847 identity=2569 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-mp4d2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=673b5ad5ef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1847 identity=2569 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-mp4d2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=673b5ad5ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1847 identity=2569 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-mp4d2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.197 114daaac-1d02-4f22-a4ce-c6597f805381 default }" containerID=df1a4679b07d48ccea4e8f9115565ac8b9a15d2c8c235b13f089ee7d42c4591e datapathConfiguration="&{false false false false false }" interface=lxc00237eb0b0d3 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df1a4679b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1788 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df1a4679b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1788 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=df1a4679b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1788 identity=15040 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df1a4679b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1788 identity=15040 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df1a4679b0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1788 identity=15040 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=df1a4679b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1788 identity=15040 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.49 d0ed0fe7-fd9c-437c-8a30-73aa840c7687 default }" containerID=65f78d5cdab85027555741adfde3efcf67f91a3565f14aafdc9e21d9d3fa92fe datapathConfiguration="&{false false false false false }" interface=lxc27ef1a9b13fc k8sPodName=openstack/keystone-api-788f456846-nrfcr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65f78d5cda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-api-788f456846-nrfcr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65f78d5cda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-api-788f456846-nrfcr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=65f78d5cda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-api-788f456846-nrfcr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=65f78d5cda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 identity=63366 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-api-788f456846-nrfcr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=65f78d5cda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 identity=63366 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-api-788f456846-nrfcr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=65f78d5cda datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=193 identity=63366 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-api-788f456846-nrfcr subsys=endpoint level=info msg="Successful endpoint creation" containerID=65f78d5cda datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=193 identity=63366 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-api-788f456846-nrfcr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.90 e2c971ef-c28b-49ee-a89e-cec9b37f018d default }" containerID=93e08eccc544558eaea13cf921dad50525764c7b89f062dc1d95a5b927945289 datapathConfiguration="&{false false false false false }" interface=lxc3911607f44a9 k8sPodName=openstack/keystone-credential-setup-rgl9w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=93e08eccc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-credential-setup-rgl9w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=93e08eccc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d97c58a0-cee2-4fcd-bef3-37e34766e1d2,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=d97c58a0-cee2-4fcd-bef3-37e34766e1d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-credential-setup-rgl9w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d97c58a0-cee2-4fcd-bef3-37e34766e1d2;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=d97c58a0-cee2-4fcd-bef3-37e34766e1d2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=93e08eccc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 identity=22458 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d97c58a0-cee2-4fcd-bef3-37e34766e1d2,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=d97c58a0-cee2-4fcd-bef3-37e34766e1d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-credential-setup-rgl9w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=93e08eccc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 identity=22458 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-credential-setup-rgl9w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=93e08eccc5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=480 identity=22458 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-credential-setup-rgl9w subsys=endpoint level=info msg="Successful endpoint creation" containerID=93e08eccc5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=480 identity=22458 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-credential-setup-rgl9w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=93e08eccc5 endpointID=480 k8sNamespace=openstack k8sPodName=keystone-credential-setup-rgl9w subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d97c58a0-cee2-4fcd-bef3-37e34766e1d2 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=d97c58a0-cee2-4fcd-bef3-37e34766e1d2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=93e08eccc5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=480 identity=22458 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-credential-setup-rgl9w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.40 8ca98f3f-23e8-4f4f-a858-4fdcf3babc51 default }" containerID=8e43e0c80c20140cac913553d8573ac01165c1ccffdaef73a2f02d1d8b9efecf datapathConfiguration="&{false false false false false }" interface=lxc017cce225d69 k8sPodName=openstack/keystone-db-init-27fbg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e43e0c80c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-db-init-27fbg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e43e0c80c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=24d16ac7-27f5-4735-bc4d-735d02db61b7,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=24d16ac7-27f5-4735-bc4d-735d02db61b7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-db-init-27fbg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=24d16ac7-27f5-4735-bc4d-735d02db61b7;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=24d16ac7-27f5-4735-bc4d-735d02db61b7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=8e43e0c80c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-db-init-27fbg line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8e43e0c80c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 identity=10284 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=24d16ac7-27f5-4735-bc4d-735d02db61b7,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=24d16ac7-27f5-4735-bc4d-735d02db61b7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-db-init-27fbg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8e43e0c80c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 identity=10284 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-db-init-27fbg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8e43e0c80c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=41 identity=10284 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-db-init-27fbg subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e43e0c80c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=41 identity=10284 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-db-init-27fbg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8e43e0c80c endpointID=41 k8sNamespace=openstack k8sPodName=keystone-db-init-27fbg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=24d16ac7-27f5-4735-bc4d-735d02db61b7 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=24d16ac7-27f5-4735-bc4d-735d02db61b7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8e43e0c80c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=41 identity=10284 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-db-init-27fbg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.238 6d1e260b-29b0-4f0a-bd84-0517dbc32c3c default }" containerID=e9f5bd781ffa899a87aeca8471eff3d2279553d06335de0e7addfc6b842c60f3 datapathConfiguration="&{false false false false false }" interface=lxcebbfbe41ea07 k8sPodName=openstack/keystone-fernet-setup-6cs6v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e9f5bd781f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1052 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-fernet-setup-6cs6v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e9f5bd781f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1052 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=13c911b4-33e0-4fc6-9456-60fd2768947a,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=13c911b4-33e0-4fc6-9456-60fd2768947a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-fernet-setup-6cs6v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=13c911b4-33e0-4fc6-9456-60fd2768947a;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=13c911b4-33e0-4fc6-9456-60fd2768947a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e9f5bd781f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1052 identity=609 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=13c911b4-33e0-4fc6-9456-60fd2768947a,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=13c911b4-33e0-4fc6-9456-60fd2768947a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-fernet-setup-6cs6v oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e9f5bd781f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1052 identity=609 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-fernet-setup-6cs6v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e9f5bd781f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1052 identity=609 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-fernet-setup-6cs6v subsys=endpoint level=info msg="Successful endpoint creation" containerID=e9f5bd781f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1052 identity=609 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-fernet-setup-6cs6v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e9f5bd781f endpointID=1052 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-6cs6v subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=13c911b4-33e0-4fc6-9456-60fd2768947a k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=13c911b4-33e0-4fc6-9456-60fd2768947a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e9f5bd781f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1052 identity=609 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-fernet-setup-6cs6v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 04e176cb-2381-4379-ae2e-bdd4069d397c default }" containerID=44afda9601b52a656f83b4bbc1b59b0706fcc17b999c75f5d5db16e8bd8c11a4 datapathConfiguration="&{false false false false false }" interface=lxc4a75136f31dc k8sPodName=openstack/keystone-db-sync-rsb2c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44afda9601 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1323 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-db-sync-rsb2c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44afda9601 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1323 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=aae83859-6df9-4a0b-9d6b-56cb36769a4b,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=aae83859-6df9-4a0b-9d6b-56cb36769a4b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-db-sync-rsb2c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=44afda9601 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1323 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-db-sync-rsb2c line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=aae83859-6df9-4a0b-9d6b-56cb36769a4b;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=aae83859-6df9-4a0b-9d6b-56cb36769a4b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44afda9601 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1323 identity=15164 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=aae83859-6df9-4a0b-9d6b-56cb36769a4b,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=aae83859-6df9-4a0b-9d6b-56cb36769a4b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-db-sync-rsb2c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=44afda9601 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1323 identity=15164 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-db-sync-rsb2c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=44afda9601 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1323 identity=15164 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-db-sync-rsb2c subsys=endpoint level=info msg="Successful endpoint creation" containerID=44afda9601 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1323 identity=15164 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-db-sync-rsb2c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=44afda9601 endpointID=1323 k8sNamespace=openstack k8sPodName=keystone-db-sync-rsb2c subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=aae83859-6df9-4a0b-9d6b-56cb36769a4b k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=aae83859-6df9-4a0b-9d6b-56cb36769a4b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=44afda9601 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1323 identity=15164 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-db-sync-rsb2c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 e2fcde53-d44f-43fa-94d0-c1d3344cec9d default }" containerID=12601e04519e746b2ab15ccbe29f0faba94e7a00d23934ff87ba5a50d76b56cc datapathConfiguration="&{false false false false false }" interface=lxc704250f6fbec k8sPodName=openstack/keystone-rabbit-init-p7zh9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=12601e0451 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1759 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-rabbit-init-p7zh9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=12601e0451 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1759 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f0199306-447a-4e88-9f35-e530c7cb9593,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f0199306-447a-4e88-9f35-e530c7cb9593,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-rabbit-init-p7zh9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=12601e0451 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1759 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-rabbit-init-p7zh9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f0199306-447a-4e88-9f35-e530c7cb9593;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=f0199306-447a-4e88-9f35-e530c7cb9593;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=12601e0451 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1759 identity=57905 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f0199306-447a-4e88-9f35-e530c7cb9593,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f0199306-447a-4e88-9f35-e530c7cb9593,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-rabbit-init-p7zh9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=12601e0451 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1759 identity=57905 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-rabbit-init-p7zh9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=12601e0451 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1759 identity=57905 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-rabbit-init-p7zh9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=12601e0451 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1759 identity=57905 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-rabbit-init-p7zh9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=12601e0451 endpointID=1759 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-p7zh9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f0199306-447a-4e88-9f35-e530c7cb9593 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=f0199306-447a-4e88-9f35-e530c7cb9593 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=12601e0451 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1759 identity=57905 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-rabbit-init-p7zh9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 bc429203-b693-494a-a986-17894f9cb4f1 default }" containerID=90f30bf45dd004b93e52bf21d6d908ee8435d1b574eccf6f8090b8759a090387 datapathConfiguration="&{false false false false false }" interface=lxcff138e4a75a0 k8sPodName=openstack/keystone-domain-manage-qznb9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=90f30bf45d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2460 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-domain-manage-qznb9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=90f30bf45d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2460 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e84a62d3-bcb5-4278-9115-f293577ff644,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=e84a62d3-bcb5-4278-9115-f293577ff644,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-domain-manage-qznb9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=90f30bf45d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2460 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-domain-manage-qznb9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e84a62d3-bcb5-4278-9115-f293577ff644;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=e84a62d3-bcb5-4278-9115-f293577ff644;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=90f30bf45d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2460 identity=4832 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e84a62d3-bcb5-4278-9115-f293577ff644,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=e84a62d3-bcb5-4278-9115-f293577ff644,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-domain-manage-qznb9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=90f30bf45d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2460 identity=4832 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-domain-manage-qznb9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=90f30bf45d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2460 identity=4832 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-domain-manage-qznb9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=90f30bf45d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2460 identity=4832 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-domain-manage-qznb9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=90f30bf45d endpointID=2460 k8sNamespace=openstack k8sPodName=keystone-domain-manage-qznb9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e84a62d3-bcb5-4278-9115-f293577ff644 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=e84a62d3-bcb5-4278-9115-f293577ff644 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=90f30bf45d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2460 identity=4832 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-domain-manage-qznb9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 c7b743c0-13a1-4181-a242-a31b42334df3 default }" containerID=7519663fe47408a548a3531db86e53977dbc704ccdb0bae60cff25bf4a5b2e24 datapathConfiguration="&{false false false false false }" interface=lxc313e5a097d9c k8sPodName=openstack/keystone-bootstrap-d4ql2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7519663fe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-bootstrap-d4ql2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7519663fe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=316f4908-7181-4568-9d0c-43a7ea0461c9,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=316f4908-7181-4568-9d0c-43a7ea0461c9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-bootstrap-d4ql2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=316f4908-7181-4568-9d0c-43a7ea0461c9;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=316f4908-7181-4568-9d0c-43a7ea0461c9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=7519663fe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-bootstrap-d4ql2 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7519663fe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 identity=32095 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=316f4908-7181-4568-9d0c-43a7ea0461c9,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=316f4908-7181-4568-9d0c-43a7ea0461c9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-bootstrap-d4ql2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7519663fe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 identity=32095 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-bootstrap-d4ql2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7519663fe4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=665 identity=32095 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-bootstrap-d4ql2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7519663fe4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=665 identity=32095 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-bootstrap-d4ql2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7519663fe4 endpointID=665 k8sNamespace=openstack k8sPodName=keystone-bootstrap-d4ql2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=316f4908-7181-4568-9d0c-43a7ea0461c9 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=316f4908-7181-4568-9d0c-43a7ea0461c9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=7519663fe4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=665 identity=32095 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-bootstrap-d4ql2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 dcad7548-c525-4c60-af51-fdff0744f581 default }" containerID=162e0fdd10750c5a2b8e734223ef8278c05cbc11e14388b42e1b9dde9690a99c datapathConfiguration="&{false false false false false }" interface=lxc025b4f2b0ba2 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=162e0fdd10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3995 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=162e0fdd10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3995 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=162e0fdd10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3995 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.93 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=162e0fdd10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3995 identity=22764 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=162e0fdd10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3995 identity=22764 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=162e0fdd10 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3995 identity=22764 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=162e0fdd10 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3995 identity=22764 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.233 cd8d04ac-86f8-400f-9b1e-3ce7818855b3 default }" containerID=ae36e2a222a3d2a62be3443354042ecfd329f0c0aa701ebdd4e1c2d0be1ad73b datapathConfiguration="&{false false false false false }" interface=lxcfc4af8b43ae1 k8sPodName=openstack/barbican-api-798fc5dd75-5b6k8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae36e2a222 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3382 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/barbican-api-798fc5dd75-5b6k8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae36e2a222 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3382 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/barbican-api-798fc5dd75-5b6k8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae36e2a222 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3382 identity=4001 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/barbican-api-798fc5dd75-5b6k8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae36e2a222 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3382 identity=4001 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/barbican-api-798fc5dd75-5b6k8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 4d90b9a5-101f-423e-b997-18a6b25563b0 default }" containerID=90a0425a3db43abc124a39c34b27d7f771d111564a7e6eda117fdccece428431 datapathConfiguration="&{false false false false false }" interface=lxc301a8b074150 k8sPodName=openstack/barbican-db-init-mk7nh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=90a0425a3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1699 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-db-init-mk7nh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=90a0425a3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1699 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7c206799-5c8a-4a9c-9a3e-61087226d242,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=7c206799-5c8a-4a9c-9a3e-61087226d242,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-db-init-mk7nh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=7c206799-5c8a-4a9c-9a3e-61087226d242;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=7c206799-5c8a-4a9c-9a3e-61087226d242;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=90a0425a3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1699 identity=3593 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7c206799-5c8a-4a9c-9a3e-61087226d242,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=7c206799-5c8a-4a9c-9a3e-61087226d242,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-db-init-mk7nh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=90a0425a3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1699 identity=3593 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-db-init-mk7nh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ae36e2a222 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3382 identity=4001 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/barbican-api-798fc5dd75-5b6k8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae36e2a222 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3382 identity=4001 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/barbican-api-798fc5dd75-5b6k8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=90a0425a3d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1699 identity=3593 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-db-init-mk7nh subsys=endpoint level=info msg="Successful endpoint creation" containerID=90a0425a3d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1699 identity=3593 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-db-init-mk7nh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=90a0425a3d endpointID=1699 k8sNamespace=openstack k8sPodName=barbican-db-init-mk7nh subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=7c206799-5c8a-4a9c-9a3e-61087226d242 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=7c206799-5c8a-4a9c-9a3e-61087226d242 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=90a0425a3d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1699 identity=3593 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-db-init-mk7nh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 f8d3aa72-d520-4b9e-bccd-8ec13bdce669 default }" containerID=2fc5e717b54493ffdea6acc362c624cf069542c4146954150930419de305263f datapathConfiguration="&{false false false false false }" interface=lxc77a0e206b0b7 k8sPodName=openstack/barbican-db-sync-clc92 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2fc5e717b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=819 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-db-sync-clc92 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2fc5e717b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=819 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=147e99a9-74a9-4753-a38f-983ee15e0ce8,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=147e99a9-74a9-4753-a38f-983ee15e0ce8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-db-sync-clc92 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=147e99a9-74a9-4753-a38f-983ee15e0ce8;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=147e99a9-74a9-4753-a38f-983ee15e0ce8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2fc5e717b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=819 identity=15491 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=147e99a9-74a9-4753-a38f-983ee15e0ce8,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=147e99a9-74a9-4753-a38f-983ee15e0ce8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-db-sync-clc92 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2fc5e717b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=819 identity=15491 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-db-sync-clc92 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2fc5e717b5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=819 identity=15491 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-db-sync-clc92 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2fc5e717b5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=819 identity=15491 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-db-sync-clc92 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2fc5e717b5 endpointID=819 k8sNamespace=openstack k8sPodName=barbican-db-sync-clc92 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=147e99a9-74a9-4753-a38f-983ee15e0ce8 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=147e99a9-74a9-4753-a38f-983ee15e0ce8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2fc5e717b5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=819 identity=15491 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-db-sync-clc92 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 611c4c5d-a254-4af9-99cd-0a9a23cc9ade default }" containerID=7963c06b310b2212895b36d6eecdd4fe92303f8527373da2e44d108fc9292e28 datapathConfiguration="&{false false false false false }" interface=lxc3af72d8c7d83 k8sPodName=openstack/barbican-rabbit-init-gs7dc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7963c06b31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=411 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-rabbit-init-gs7dc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7963c06b31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=411 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2ec85f76-e278-49f6-ba4b-10de28e8fd99,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2ec85f76-e278-49f6-ba4b-10de28e8fd99,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-rabbit-init-gs7dc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7963c06b31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=411 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-rabbit-init-gs7dc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=2ec85f76-e278-49f6-ba4b-10de28e8fd99;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=2ec85f76-e278-49f6-ba4b-10de28e8fd99;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7963c06b31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=411 identity=5825 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2ec85f76-e278-49f6-ba4b-10de28e8fd99,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2ec85f76-e278-49f6-ba4b-10de28e8fd99,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-rabbit-init-gs7dc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7963c06b31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=411 identity=5825 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-rabbit-init-gs7dc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7963c06b31 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=411 identity=5825 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-rabbit-init-gs7dc subsys=endpoint level=info msg="Successful endpoint creation" containerID=7963c06b31 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=411 identity=5825 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-rabbit-init-gs7dc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7963c06b31 endpointID=411 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-gs7dc subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=2ec85f76-e278-49f6-ba4b-10de28e8fd99 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=2ec85f76-e278-49f6-ba4b-10de28e8fd99 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=7963c06b31 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=411 identity=5825 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-rabbit-init-gs7dc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.86 64c579c7-9141-404b-9a03-c0c2a918d348 default }" containerID=2f405f327a292c8d3dcf8b11f0ee8e32d60e29f7d6912cc668017c2b74140d1b datapathConfiguration="&{false false false false false }" interface=lxcb1bc14daae5b k8sPodName=openstack/barbican-ks-service-wnn7k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2f405f327a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3516 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/barbican-ks-service-wnn7k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2f405f327a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3516 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7a976f31-c113-4a0b-903b-7f210ab3465f,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=7a976f31-c113-4a0b-903b-7f210ab3465f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/barbican-ks-service-wnn7k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=7a976f31-c113-4a0b-903b-7f210ab3465f;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=7a976f31-c113-4a0b-903b-7f210ab3465f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2f405f327a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3516 identity=8952 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7a976f31-c113-4a0b-903b-7f210ab3465f,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=7a976f31-c113-4a0b-903b-7f210ab3465f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/barbican-ks-service-wnn7k oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2f405f327a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3516 identity=8952 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/barbican-ks-service-wnn7k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2f405f327a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3516 identity=8952 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/barbican-ks-service-wnn7k subsys=endpoint level=info msg="Successful endpoint creation" containerID=2f405f327a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3516 identity=8952 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/barbican-ks-service-wnn7k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2f405f327a endpointID=3516 k8sNamespace=openstack k8sPodName=barbican-ks-service-wnn7k subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=7a976f31-c113-4a0b-903b-7f210ab3465f k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=7a976f31-c113-4a0b-903b-7f210ab3465f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2f405f327a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3516 identity=8952 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/barbican-ks-service-wnn7k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 5d8d8d60-062a-4668-bcae-2150da80604a default }" containerID=b228b2703307a52de5acbba6822fbc541ea1313ad29e5427fa0f5fe2ba901ceb datapathConfiguration="&{false false false false false }" interface=lxcb22ffaf334dc k8sPodName=openstack/barbican-ks-endpoints-c667m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b228b27033 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1906 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/barbican-ks-endpoints-c667m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b228b27033 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1906 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a0a929a2-6e7c-4a58-956a-26ed6cf5ca87,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a0a929a2-6e7c-4a58-956a-26ed6cf5ca87,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/barbican-ks-endpoints-c667m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a0a929a2-6e7c-4a58-956a-26ed6cf5ca87;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=a0a929a2-6e7c-4a58-956a-26ed6cf5ca87;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b228b27033 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1906 identity=4564 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a0a929a2-6e7c-4a58-956a-26ed6cf5ca87,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a0a929a2-6e7c-4a58-956a-26ed6cf5ca87,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/barbican-ks-endpoints-c667m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b228b27033 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1906 identity=4564 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/barbican-ks-endpoints-c667m subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b228b27033 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1906 identity=4564 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/barbican-ks-endpoints-c667m subsys=endpoint level=info msg="Successful endpoint creation" containerID=b228b27033 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1906 identity=4564 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/barbican-ks-endpoints-c667m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b228b27033 endpointID=1906 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-c667m subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a0a929a2-6e7c-4a58-956a-26ed6cf5ca87 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=a0a929a2-6e7c-4a58-956a-26ed6cf5ca87 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b228b27033 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1906 identity=4564 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/barbican-ks-endpoints-c667m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 6168074b-d027-4d20-b8a2-b386dc20a350 default }" containerID=b06232d080e4d878c8ab5a8ae105e837acdeddeb94440b50114cd73457bb3349 datapathConfiguration="&{false false false false false }" interface=lxcb5d2f54617dd k8sPodName=openstack/barbican-ks-user-v98zq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b06232d080 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1790 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-ks-user-v98zq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b06232d080 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1790 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=129d5bc6-6922-429a-a439-918a2378d979,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=129d5bc6-6922-429a-a439-918a2378d979,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-ks-user-v98zq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=129d5bc6-6922-429a-a439-918a2378d979;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=129d5bc6-6922-429a-a439-918a2378d979;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b06232d080 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1790 identity=52376 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=129d5bc6-6922-429a-a439-918a2378d979,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=129d5bc6-6922-429a-a439-918a2378d979,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-ks-user-v98zq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b06232d080 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1790 identity=52376 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-ks-user-v98zq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b06232d080 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1790 identity=52376 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-ks-user-v98zq subsys=endpoint level=info msg="Successful endpoint creation" containerID=b06232d080 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1790 identity=52376 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-ks-user-v98zq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b06232d080 endpointID=1790 k8sNamespace=openstack k8sPodName=barbican-ks-user-v98zq subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=129d5bc6-6922-429a-a439-918a2378d979 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=129d5bc6-6922-429a-a439-918a2378d979 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b06232d080 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1790 identity=52376 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-ks-user-v98zq subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.10 8c7bd81b-1fb0-477d-82fa-851827e7b264 default }" containerID=9899b29768cc5ce64eb0bbb617c84cc36893b07848a2b720d9a650f0d381e6c3 datapathConfiguration="&{false false false false false }" interface=lxc228559659d90 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9899b29768 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2794 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9899b29768 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2794 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=9899b29768 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2794 identity=14452 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9899b29768 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2794 identity=14452 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9899b29768 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2794 identity=14452 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9899b29768 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2794 identity=14452 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.201 0c533506-a4e6-4309-af95-e34c6828b879 default }" containerID=dc9522d627a1e88e99a951632326829829e6bc7b5b7266720a636cb548d2f265 datapathConfiguration="&{false false false false false }" interface=lxc5582095cbad5 k8sPodName=openstack/glance-db-init-fv2mb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc9522d627 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3255 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/glance-db-init-fv2mb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc9522d627 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3255 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4d3aae0f-d81b-4a6a-954f-01830cfaaf8e,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=4d3aae0f-d81b-4a6a-954f-01830cfaaf8e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/glance-db-init-fv2mb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4d3aae0f-d81b-4a6a-954f-01830cfaaf8e;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=4d3aae0f-d81b-4a6a-954f-01830cfaaf8e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=dc9522d627 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3255 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.201 ipv6= k8sPodName=openstack/glance-db-init-fv2mb line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=dc9522d627 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3255 identity=25026 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4d3aae0f-d81b-4a6a-954f-01830cfaaf8e,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=4d3aae0f-d81b-4a6a-954f-01830cfaaf8e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/glance-db-init-fv2mb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc9522d627 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3255 identity=25026 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/glance-db-init-fv2mb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dc9522d627 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3255 identity=25026 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/glance-db-init-fv2mb subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc9522d627 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3255 identity=25026 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/glance-db-init-fv2mb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dc9522d627 endpointID=3255 k8sNamespace=openstack k8sPodName=glance-db-init-fv2mb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4d3aae0f-d81b-4a6a-954f-01830cfaaf8e k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=4d3aae0f-d81b-4a6a-954f-01830cfaaf8e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=dc9522d627 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3255 identity=25026 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/glance-db-init-fv2mb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 c63ee1ca-fc03-4589-a684-13da7e647aec default }" containerID=b46dc159e8c3be554b5a75d60ef3e8004b6312779ff943c779583421d865309e datapathConfiguration="&{false false false false false }" interface=lxc764a320a4c48 k8sPodName=openstack/glance-db-sync-r5jpz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b46dc159e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3388 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/glance-db-sync-r5jpz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b46dc159e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3388 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=818b6f26-4c4e-4f35-af83-0c7c2eaf1046,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=818b6f26-4c4e-4f35-af83-0c7c2eaf1046,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/glance-db-sync-r5jpz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=818b6f26-4c4e-4f35-af83-0c7c2eaf1046;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=818b6f26-4c4e-4f35-af83-0c7c2eaf1046;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b46dc159e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3388 identity=3798 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=818b6f26-4c4e-4f35-af83-0c7c2eaf1046,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=818b6f26-4c4e-4f35-af83-0c7c2eaf1046,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/glance-db-sync-r5jpz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b46dc159e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3388 identity=3798 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/glance-db-sync-r5jpz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b46dc159e8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3388 identity=3798 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/glance-db-sync-r5jpz subsys=endpoint level=info msg="Successful endpoint creation" containerID=b46dc159e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3388 identity=3798 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/glance-db-sync-r5jpz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b46dc159e8 endpointID=3388 k8sNamespace=openstack k8sPodName=glance-db-sync-r5jpz subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=818b6f26-4c4e-4f35-af83-0c7c2eaf1046 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=818b6f26-4c4e-4f35-af83-0c7c2eaf1046 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b46dc159e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3388 identity=3798 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/glance-db-sync-r5jpz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.141 88cd9b97-6910-47ac-ad1f-0d82a1769489 default }" containerID=8e34bf307a57d350e2ddb0b29c07fa4c20a043cc0933be5d45f243e42ec9c9a1 datapathConfiguration="&{false false false false false }" interface=lxc3a8808b42a88 k8sPodName=openstack/glance-rabbit-init-6ntmm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e34bf307a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2622 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/glance-rabbit-init-6ntmm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e34bf307a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2622 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=79cee4e8-8034-4072-94e6-8d0d79d9e467,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=79cee4e8-8034-4072-94e6-8d0d79d9e467,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/glance-rabbit-init-6ntmm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8e34bf307a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2622 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.141 ipv6= k8sPodName=openstack/glance-rabbit-init-6ntmm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=79cee4e8-8034-4072-94e6-8d0d79d9e467;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=79cee4e8-8034-4072-94e6-8d0d79d9e467;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8e34bf307a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2622 identity=50428 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=79cee4e8-8034-4072-94e6-8d0d79d9e467,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=79cee4e8-8034-4072-94e6-8d0d79d9e467,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/glance-rabbit-init-6ntmm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8e34bf307a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2622 identity=50428 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/glance-rabbit-init-6ntmm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8e34bf307a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2622 identity=50428 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/glance-rabbit-init-6ntmm subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e34bf307a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2622 identity=50428 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/glance-rabbit-init-6ntmm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8e34bf307a endpointID=2622 k8sNamespace=openstack k8sPodName=glance-rabbit-init-6ntmm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=79cee4e8-8034-4072-94e6-8d0d79d9e467 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=79cee4e8-8034-4072-94e6-8d0d79d9e467 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8e34bf307a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2622 identity=50428 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/glance-rabbit-init-6ntmm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 e07b37fe-e39c-41af-b3d7-47bbf5c748bc default }" containerID=8f7cf68cfc3e1a6d113fe3b2b70929ea64ecd210fd98c790143dce027297f552 datapathConfiguration="&{false false false false false }" interface=lxccb73e037b140 k8sPodName=openstack/glance-ks-service-vvrsr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f7cf68cfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2033 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-ks-service-vvrsr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f7cf68cfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2033 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=68041330-4c5c-461f-8dbb-0d3419f35167,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=68041330-4c5c-461f-8dbb-0d3419f35167,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-ks-service-vvrsr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=68041330-4c5c-461f-8dbb-0d3419f35167;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=68041330-4c5c-461f-8dbb-0d3419f35167;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8f7cf68cfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2033 identity=25050 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=68041330-4c5c-461f-8dbb-0d3419f35167,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=68041330-4c5c-461f-8dbb-0d3419f35167,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-ks-service-vvrsr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f7cf68cfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2033 identity=25050 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-ks-service-vvrsr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8f7cf68cfc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2033 identity=25050 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-ks-service-vvrsr subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f7cf68cfc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2033 identity=25050 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-ks-service-vvrsr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8f7cf68cfc endpointID=2033 k8sNamespace=openstack k8sPodName=glance-ks-service-vvrsr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=68041330-4c5c-461f-8dbb-0d3419f35167 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=68041330-4c5c-461f-8dbb-0d3419f35167 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8f7cf68cfc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2033 identity=25050 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-ks-service-vvrsr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 151e3c56-06ab-4c53-8561-480616c828d4 default }" containerID=b0152dc577e5249e4ec6e09297376366976b462b01480d01c1f273e8a2f425bf datapathConfiguration="&{false false false false false }" interface=lxc056f937872e5 k8sPodName=openstack/glance-ks-endpoints-jrgc6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0152dc577 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1332 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-endpoints-jrgc6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0152dc577 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1332 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e0ed1e30-9fc6-43d4-9da8-2f45df8be857,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=e0ed1e30-9fc6-43d4-9da8-2f45df8be857,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-endpoints-jrgc6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e0ed1e30-9fc6-43d4-9da8-2f45df8be857;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=e0ed1e30-9fc6-43d4-9da8-2f45df8be857;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b0152dc577 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1332 identity=8304 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e0ed1e30-9fc6-43d4-9da8-2f45df8be857,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=e0ed1e30-9fc6-43d4-9da8-2f45df8be857,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-endpoints-jrgc6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b0152dc577 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1332 identity=8304 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-endpoints-jrgc6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b0152dc577 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1332 identity=8304 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-endpoints-jrgc6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0152dc577 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1332 identity=8304 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-endpoints-jrgc6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b0152dc577 endpointID=1332 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-jrgc6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e0ed1e30-9fc6-43d4-9da8-2f45df8be857 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=e0ed1e30-9fc6-43d4-9da8-2f45df8be857 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b0152dc577 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1332 identity=8304 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-endpoints-jrgc6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 d11c71df-22f3-4891-9863-ef950a8ec0be default }" containerID=25db047e63605bb0747457cdbe1a962a18d9ff1c19c0c2e39481a1d7c2c721f7 datapathConfiguration="&{false false false false false }" interface=lxc4fd57053201b k8sPodName=openstack/glance-ks-user-qmmgw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=25db047e63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/glance-ks-user-qmmgw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=25db047e63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=33e72ee8-ff32-4701-bec2-16059c4208a0,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=33e72ee8-ff32-4701-bec2-16059c4208a0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/glance-ks-user-qmmgw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=33e72ee8-ff32-4701-bec2-16059c4208a0;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=33e72ee8-ff32-4701-bec2-16059c4208a0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=25db047e63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1 identity=54827 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=33e72ee8-ff32-4701-bec2-16059c4208a0,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=33e72ee8-ff32-4701-bec2-16059c4208a0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/glance-ks-user-qmmgw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=25db047e63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1 identity=54827 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/glance-ks-user-qmmgw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=25db047e63 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1 identity=54827 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/glance-ks-user-qmmgw subsys=endpoint level=info msg="Successful endpoint creation" containerID=25db047e63 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1 identity=54827 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/glance-ks-user-qmmgw subsys=daemon level=info msg="Delete endpoint request" containerID=25db047e63 endpointID=1 k8sNamespace=openstack k8sPodName=glance-ks-user-qmmgw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=33e72ee8-ff32-4701-bec2-16059c4208a0 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=33e72ee8-ff32-4701-bec2-16059c4208a0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=25db047e63 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1 identity=54827 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/glance-ks-user-qmmgw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.81 72521734-f36a-497e-9767-1a1889c3397e default }" containerID=1d0f90fcf03a834f48c655e3cb1db42d268ecd680f9d1153ce1c6dfe451d1041 datapathConfiguration="&{false false false false false }" interface=lxc643d0749b85e k8sPodName=openstack/glance-metadefs-load-vb75x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d0f90fcf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2378 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/glance-metadefs-load-vb75x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d0f90fcf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2378 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=308bc6ce-e131-4772-b055-c55dba5dae8e,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=308bc6ce-e131-4772-b055-c55dba5dae8e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/glance-metadefs-load-vb75x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=308bc6ce-e131-4772-b055-c55dba5dae8e;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=308bc6ce-e131-4772-b055-c55dba5dae8e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d0f90fcf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2378 identity=27123 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=308bc6ce-e131-4772-b055-c55dba5dae8e,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=308bc6ce-e131-4772-b055-c55dba5dae8e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/glance-metadefs-load-vb75x oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1d0f90fcf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2378 identity=27123 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/glance-metadefs-load-vb75x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d0f90fcf0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2378 identity=27123 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/glance-metadefs-load-vb75x subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d0f90fcf0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2378 identity=27123 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/glance-metadefs-load-vb75x subsys=daemon level=info msg="Delete endpoint request" containerID=1d0f90fcf0 endpointID=2378 k8sNamespace=openstack k8sPodName=glance-metadefs-load-vb75x subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=308bc6ce-e131-4772-b055-c55dba5dae8e k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=308bc6ce-e131-4772-b055-c55dba5dae8e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1d0f90fcf0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2378 identity=27123 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/glance-metadefs-load-vb75x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 8fa9562e-a48a-4b06-a0cd-9c7fae0d7d92 default }" containerID=0950e58b4d68505784532ee15004a4d1b5e2b57284bc3aedf2140cd6a9fc01b4 datapathConfiguration="&{false false false false false }" interface=lxc0dd3da6b4eff k8sPodName=openstack/glance-storage-init-hms5v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0950e58b4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1722 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-storage-init-hms5v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0950e58b4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1722 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e95a4fae-be80-4a97-ac41-9ed4e167ffed,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=e95a4fae-be80-4a97-ac41-9ed4e167ffed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-storage-init-hms5v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e95a4fae-be80-4a97-ac41-9ed4e167ffed;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=e95a4fae-be80-4a97-ac41-9ed4e167ffed;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0950e58b4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1722 identity=16111 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e95a4fae-be80-4a97-ac41-9ed4e167ffed,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=e95a4fae-be80-4a97-ac41-9ed4e167ffed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-storage-init-hms5v oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0950e58b4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1722 identity=16111 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-storage-init-hms5v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0950e58b4d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1722 identity=16111 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-storage-init-hms5v subsys=endpoint level=info msg="Successful endpoint creation" containerID=0950e58b4d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1722 identity=16111 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-storage-init-hms5v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0950e58b4d endpointID=1722 k8sNamespace=openstack k8sPodName=glance-storage-init-hms5v subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e95a4fae-be80-4a97-ac41-9ed4e167ffed k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=e95a4fae-be80-4a97-ac41-9ed4e167ffed k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0950e58b4d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1722 identity=16111 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-storage-init-hms5v subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.04849040269455003 newInterval=16m53s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.82 fafff77c-b3e0-4a0d-b7a0-519555f13e0a default }" containerID=a054e89b6c372149d2ef2b6b294c37858ba75cc8dbb083b6143cee70a5fbafa3 datapathConfiguration="&{false false false false false }" interface=lxc780c65ee54d6 k8sPodName=openstack/glance-api-768946b8c4-x9b6b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a054e89b6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=857 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-api-768946b8c4-x9b6b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a054e89b6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=857 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-api-768946b8c4-x9b6b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a054e89b6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=857 identity=33988 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-api-768946b8c4-x9b6b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a054e89b6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=857 identity=33988 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-api-768946b8c4-x9b6b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a054e89b6c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=857 identity=33988 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-api-768946b8c4-x9b6b subsys=endpoint level=info msg="Successful endpoint creation" containerID=a054e89b6c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=857 identity=33988 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-api-768946b8c4-x9b6b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.249 e51fc7f2-7c98-430d-80ef-7b9a51fd40c6 default }" containerID=9afc0513c08decb2fb1fd9db0afd18565d8fe8feea0b8254c43d9c845b584ca5 datapathConfiguration="&{false false false false false }" interface=lxc01062e9ab56c k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9afc0513c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9afc0513c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9afc0513c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 identity=5630 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9afc0513c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 identity=5630 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9afc0513c0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=824 identity=5630 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9afc0513c0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=824 identity=5630 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.145 e4a1ccd6-0eee-4ee5-81e5-e510d98885e9 default }" containerID=121734c565bec7cbcc9d5bf3a4204ff33f5ba4d82464b742e31a01dbf55ee2ce datapathConfiguration="&{false false false false false }" interface=lxc0afd799d04c7 k8sPodName=openstack/cinder-scheduler-8b976975-djscw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=121734c565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4052 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/cinder-scheduler-8b976975-djscw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=121734c565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4052 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/cinder-scheduler-8b976975-djscw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=121734c565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4052 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.145 ipv6= k8sPodName=openstack/cinder-scheduler-8b976975-djscw line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=121734c565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4052 identity=22382 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/cinder-scheduler-8b976975-djscw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=121734c565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4052 identity=22382 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/cinder-scheduler-8b976975-djscw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=121734c565 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4052 identity=22382 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/cinder-scheduler-8b976975-djscw subsys=endpoint level=info msg="Successful endpoint creation" containerID=121734c565 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4052 identity=22382 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/cinder-scheduler-8b976975-djscw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.189 4781cce8-3eef-4c9c-9dc1-34c14e3b0a37 default }" containerID=420f867563babf6f830cde955b54f8f010b9623b24d5097f3b4dd800427b1c73 datapathConfiguration="&{false false false false false }" interface=lxc0c00be93c6ee k8sPodName=openstack/cinder-db-init-thbzn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=420f867563 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1929 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/cinder-db-init-thbzn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=420f867563 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1929 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=049e7c43-6ba7-4d3c-af04-bb51707b08d1,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=049e7c43-6ba7-4d3c-af04-bb51707b08d1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/cinder-db-init-thbzn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=049e7c43-6ba7-4d3c-af04-bb51707b08d1;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=049e7c43-6ba7-4d3c-af04-bb51707b08d1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=420f867563 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1929 identity=9091 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=049e7c43-6ba7-4d3c-af04-bb51707b08d1,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=049e7c43-6ba7-4d3c-af04-bb51707b08d1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/cinder-db-init-thbzn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=420f867563 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1929 identity=9091 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/cinder-db-init-thbzn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 8d98aa7d-2795-46cc-be13-67bd5884133f default }" containerID=8d957e47346a30d7e4bafe86a8a2533a8e0e8abcd806e7c636244903d9583572 datapathConfiguration="&{false false false false false }" interface=lxc565c97b3608f k8sPodName=openstack/cinder-api-6b69bdcb7c-jpcmt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d957e4734 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=335 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/cinder-api-6b69bdcb7c-jpcmt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d957e4734 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=335 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/cinder-api-6b69bdcb7c-jpcmt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d957e4734 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=335 identity=15351 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/cinder-api-6b69bdcb7c-jpcmt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d957e4734 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=335 identity=15351 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/cinder-api-6b69bdcb7c-jpcmt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=420f867563 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1929 identity=9091 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/cinder-db-init-thbzn subsys=endpoint level=info msg="Successful endpoint creation" containerID=420f867563 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1929 identity=9091 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/cinder-db-init-thbzn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8d957e4734 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=335 identity=15351 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/cinder-api-6b69bdcb7c-jpcmt subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d957e4734 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=335 identity=15351 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/cinder-api-6b69bdcb7c-jpcmt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=420f867563 endpointID=1929 k8sNamespace=openstack k8sPodName=cinder-db-init-thbzn subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=049e7c43-6ba7-4d3c-af04-bb51707b08d1 k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=049e7c43-6ba7-4d3c-af04-bb51707b08d1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=420f867563 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1929 identity=9091 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/cinder-db-init-thbzn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 3441a60e-b513-4587-8178-e591bc77096f default }" containerID=a1bc4bc9ecef4cea5d0c705d6587ac1b687aa517c2a6812a63a73320e0720b73 datapathConfiguration="&{false false false false false }" interface=lxc795bf04ab263 k8sPodName=openstack/cinder-db-sync-hpxnk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1bc4bc9ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-db-sync-hpxnk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1bc4bc9ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=937b00b3-6d6d-4b89-bb25-029fdaa8372f,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=937b00b3-6d6d-4b89-bb25-029fdaa8372f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-db-sync-hpxnk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=937b00b3-6d6d-4b89-bb25-029fdaa8372f;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=937b00b3-6d6d-4b89-bb25-029fdaa8372f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1bc4bc9ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identity=59902 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=937b00b3-6d6d-4b89-bb25-029fdaa8372f,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=937b00b3-6d6d-4b89-bb25-029fdaa8372f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-db-sync-hpxnk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1bc4bc9ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identity=59902 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-db-sync-hpxnk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a1bc4bc9ec datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=16 identity=59902 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-db-sync-hpxnk subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1bc4bc9ec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=16 identity=59902 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-db-sync-hpxnk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a1bc4bc9ec endpointID=16 k8sNamespace=openstack k8sPodName=cinder-db-sync-hpxnk subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=937b00b3-6d6d-4b89-bb25-029fdaa8372f k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=937b00b3-6d6d-4b89-bb25-029fdaa8372f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=a1bc4bc9ec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=16 identity=59902 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-db-sync-hpxnk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 ca337606-f9d6-4109-a518-387f5e98d012 default }" containerID=ae391447fdd67d4ec190cf5df135149b808fc0e8f1dfa67b8ea4eddaeda4aed4 datapathConfiguration="&{false false false false false }" interface=lxc10a5b6da3c46 k8sPodName=openstack/cinder-rabbit-init-8fqfs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae391447fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=945 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-rabbit-init-8fqfs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae391447fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=945 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=d70837cb-7ea6-42b3-a474-42ef5a9e09ed,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d70837cb-7ea6-42b3-a474-42ef5a9e09ed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-rabbit-init-8fqfs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ae391447fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=945 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-rabbit-init-8fqfs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=d70837cb-7ea6-42b3-a474-42ef5a9e09ed;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=d70837cb-7ea6-42b3-a474-42ef5a9e09ed;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae391447fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=945 identity=57112 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=d70837cb-7ea6-42b3-a474-42ef5a9e09ed,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d70837cb-7ea6-42b3-a474-42ef5a9e09ed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-rabbit-init-8fqfs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae391447fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=945 identity=57112 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-rabbit-init-8fqfs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ae391447fd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=945 identity=57112 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-rabbit-init-8fqfs subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae391447fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=945 identity=57112 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-rabbit-init-8fqfs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ae391447fd endpointID=945 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-8fqfs subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=d70837cb-7ea6-42b3-a474-42ef5a9e09ed k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=d70837cb-7ea6-42b3-a474-42ef5a9e09ed k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=ae391447fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=945 identity=57112 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-rabbit-init-8fqfs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 618a0c8c-5faa-4618-a6ae-d5d97a9605c1 default }" containerID=9f28c42e1c3947c2ce17de0772b91ae53585719c4f8803fbfde89b49e92fadef datapathConfiguration="&{false false false false false }" interface=lxcc4b670ee5c3b k8sPodName=openstack/cinder-ks-service-k9ttz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f28c42e1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/cinder-ks-service-k9ttz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f28c42e1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=dc84aaef-bf7a-4ed0-98c1-bfb547aa32b1,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=dc84aaef-bf7a-4ed0-98c1-bfb547aa32b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/cinder-ks-service-k9ttz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9f28c42e1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.59 ipv6= k8sPodName=openstack/cinder-ks-service-k9ttz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=dc84aaef-bf7a-4ed0-98c1-bfb547aa32b1;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=dc84aaef-bf7a-4ed0-98c1-bfb547aa32b1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f28c42e1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 identity=25562 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=dc84aaef-bf7a-4ed0-98c1-bfb547aa32b1,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=dc84aaef-bf7a-4ed0-98c1-bfb547aa32b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/cinder-ks-service-k9ttz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f28c42e1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 identity=25562 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/cinder-ks-service-k9ttz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f28c42e1c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=956 identity=25562 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/cinder-ks-service-k9ttz subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f28c42e1c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=956 identity=25562 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/cinder-ks-service-k9ttz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9f28c42e1c endpointID=956 k8sNamespace=openstack k8sPodName=cinder-ks-service-k9ttz subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=dc84aaef-bf7a-4ed0-98c1-bfb547aa32b1 k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=dc84aaef-bf7a-4ed0-98c1-bfb547aa32b1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=9f28c42e1c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=956 identity=25562 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/cinder-ks-service-k9ttz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 cbde3357-2dcf-4c0c-9474-c95fd1b00bf9 default }" containerID=0cf495e2870dbdc5fc2767f94477929df1696e16b6e2a826ca0c89ee5c6931d8 datapathConfiguration="&{false false false false false }" interface=lxca21f228f4a2d k8sPodName=openstack/cinder-ks-endpoints-s9qdl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0cf495e287 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3143 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/cinder-ks-endpoints-s9qdl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0cf495e287 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3143 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=348400b5-b891-43a1-9a44-459f4a75d491,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=348400b5-b891-43a1-9a44-459f4a75d491,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/cinder-ks-endpoints-s9qdl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=348400b5-b891-43a1-9a44-459f4a75d491;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=348400b5-b891-43a1-9a44-459f4a75d491;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0cf495e287 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3143 identity=34503 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=348400b5-b891-43a1-9a44-459f4a75d491,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=348400b5-b891-43a1-9a44-459f4a75d491,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/cinder-ks-endpoints-s9qdl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0cf495e287 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3143 identity=34503 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/cinder-ks-endpoints-s9qdl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0cf495e287 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3143 identity=34503 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/cinder-ks-endpoints-s9qdl subsys=endpoint level=info msg="Successful endpoint creation" containerID=0cf495e287 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3143 identity=34503 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/cinder-ks-endpoints-s9qdl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0cf495e287 endpointID=3143 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-s9qdl subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=348400b5-b891-43a1-9a44-459f4a75d491 k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=348400b5-b891-43a1-9a44-459f4a75d491 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=0cf495e287 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3143 identity=34503 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/cinder-ks-endpoints-s9qdl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 670f9b6b-ee75-44be-a8a0-f6d909ff6642 default }" containerID=914418fffa8a6b7be933856baa797ca012cdf33f1fb36ae1e3a1b9cdc8bec5e0 datapathConfiguration="&{false false false false false }" interface=lxc8dd605c5ffa9 k8sPodName=openstack/cinder-ks-user-7p5vp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=914418fffa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/cinder-ks-user-7p5vp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=914418fffa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=2258efd5-27c0-4ee1-aace-d3dc37eeffd2,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=2258efd5-27c0-4ee1-aace-d3dc37eeffd2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/cinder-ks-user-7p5vp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=2258efd5-27c0-4ee1-aace-d3dc37eeffd2;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=2258efd5-27c0-4ee1-aace-d3dc37eeffd2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=914418fffa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 identity=50445 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=2258efd5-27c0-4ee1-aace-d3dc37eeffd2,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=2258efd5-27c0-4ee1-aace-d3dc37eeffd2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/cinder-ks-user-7p5vp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=914418fffa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 identity=50445 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/cinder-ks-user-7p5vp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=914418fffa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=327 identity=50445 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/cinder-ks-user-7p5vp subsys=endpoint level=info msg="Successful endpoint creation" containerID=914418fffa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=327 identity=50445 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/cinder-ks-user-7p5vp subsys=daemon level=info msg="Delete endpoint request" containerID=914418fffa endpointID=327 k8sNamespace=openstack k8sPodName=cinder-ks-user-7p5vp subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=2258efd5-27c0-4ee1-aace-d3dc37eeffd2 k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=2258efd5-27c0-4ee1-aace-d3dc37eeffd2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=914418fffa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=327 identity=50445 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/cinder-ks-user-7p5vp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.150 8c50eb26-ca89-46d5-87b1-94760148d8ec default }" containerID=a300d00942b932afbeec5199a4130cf762c8536ce5c652ccd0d16e8b87c34028 datapathConfiguration="&{false false false false false }" interface=lxc72cbf10261fc k8sPodName=openstack/cinder-backup-storage-init-9q6w7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a300d00942 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3799 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/cinder-backup-storage-init-9q6w7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a300d00942 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3799 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a8c4962f-89a2-47df-8ac0-892f91bc5929,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=a8c4962f-89a2-47df-8ac0-892f91bc5929,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/cinder-backup-storage-init-9q6w7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=a8c4962f-89a2-47df-8ac0-892f91bc5929;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=a8c4962f-89a2-47df-8ac0-892f91bc5929;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a300d00942 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3799 identity=59983 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a8c4962f-89a2-47df-8ac0-892f91bc5929,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=a8c4962f-89a2-47df-8ac0-892f91bc5929,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/cinder-backup-storage-init-9q6w7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a300d00942 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3799 identity=59983 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/cinder-backup-storage-init-9q6w7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a300d00942 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3799 identity=59983 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/cinder-backup-storage-init-9q6w7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a300d00942 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3799 identity=59983 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/cinder-backup-storage-init-9q6w7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a300d00942 endpointID=3799 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-9q6w7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=a8c4962f-89a2-47df-8ac0-892f91bc5929 k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=a8c4962f-89a2-47df-8ac0-892f91bc5929 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=a300d00942 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3799 identity=59983 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/cinder-backup-storage-init-9q6w7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 c6ce6db5-b6cb-4a4a-8f6d-f137e781e36d default }" containerID=909898c7492de1d823e378c114e3d6500e45784b62370c9eda67fe3f9cc9cb47 datapathConfiguration="&{false false false false false }" interface=lxc15eb2bc3a562 k8sPodName=openstack/cinder-create-internal-tenant-m2zpv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=909898c749 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1867 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-m2zpv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=909898c749 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1867 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=7afc8a1f-4bdd-4716-8485-2b22e363a2aa,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=7afc8a1f-4bdd-4716-8485-2b22e363a2aa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-m2zpv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=7afc8a1f-4bdd-4716-8485-2b22e363a2aa;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=7afc8a1f-4bdd-4716-8485-2b22e363a2aa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=909898c749 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1867 identity=15541 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=7afc8a1f-4bdd-4716-8485-2b22e363a2aa,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=7afc8a1f-4bdd-4716-8485-2b22e363a2aa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-m2zpv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=909898c749 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1867 identity=15541 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-m2zpv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=909898c749 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1867 identity=15541 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-m2zpv subsys=endpoint level=info msg="Successful endpoint creation" containerID=909898c749 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1867 identity=15541 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-m2zpv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=909898c749 endpointID=1867 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-m2zpv subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=7afc8a1f-4bdd-4716-8485-2b22e363a2aa k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=7afc8a1f-4bdd-4716-8485-2b22e363a2aa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=909898c749 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1867 identity=15541 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-m2zpv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 ef5145dd-aec6-4ace-9b8b-d90683ba139d default }" containerID=496f78051a756e15b7e28990e59f7d3975da6962a1df419dc5a52ab23f8316ee datapathConfiguration="&{false false false false false }" interface=lxced77b359f1be k8sPodName=openstack/cinder-storage-init-qn4f4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=496f78051a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=997 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/cinder-storage-init-qn4f4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=496f78051a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=997 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=8609c9c6-cfeb-45bd-9e17-9135be61e728,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=8609c9c6-cfeb-45bd-9e17-9135be61e728,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/cinder-storage-init-qn4f4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=8609c9c6-cfeb-45bd-9e17-9135be61e728;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=8609c9c6-cfeb-45bd-9e17-9135be61e728;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=496f78051a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=997 identity=56938 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=8609c9c6-cfeb-45bd-9e17-9135be61e728,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=8609c9c6-cfeb-45bd-9e17-9135be61e728,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/cinder-storage-init-qn4f4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=496f78051a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=997 identity=56938 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/cinder-storage-init-qn4f4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=496f78051a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=997 identity=56938 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/cinder-storage-init-qn4f4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=496f78051a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=997 identity=56938 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/cinder-storage-init-qn4f4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=496f78051a endpointID=997 k8sNamespace=openstack k8sPodName=cinder-storage-init-qn4f4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=8609c9c6-cfeb-45bd-9e17-9135be61e728 k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=8609c9c6-cfeb-45bd-9e17-9135be61e728 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=496f78051a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=997 identity=56938 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/cinder-storage-init-qn4f4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 9b711026-ecbd-432d-a5c5-b3542fde20a1 default }" containerID=531cc76f171ca5a7273fff29356d5ff68721595c558b264fcd1336a24be56beb datapathConfiguration="&{false false false false false }" interface=lxc6d2113c7e5a8 k8sPodName=openstack/cinder-bootstrap-d6h2j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=531cc76f17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/cinder-bootstrap-d6h2j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=531cc76f17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=2ca5e934-a804-4ea2-8c4c-c77b362a4f8d,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=2ca5e934-a804-4ea2-8c4c-c77b362a4f8d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/cinder-bootstrap-d6h2j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=2ca5e934-a804-4ea2-8c4c-c77b362a4f8d;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=2ca5e934-a804-4ea2-8c4c-c77b362a4f8d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=531cc76f17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 identity=12694 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=2ca5e934-a804-4ea2-8c4c-c77b362a4f8d,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=2ca5e934-a804-4ea2-8c4c-c77b362a4f8d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/cinder-bootstrap-d6h2j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=531cc76f17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 identity=12694 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/cinder-bootstrap-d6h2j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=531cc76f17 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=327 identity=12694 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/cinder-bootstrap-d6h2j subsys=endpoint level=info msg="Successful endpoint creation" containerID=531cc76f17 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=327 identity=12694 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/cinder-bootstrap-d6h2j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.203 096c4599-b804-47f9-abda-98b6668406c9 default }" containerID=672e4550f2ea7bb726294ceb8cbc4a465f8ce3c171301ee616527a6380dee641 datapathConfiguration="&{false false false false false }" interface=lxce8d318d3a9d9 k8sPodName=openstack/cinder-volume-66ccccf457-62xxh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=672e4550f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/cinder-volume-66ccccf457-62xxh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=672e4550f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/cinder-volume-66ccccf457-62xxh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=672e4550f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.203 ipv6= k8sPodName=openstack/cinder-volume-66ccccf457-62xxh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=672e4550f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 identity=50113 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/cinder-volume-66ccccf457-62xxh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=672e4550f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 identity=50113 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/cinder-volume-66ccccf457-62xxh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 3d0357df-fb18-4a8d-ac12-63b08e2f3bd0 default }" containerID=4e6ac0c368f8ed5936a9e2f59119329845dfe606da01e4f8b5cc37d783c1762a datapathConfiguration="&{false false false false false }" interface=lxccb6e21cb8705 k8sPodName=openstack/cinder-backup-7d6ff587f9-z5x9f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e6ac0c368 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=794 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/cinder-backup-7d6ff587f9-z5x9f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e6ac0c368 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=794 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/cinder-backup-7d6ff587f9-z5x9f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e6ac0c368 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=794 identity=35495 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/cinder-backup-7d6ff587f9-z5x9f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e6ac0c368 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=794 identity=35495 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/cinder-backup-7d6ff587f9-z5x9f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=672e4550f2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1403 identity=50113 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/cinder-volume-66ccccf457-62xxh subsys=endpoint level=info msg="Successful endpoint creation" containerID=672e4550f2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1403 identity=50113 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/cinder-volume-66ccccf457-62xxh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4e6ac0c368 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=794 identity=35495 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/cinder-backup-7d6ff587f9-z5x9f subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e6ac0c368 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=794 identity=35495 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/cinder-backup-7d6ff587f9-z5x9f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=531cc76f17 endpointID=327 k8sNamespace=openstack k8sPodName=cinder-bootstrap-d6h2j subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=2ca5e934-a804-4ea2-8c4c-c77b362a4f8d k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=2ca5e934-a804-4ea2-8c4c-c77b362a4f8d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=531cc76f17 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=327 identity=12694 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/cinder-bootstrap-d6h2j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 acd7e76b-af85-4d73-b533-f579f83b8e36 default }" containerID=5542bb45395c669e8c306499d9334f3930edbdbdb98ed1d3bd2141f760206f5f datapathConfiguration="&{false false false false false }" interface=lxc62071b40d84c k8sPodName=openstack/placement-api-546f4cd8f4-wxgb5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5542bb4539 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1789 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/placement-api-546f4cd8f4-wxgb5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5542bb4539 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1789 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/placement-api-546f4cd8f4-wxgb5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=5542bb4539 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1789 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.16 ipv6= k8sPodName=openstack/placement-api-546f4cd8f4-wxgb5 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5542bb4539 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1789 identity=46880 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/placement-api-546f4cd8f4-wxgb5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5542bb4539 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1789 identity=46880 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/placement-api-546f4cd8f4-wxgb5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.11 4c32577e-f94b-4f0d-8a5b-46bf0df8a4a3 default }" containerID=f9c3598893436723bfaa751c84cffb5d50eaca7912938c6adc6fc63077fc5c9a datapathConfiguration="&{false false false false false }" interface=lxcdd22c199a80e k8sPodName=openstack/placement-db-init-m6wsz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9c3598893 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3534 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/placement-db-init-m6wsz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9c3598893 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3534 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=cf3de951-075e-4aa3-afbb-fe5993152e0f,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=cf3de951-075e-4aa3-afbb-fe5993152e0f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/placement-db-init-m6wsz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=cf3de951-075e-4aa3-afbb-fe5993152e0f;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=cf3de951-075e-4aa3-afbb-fe5993152e0f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f9c3598893 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3534 identity=52854 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=cf3de951-075e-4aa3-afbb-fe5993152e0f,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=cf3de951-075e-4aa3-afbb-fe5993152e0f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/placement-db-init-m6wsz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9c3598893 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3534 identity=52854 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/placement-db-init-m6wsz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5542bb4539 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1789 identity=46880 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/placement-api-546f4cd8f4-wxgb5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5542bb4539 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1789 identity=46880 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/placement-api-546f4cd8f4-wxgb5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f9c3598893 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3534 identity=52854 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/placement-db-init-m6wsz subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9c3598893 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3534 identity=52854 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/placement-db-init-m6wsz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f9c3598893 endpointID=3534 k8sNamespace=openstack k8sPodName=placement-db-init-m6wsz subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=cf3de951-075e-4aa3-afbb-fe5993152e0f k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=cf3de951-075e-4aa3-afbb-fe5993152e0f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=f9c3598893 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3534 identity=52854 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/placement-db-init-m6wsz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 88836c04-bd34-415e-a1dd-7e8ee369c070 default }" containerID=d53dd43a7b220729d784755f98c517b21a318cdfecdf4b097c519a2edf016fb9 datapathConfiguration="&{false false false false false }" interface=lxce49dd37f1601 k8sPodName=openstack/placement-db-sync-fs5fv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d53dd43a7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4039 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/placement-db-sync-fs5fv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d53dd43a7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4039 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=c737a782-3ff6-4751-ad01-c08cb040ac28,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=c737a782-3ff6-4751-ad01-c08cb040ac28,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/placement-db-sync-fs5fv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=c737a782-3ff6-4751-ad01-c08cb040ac28;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=c737a782-3ff6-4751-ad01-c08cb040ac28;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d53dd43a7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4039 identity=27451 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=c737a782-3ff6-4751-ad01-c08cb040ac28,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=c737a782-3ff6-4751-ad01-c08cb040ac28,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/placement-db-sync-fs5fv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d53dd43a7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4039 identity=27451 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/placement-db-sync-fs5fv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d53dd43a7b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4039 identity=27451 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/placement-db-sync-fs5fv subsys=endpoint level=info msg="Successful endpoint creation" containerID=d53dd43a7b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4039 identity=27451 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/placement-db-sync-fs5fv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d53dd43a7b endpointID=4039 k8sNamespace=openstack k8sPodName=placement-db-sync-fs5fv subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=c737a782-3ff6-4751-ad01-c08cb040ac28 k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=c737a782-3ff6-4751-ad01-c08cb040ac28 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=d53dd43a7b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4039 identity=27451 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/placement-db-sync-fs5fv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 e3fa56d6-9d31-4291-9b2e-0dbe89701ef6 default }" containerID=21bff559791e30fd9b533e196fb400ebfe1ccc776850ce11d11707366fc4fcdd datapathConfiguration="&{false false false false false }" interface=lxcfae20a7b9a3f k8sPodName=openstack/placement-ks-service-6c9tb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=21bff55979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=924 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/placement-ks-service-6c9tb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=21bff55979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=924 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=db7c2a38-fad2-45b3-9f91-30bacea824bf,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=db7c2a38-fad2-45b3-9f91-30bacea824bf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/placement-ks-service-6c9tb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=db7c2a38-fad2-45b3-9f91-30bacea824bf;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=db7c2a38-fad2-45b3-9f91-30bacea824bf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=21bff55979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=924 identity=22184 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=db7c2a38-fad2-45b3-9f91-30bacea824bf,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=db7c2a38-fad2-45b3-9f91-30bacea824bf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/placement-ks-service-6c9tb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=21bff55979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=924 identity=22184 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/placement-ks-service-6c9tb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=21bff55979 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=924 identity=22184 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/placement-ks-service-6c9tb subsys=endpoint level=info msg="Successful endpoint creation" containerID=21bff55979 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=924 identity=22184 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/placement-ks-service-6c9tb subsys=daemon level=info msg="Delete endpoint request" containerID=21bff55979 endpointID=924 k8sNamespace=openstack k8sPodName=placement-ks-service-6c9tb subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=db7c2a38-fad2-45b3-9f91-30bacea824bf k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=db7c2a38-fad2-45b3-9f91-30bacea824bf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=21bff55979 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=924 identity=22184 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/placement-ks-service-6c9tb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 bc5c163b-7912-4c9a-86ae-18f6ec50ac80 default }" containerID=1a272aad1c90cd508f0d9d7e09a1e047c2702958e141165d012e8a802c59bb46 datapathConfiguration="&{false false false false false }" interface=lxcd1a4a922668c k8sPodName=openstack/placement-ks-user-ztfcq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1a272aad1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2974 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/placement-ks-user-ztfcq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1a272aad1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2974 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=c6bac5f8-2837-4f43-a503-5bad2a0fc410,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=c6bac5f8-2837-4f43-a503-5bad2a0fc410,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/placement-ks-user-ztfcq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=c6bac5f8-2837-4f43-a503-5bad2a0fc410;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=c6bac5f8-2837-4f43-a503-5bad2a0fc410;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1a272aad1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2974 identity=48269 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=c6bac5f8-2837-4f43-a503-5bad2a0fc410,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=c6bac5f8-2837-4f43-a503-5bad2a0fc410,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/placement-ks-user-ztfcq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1a272aad1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2974 identity=48269 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/placement-ks-user-ztfcq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1a272aad1c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2974 identity=48269 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/placement-ks-user-ztfcq subsys=endpoint level=info msg="Successful endpoint creation" containerID=1a272aad1c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2974 identity=48269 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/placement-ks-user-ztfcq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1a272aad1c endpointID=2974 k8sNamespace=openstack k8sPodName=placement-ks-user-ztfcq subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=c6bac5f8-2837-4f43-a503-5bad2a0fc410 k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=c6bac5f8-2837-4f43-a503-5bad2a0fc410 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=1a272aad1c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2974 identity=48269 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/placement-ks-user-ztfcq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 a5bb13ed-6645-4133-9170-6d703343dee2 default }" containerID=59d11e51a106a627a66f8f36d5a7c4f769c6b86ae39dcd1331ca73814bee7a0d datapathConfiguration="&{false false false false false }" interface=lxcc990813ecdf9 k8sPodName=openstack/placement-ks-endpoints-rr4kg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=59d11e51a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1396 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/placement-ks-endpoints-rr4kg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=59d11e51a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1396 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=7bf499cc-2d85-4b79-953e-6373ed22e468,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7bf499cc-2d85-4b79-953e-6373ed22e468,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/placement-ks-endpoints-rr4kg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=7bf499cc-2d85-4b79-953e-6373ed22e468;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=7bf499cc-2d85-4b79-953e-6373ed22e468;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=59d11e51a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1396 identity=5488 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=7bf499cc-2d85-4b79-953e-6373ed22e468,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7bf499cc-2d85-4b79-953e-6373ed22e468,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/placement-ks-endpoints-rr4kg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=59d11e51a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1396 identity=5488 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/placement-ks-endpoints-rr4kg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=59d11e51a1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1396 identity=5488 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/placement-ks-endpoints-rr4kg subsys=endpoint level=info msg="Successful endpoint creation" containerID=59d11e51a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1396 identity=5488 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/placement-ks-endpoints-rr4kg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=59d11e51a1 endpointID=1396 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-rr4kg subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=7bf499cc-2d85-4b79-953e-6373ed22e468 k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=7bf499cc-2d85-4b79-953e-6373ed22e468 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=59d11e51a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1396 identity=5488 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/placement-ks-endpoints-rr4kg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 c92f578c-092d-437d-9990-f4b7b58bb6cd default }" containerID=210e4640fd154b837e91d9212bc84e0231668c2e3fc9c1225a26b04eda9cdf27 datapathConfiguration="&{false false false false false }" interface=lxce26ed3752fbd k8sPodName=openstack/neutron-coredns-7dd4958666-cmgwq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=210e4640fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=384 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-cmgwq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=210e4640fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=384 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-cmgwq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=neutron-coredns;k8s:app.kubernetes.io/name=coredns;k8s:application=neutron;k8s:component=coredns;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=210e4640fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=384 identity=39395 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-cmgwq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=210e4640fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=384 identity=39395 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-cmgwq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=210e4640fd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=384 identity=39395 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-cmgwq subsys=endpoint level=info msg="Successful endpoint creation" containerID=210e4640fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=384 identity=39395 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-cmgwq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.71 4a10584a-ac5e-4b8e-a6d1-06a604f1c645 default }" containerID=043738a57314ca629af3ed0854abcc5823372f3f6b90670e349dcf7f67f0719f datapathConfiguration="&{false false false false false }" interface=lxcdac168215650 k8sPodName=openstack/rabbitmq-nova-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=043738a573 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=043738a573 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-nova;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=043738a573 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identity=32393 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=043738a573 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identity=32393 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=043738a573 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=563 identity=32393 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=043738a573 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=563 identity=32393 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.75 f148d878-1d04-4c0b-93e3-03624e3e1a55 default }" containerID=efda6896a2132360ea6ee6922c67b0150bf918174d02406149313a49d71d0fbf datapathConfiguration="&{false false false false false }" interface=lxce4ac22314549 k8sPodName=openstack/nova-api-osapi-576c49c5bf-9khw8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=efda6896a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=352 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/nova-api-osapi-576c49c5bf-9khw8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=efda6896a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=352 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/nova-api-osapi-576c49c5bf-9khw8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=os-api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=efda6896a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=352 identity=45294 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/nova-api-osapi-576c49c5bf-9khw8 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=efda6896a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=352 identity=45294 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/nova-api-osapi-576c49c5bf-9khw8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 aef2bd03-1436-4b1f-bb42-4f0a63cbf391 default }" containerID=d3260c05a72c6479996bd0b58cfb880ae739587ad7ac9562043111e914baa58f datapathConfiguration="&{false false false false false }" interface=lxc67265e7dc2f9 k8sPodName=openstack/nova-bootstrap-z8mcj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d3260c05a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1178 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/nova-bootstrap-z8mcj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d3260c05a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1178 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=d5f93eec-b15a-4514-b6f1-20b4ae4b0e43,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=d5f93eec-b15a-4514-b6f1-20b4ae4b0e43,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/nova-bootstrap-z8mcj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=d5f93eec-b15a-4514-b6f1-20b4ae4b0e43;k8s:batch.kubernetes.io/job-name=nova-bootstrap;k8s:component=bootstrap;k8s:controller-uid=d5f93eec-b15a-4514-b6f1-20b4ae4b0e43;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-bootstrap;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d3260c05a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1178 identity=14425 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=d5f93eec-b15a-4514-b6f1-20b4ae4b0e43,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=d5f93eec-b15a-4514-b6f1-20b4ae4b0e43,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/nova-bootstrap-z8mcj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d3260c05a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1178 identity=14425 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/nova-bootstrap-z8mcj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.60 3563fd73-62ad-4794-913c-738057956b65 default }" containerID=52040a678be88756494989727086b8ed5d0e70057c9424cdaab05ec284215ec5 datapathConfiguration="&{false false false false false }" interface=lxcf8cc1cbc0534 k8sPodName=openstack/nova-scheduler-766d565c5-gdbq8 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.56 61608185-42fd-4168-bb20-b3a22be98c5b default }" containerID=d5319e296dd90c5fc13f9e23a433464b27685fcbc887d2b3bd6bf5f0ae44c5b0 datapathConfiguration="&{false false false false false }" interface=lxcde7859459653 k8sPodName=openstack/nova-cell-setup-2l8g7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=52040a678b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2254 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/nova-scheduler-766d565c5-gdbq8 subsys=endpoint level=info msg="New endpoint" containerID=d5319e296d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2475 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/nova-cell-setup-2l8g7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=52040a678b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2254 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/nova-scheduler-766d565c5-gdbq8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=d5319e296d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2475 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=c181a72f-e646-4d6b-a2d0-ffb564fa8d6e,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=c181a72f-e646-4d6b-a2d0-ffb564fa8d6e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/nova-cell-setup-2l8g7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 c337eb94-00fe-470e-b0c8-7be999005729 default }" containerID=027d2fdc80988fffabe33397b212a0f5d69d8ababb132fe55989047e4635fa82 datapathConfiguration="&{false false false false false }" interface=lxc00afb7c2e757 k8sPodName=openstack/nova-conductor-546574fff5-9cr6w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=027d2fdc80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1001 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/nova-conductor-546574fff5-9cr6w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=027d2fdc80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1001 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/nova-conductor-546574fff5-9cr6w subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=52040a678b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2254 identity=56167 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/nova-scheduler-766d565c5-gdbq8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=52040a678b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2254 identity=56167 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/nova-scheduler-766d565c5-gdbq8 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=c181a72f-e646-4d6b-a2d0-ffb564fa8d6e;k8s:batch.kubernetes.io/job-name=nova-cell-setup;k8s:component=cell-setup;k8s:controller-uid=c181a72f-e646-4d6b-a2d0-ffb564fa8d6e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup;k8s:release_group=nova;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=d5319e296d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2475 identity=11851 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=c181a72f-e646-4d6b-a2d0-ffb564fa8d6e,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=c181a72f-e646-4d6b-a2d0-ffb564fa8d6e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/nova-cell-setup-2l8g7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d5319e296d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2475 identity=11851 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/nova-cell-setup-2l8g7 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=027d2fdc80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1001 identity=4303 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/nova-conductor-546574fff5-9cr6w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=027d2fdc80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1001 identity=4303 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/nova-conductor-546574fff5-9cr6w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=efda6896a2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=352 identity=45294 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/nova-api-osapi-576c49c5bf-9khw8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=efda6896a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=352 identity=45294 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/nova-api-osapi-576c49c5bf-9khw8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.149 ce4ef889-c48a-490b-98ec-8de4f8453d84 default }" containerID=7282c5c8f729aaf5e954c0632ac6e3d03636d9d4ae07179209c7ef82c93b6787 datapathConfiguration="&{false false false false false }" interface=lxc2f3f7f5a4f10 k8sPodName=openstack/nova-api-metadata-84d5db6844-p5m4h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7282c5c8f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=231 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/nova-api-metadata-84d5db6844-p5m4h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7282c5c8f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=231 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/nova-api-metadata-84d5db6844-p5m4h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=d3260c05a7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1178 identity=14425 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/nova-bootstrap-z8mcj subsys=endpoint level=info msg="Successful endpoint creation" containerID=d3260c05a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1178 identity=14425 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/nova-bootstrap-z8mcj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.72 f910d9a0-062c-48e7-9875-d2a35318b2b8 default }" containerID=6d028a0d2cda959ccb22a1cec4420aed03418219322ccb3f8a1d6eb374368336 datapathConfiguration="&{false false false false false }" interface=lxca0b78c63e6d2 k8sPodName=openstack/nova-db-init-r4l86 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d028a0d2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3417 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/nova-db-init-r4l86 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d028a0d2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3417 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=25319cee-61ec-4ec6-8bb0-d6f1ee3e9ba0,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=25319cee-61ec-4ec6-8bb0-d6f1ee3e9ba0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/nova-db-init-r4l86 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d5319e296d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2475 identity=11851 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/nova-cell-setup-2l8g7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d5319e296d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2475 identity=11851 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/nova-cell-setup-2l8g7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=52040a678b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2254 identity=56167 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/nova-scheduler-766d565c5-gdbq8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=52040a678b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2254 identity=56167 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/nova-scheduler-766d565c5-gdbq8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=027d2fdc80 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1001 identity=4303 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/nova-conductor-546574fff5-9cr6w subsys=endpoint level=info msg="Successful endpoint creation" containerID=027d2fdc80 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1001 identity=4303 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/nova-conductor-546574fff5-9cr6w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6d028a0d2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3417 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.72 ipv6= k8sPodName=openstack/nova-db-init-r4l86 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=7282c5c8f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=231 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.149 ipv6= k8sPodName=openstack/nova-api-metadata-84d5db6844-p5m4h line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=metadata;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=7282c5c8f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=231 identity=48700 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/nova-api-metadata-84d5db6844-p5m4h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7282c5c8f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=231 identity=48700 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/nova-api-metadata-84d5db6844-p5m4h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7282c5c8f7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=231 identity=48700 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/nova-api-metadata-84d5db6844-p5m4h subsys=endpoint level=info msg="Successful endpoint creation" containerID=7282c5c8f7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=231 identity=48700 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/nova-api-metadata-84d5db6844-p5m4h subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=25319cee-61ec-4ec6-8bb0-d6f1ee3e9ba0;k8s:batch.kubernetes.io/job-name=nova-db-init;k8s:component=db-init;k8s:controller-uid=25319cee-61ec-4ec6-8bb0-d6f1ee3e9ba0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d028a0d2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3417 identity=35364 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=25319cee-61ec-4ec6-8bb0-d6f1ee3e9ba0,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=25319cee-61ec-4ec6-8bb0-d6f1ee3e9ba0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/nova-db-init-r4l86 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6d028a0d2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3417 identity=35364 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/nova-db-init-r4l86 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6d028a0d2c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3417 identity=35364 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/nova-db-init-r4l86 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d028a0d2c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3417 identity=35364 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/nova-db-init-r4l86 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.55 0760773e-ed6b-46ea-8cfa-d4536c8155d8 default }" containerID=5328f0fd1215b22d5158e264c7255b112e4a8e551d14b550bed134c313b334c1 datapathConfiguration="&{false false false false false }" interface=lxcf0d7db6942bc k8sPodName=openstack/nova-novncproxy-774b456ccb-vl4rv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5328f0fd12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=371 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/nova-novncproxy-774b456ccb-vl4rv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5328f0fd12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=371 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/nova-novncproxy-774b456ccb-vl4rv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=novnc-proxy;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5328f0fd12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=371 identity=26557 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/nova-novncproxy-774b456ccb-vl4rv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5328f0fd12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=371 identity=26557 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/nova-novncproxy-774b456ccb-vl4rv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5328f0fd12 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=371 identity=26557 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/nova-novncproxy-774b456ccb-vl4rv subsys=endpoint level=info msg="Successful endpoint creation" containerID=5328f0fd12 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=371 identity=26557 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/nova-novncproxy-774b456ccb-vl4rv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6d028a0d2c endpointID=3417 k8sNamespace=openstack k8sPodName=nova-db-init-r4l86 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=25319cee-61ec-4ec6-8bb0-d6f1ee3e9ba0 k8s:batch.kubernetes.io/job-name=nova-db-init k8s:component=db-init k8s:controller-uid=25319cee-61ec-4ec6-8bb0-d6f1ee3e9ba0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=6d028a0d2c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3417 identity=35364 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/nova-db-init-r4l86 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 8ed362f8-5532-4db2-9dfb-40f72658e709 default }" containerID=66397c84ef9676a949c837353208226b645bcb053176d7f6658f7efecceb4e32 datapathConfiguration="&{false false false false false }" interface=lxc0a20d99d9eb8 k8sPodName=openstack/nova-db-sync-b22tn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=66397c84ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3528 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/nova-db-sync-b22tn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=66397c84ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3528 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=5ed00159-9765-4f77-875c-8060d03e33f6,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=5ed00159-9765-4f77-875c-8060d03e33f6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/nova-db-sync-b22tn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=5ed00159-9765-4f77-875c-8060d03e33f6;k8s:batch.kubernetes.io/job-name=nova-db-sync;k8s:component=db-sync;k8s:controller-uid=5ed00159-9765-4f77-875c-8060d03e33f6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-sync;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=66397c84ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3528 identity=9647 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=5ed00159-9765-4f77-875c-8060d03e33f6,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=5ed00159-9765-4f77-875c-8060d03e33f6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/nova-db-sync-b22tn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=66397c84ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3528 identity=9647 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/nova-db-sync-b22tn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=66397c84ef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3528 identity=9647 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/nova-db-sync-b22tn subsys=endpoint level=info msg="Successful endpoint creation" containerID=66397c84ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3528 identity=9647 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/nova-db-sync-b22tn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=66397c84ef endpointID=3528 k8sNamespace=openstack k8sPodName=nova-db-sync-b22tn subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=5ed00159-9765-4f77-875c-8060d03e33f6 k8s:batch.kubernetes.io/job-name=nova-db-sync k8s:component=db-sync k8s:controller-uid=5ed00159-9765-4f77-875c-8060d03e33f6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-sync k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=66397c84ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3528 identity=9647 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/nova-db-sync-b22tn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 adb5665e-85ec-4ee9-815e-cc48f7cfbfe2 default }" containerID=459015e9a1a3572d41aabe2f977318fb9405bb66ebfde43e7fea9c4e43cb59d7 datapathConfiguration="&{false false false false false }" interface=lxc526d0135d10f k8sPodName=openstack/nova-rabbit-init-gqqlf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=459015e9a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/nova-rabbit-init-gqqlf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=459015e9a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=4f70b192-e735-4c39-a5ba-00191f38d45e,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4f70b192-e735-4c39-a5ba-00191f38d45e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/nova-rabbit-init-gqqlf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=459015e9a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.8 ipv6= k8sPodName=openstack/nova-rabbit-init-gqqlf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=4f70b192-e735-4c39-a5ba-00191f38d45e;k8s:batch.kubernetes.io/job-name=nova-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=4f70b192-e735-4c39-a5ba-00191f38d45e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-rabbit-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=459015e9a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 identity=50057 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=4f70b192-e735-4c39-a5ba-00191f38d45e,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4f70b192-e735-4c39-a5ba-00191f38d45e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/nova-rabbit-init-gqqlf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=459015e9a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 identity=50057 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/nova-rabbit-init-gqqlf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=459015e9a1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=599 identity=50057 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/nova-rabbit-init-gqqlf subsys=endpoint level=info msg="Successful endpoint creation" containerID=459015e9a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=599 identity=50057 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/nova-rabbit-init-gqqlf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=459015e9a1 endpointID=599 k8sNamespace=openstack k8sPodName=nova-rabbit-init-gqqlf subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=4f70b192-e735-4c39-a5ba-00191f38d45e k8s:batch.kubernetes.io/job-name=nova-rabbit-init k8s:component=rabbit-init k8s:controller-uid=4f70b192-e735-4c39-a5ba-00191f38d45e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-rabbit-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=459015e9a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=599 identity=50057 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/nova-rabbit-init-gqqlf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 280bf55c-49f8-406f-8e07-43cf7711f56b default }" containerID=01364d521df0a60bb3f1df8021b48354edbbcf1ccaffb236fe94919d28674e57 datapathConfiguration="&{false false false false false }" interface=lxc911e04171f27 k8sPodName=openstack/nova-ks-service-np68w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01364d521d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/nova-ks-service-np68w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01364d521d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=d169a666-72e4-4c4d-85dc-e83c10424d0b,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=d169a666-72e4-4c4d-85dc-e83c10424d0b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/nova-ks-service-np68w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=d169a666-72e4-4c4d-85dc-e83c10424d0b;k8s:batch.kubernetes.io/job-name=nova-ks-service;k8s:component=ks-service;k8s:controller-uid=d169a666-72e4-4c4d-85dc-e83c10424d0b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-service;k8s:release_group=nova;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=01364d521d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.183 ipv6= k8sPodName=openstack/nova-ks-service-np68w line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=01364d521d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 identity=3381 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=d169a666-72e4-4c4d-85dc-e83c10424d0b,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=d169a666-72e4-4c4d-85dc-e83c10424d0b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/nova-ks-service-np68w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=01364d521d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 identity=3381 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/nova-ks-service-np68w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=01364d521d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=603 identity=3381 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/nova-ks-service-np68w subsys=endpoint level=info msg="Successful endpoint creation" containerID=01364d521d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=603 identity=3381 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/nova-ks-service-np68w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=01364d521d endpointID=603 k8sNamespace=openstack k8sPodName=nova-ks-service-np68w subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=d169a666-72e4-4c4d-85dc-e83c10424d0b k8s:batch.kubernetes.io/job-name=nova-ks-service k8s:component=ks-service k8s:controller-uid=d169a666-72e4-4c4d-85dc-e83c10424d0b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-service k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=01364d521d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=603 identity=3381 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/nova-ks-service-np68w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.161 9c02502a-199b-42d5-8fe3-43aca4c7281e default }" containerID=70b5eb59bf4bc95e256194dbee2f555e207c8e1512650a7f6acf93b7de26ab29 datapathConfiguration="&{false false false false false }" interface=lxce67b937403c9 k8sPodName=openstack/nova-ks-endpoints-kg9wv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=70b5eb59bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3880 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/nova-ks-endpoints-kg9wv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=70b5eb59bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3880 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=dc54e3cf-1e8f-49c4-a829-506c7b3181c5,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=dc54e3cf-1e8f-49c4-a829-506c7b3181c5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/nova-ks-endpoints-kg9wv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=dc54e3cf-1e8f-49c4-a829-506c7b3181c5;k8s:batch.kubernetes.io/job-name=nova-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=dc54e3cf-1e8f-49c4-a829-506c7b3181c5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-endpoints;k8s:release_group=nova;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=70b5eb59bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3880 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.161 ipv6= k8sPodName=openstack/nova-ks-endpoints-kg9wv line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=70b5eb59bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3880 identity=41796 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=dc54e3cf-1e8f-49c4-a829-506c7b3181c5,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=dc54e3cf-1e8f-49c4-a829-506c7b3181c5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/nova-ks-endpoints-kg9wv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=70b5eb59bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3880 identity=41796 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/nova-ks-endpoints-kg9wv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=70b5eb59bf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3880 identity=41796 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/nova-ks-endpoints-kg9wv subsys=endpoint level=info msg="Successful endpoint creation" containerID=70b5eb59bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3880 identity=41796 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/nova-ks-endpoints-kg9wv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=70b5eb59bf endpointID=3880 k8sNamespace=openstack k8sPodName=nova-ks-endpoints-kg9wv subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=dc54e3cf-1e8f-49c4-a829-506c7b3181c5 k8s:batch.kubernetes.io/job-name=nova-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=dc54e3cf-1e8f-49c4-a829-506c7b3181c5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-endpoints k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=70b5eb59bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3880 identity=41796 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/nova-ks-endpoints-kg9wv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.129 27795fe9-e09d-410a-868e-ea717017a245 default }" containerID=a1c9675c756d1cf42a71592a3723deb8889dd7d0676cf4f2f1c8d80f7ee79f13 datapathConfiguration="&{false false false false false }" interface=lxc47d92e1e5641 k8sPodName=openstack/nova-ks-user-gfn8p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1c9675c75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/nova-ks-user-gfn8p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1c9675c75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=036371f5-2c31-431a-b512-2a877d23db8f,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=036371f5-2c31-431a-b512-2a877d23db8f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/nova-ks-user-gfn8p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=036371f5-2c31-431a-b512-2a877d23db8f;k8s:batch.kubernetes.io/job-name=nova-ks-user;k8s:component=ks-user;k8s:controller-uid=036371f5-2c31-431a-b512-2a877d23db8f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-user;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1c9675c75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 identity=36577 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=036371f5-2c31-431a-b512-2a877d23db8f,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=036371f5-2c31-431a-b512-2a877d23db8f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/nova-ks-user-gfn8p oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a1c9675c75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 identity=36577 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/nova-ks-user-gfn8p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a1c9675c75 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=504 identity=36577 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/nova-ks-user-gfn8p subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1c9675c75 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=504 identity=36577 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/nova-ks-user-gfn8p subsys=daemon level=info msg="Delete endpoint request" containerID=a1c9675c75 endpointID=504 k8sNamespace=openstack k8sPodName=nova-ks-user-gfn8p subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=036371f5-2c31-431a-b512-2a877d23db8f k8s:batch.kubernetes.io/job-name=nova-ks-user k8s:component=ks-user k8s:controller-uid=036371f5-2c31-431a-b512-2a877d23db8f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-user k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=a1c9675c75 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=504 identity=36577 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/nova-ks-user-gfn8p subsys=endpoint level=info msg="Delete endpoint request" containerID=d3260c05a7 endpointID=1178 k8sNamespace=openstack k8sPodName=nova-bootstrap-z8mcj subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=d5f93eec-b15a-4514-b6f1-20b4ae4b0e43 k8s:batch.kubernetes.io/job-name=nova-bootstrap k8s:component=bootstrap k8s:controller-uid=d5f93eec-b15a-4514-b6f1-20b4ae4b0e43 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-bootstrap k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=d3260c05a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1178 identity=14425 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/nova-bootstrap-z8mcj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 fb96c4ba-ea17-48e8-8ff4-99dcc7259c00 default }" containerID=cde247559fda2de72492b3f5e8c81f4555526c4340ab8eee08b46c85de952bfd datapathConfiguration="&{false false false false false }" interface=lxc967136487f10 k8sPodName=openstack/rabbitmq-neutron-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cde247559f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2576 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cde247559f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2576 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-neutron;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cde247559f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2576 identity=3261 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cde247559f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2576 identity=3261 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cde247559f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2576 identity=3261 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cde247559f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2576 identity=3261 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.246 b1efa8e2-4c0e-4194-ab6f-24db2fa90fac default }" containerID=5c086845354e51e9750555238aca67cb3790febdb49c7d0f5b4947fa9c92270e datapathConfiguration="&{false false false false false }" interface=lxc6fa9240859dd k8sPodName=openstack/neutron-rpc-server-585bf7c796-rj7md labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c08684535 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=951 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/neutron-rpc-server-585bf7c796-rj7md subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c08684535 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=951 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/neutron-rpc-server-585bf7c796-rj7md subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.36 50f20d11-2a5f-42d4-ac26-2b67dbaf64e0 default }" containerID=e7cd8e5f982e5e9469a163cc1611a461d7f7baca44ca3cd848b903da095ec8c9 datapathConfiguration="&{false false false false false }" interface=lxc3738f8f2fcb8 k8sPodName=openstack/neutron-server-78dd865b76-7f2nw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7cd8e5f98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=644 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/neutron-server-78dd865b76-7f2nw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7cd8e5f98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=644 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/neutron-server-78dd865b76-7f2nw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 74d219bc-3752-4f15-97e0-ae2dd5f10f32 default }" containerID=d15edc633983066a54acd3ab3234967616985246fe7d10117fce019e0f560e1e datapathConfiguration="&{false false false false false }" interface=lxcbd16374db05c k8sPodName=openstack/neutron-db-init-bg7w7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d15edc6339 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2486 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/neutron-db-init-bg7w7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d15edc6339 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2486 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=e60b91a9-38aa-4bb4-82c2-28169d5f14c6,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=e60b91a9-38aa-4bb4-82c2-28169d5f14c6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/neutron-db-init-bg7w7 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=rpc_server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5c08684535 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=951 identity=43033 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/neutron-rpc-server-585bf7c796-rj7md oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c08684535 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=951 identity=43033 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/neutron-rpc-server-585bf7c796-rj7md subsys=endpoint level=info msg="Invalid state transition skipped" containerID=d15edc6339 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2486 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.37 ipv6= k8sPodName=openstack/neutron-db-init-bg7w7 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=e7cd8e5f98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=644 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.36 ipv6= k8sPodName=openstack/neutron-server-78dd865b76-7f2nw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e7cd8e5f98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=644 identity=7844 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/neutron-server-78dd865b76-7f2nw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e7cd8e5f98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=644 identity=7844 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/neutron-server-78dd865b76-7f2nw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=e60b91a9-38aa-4bb4-82c2-28169d5f14c6;k8s:batch.kubernetes.io/job-name=neutron-db-init;k8s:component=db-init;k8s:controller-uid=e60b91a9-38aa-4bb4-82c2-28169d5f14c6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d15edc6339 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2486 identity=30945 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=e60b91a9-38aa-4bb4-82c2-28169d5f14c6,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=e60b91a9-38aa-4bb4-82c2-28169d5f14c6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/neutron-db-init-bg7w7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d15edc6339 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2486 identity=30945 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/neutron-db-init-bg7w7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5c08684535 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=951 identity=43033 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/neutron-rpc-server-585bf7c796-rj7md subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c08684535 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=951 identity=43033 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/neutron-rpc-server-585bf7c796-rj7md subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e7cd8e5f98 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=644 identity=7844 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/neutron-server-78dd865b76-7f2nw subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7cd8e5f98 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=644 identity=7844 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/neutron-server-78dd865b76-7f2nw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d15edc6339 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2486 identity=30945 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/neutron-db-init-bg7w7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d15edc6339 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2486 identity=30945 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/neutron-db-init-bg7w7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d15edc6339 endpointID=2486 k8sNamespace=openstack k8sPodName=neutron-db-init-bg7w7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=e60b91a9-38aa-4bb4-82c2-28169d5f14c6 k8s:batch.kubernetes.io/job-name=neutron-db-init k8s:component=db-init k8s:controller-uid=e60b91a9-38aa-4bb4-82c2-28169d5f14c6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=d15edc6339 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2486 identity=30945 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/neutron-db-init-bg7w7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.129 688a8da6-804d-47db-88bf-0f05353295db default }" containerID=ed7a4e2034bfd72d83be96931522a0eb41cdf7900f543a163f4ea72d4fa284dc datapathConfiguration="&{false false false false false }" interface=lxc4e6e11981139 k8sPodName=openstack/neutron-db-sync-vwtnp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed7a4e2034 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2144 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/neutron-db-sync-vwtnp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed7a4e2034 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2144 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=8c8d020b-dc4b-4507-bd78-6f101897625c,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=8c8d020b-dc4b-4507-bd78-6f101897625c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/neutron-db-sync-vwtnp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=8c8d020b-dc4b-4507-bd78-6f101897625c;k8s:batch.kubernetes.io/job-name=neutron-db-sync;k8s:component=db-sync;k8s:controller-uid=8c8d020b-dc4b-4507-bd78-6f101897625c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-sync;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed7a4e2034 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2144 identity=296 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=8c8d020b-dc4b-4507-bd78-6f101897625c,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=8c8d020b-dc4b-4507-bd78-6f101897625c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/neutron-db-sync-vwtnp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed7a4e2034 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2144 identity=296 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/neutron-db-sync-vwtnp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ed7a4e2034 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2144 identity=296 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/neutron-db-sync-vwtnp subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed7a4e2034 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2144 identity=296 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/neutron-db-sync-vwtnp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ed7a4e2034 endpointID=2144 k8sNamespace=openstack k8sPodName=neutron-db-sync-vwtnp subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=8c8d020b-dc4b-4507-bd78-6f101897625c k8s:batch.kubernetes.io/job-name=neutron-db-sync k8s:component=db-sync k8s:controller-uid=8c8d020b-dc4b-4507-bd78-6f101897625c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-sync k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=ed7a4e2034 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2144 identity=296 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/neutron-db-sync-vwtnp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 b050705c-3b3a-4365-8bc7-01d2548d661e default }" containerID=09747b83a2980242fc009868b86dffb28882a5ecd91382dbe79b7df741454b83 datapathConfiguration="&{false false false false false }" interface=lxca23a9cec54d6 k8sPodName=openstack/neutron-rabbit-init-87d7h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=09747b83a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=545 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/neutron-rabbit-init-87d7h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=09747b83a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=545 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=f60f491b-d9fb-4fbe-9605-b8fc13e3e8b3,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f60f491b-d9fb-4fbe-9605-b8fc13e3e8b3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/neutron-rabbit-init-87d7h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=f60f491b-d9fb-4fbe-9605-b8fc13e3e8b3;k8s:batch.kubernetes.io/job-name=neutron-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=f60f491b-d9fb-4fbe-9605-b8fc13e3e8b3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-rabbit-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=09747b83a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=545 identity=61682 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=f60f491b-d9fb-4fbe-9605-b8fc13e3e8b3,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f60f491b-d9fb-4fbe-9605-b8fc13e3e8b3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/neutron-rabbit-init-87d7h oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=09747b83a2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=545 identity=61682 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/neutron-rabbit-init-87d7h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=09747b83a2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=545 identity=61682 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/neutron-rabbit-init-87d7h subsys=endpoint level=info msg="Successful endpoint creation" containerID=09747b83a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=545 identity=61682 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/neutron-rabbit-init-87d7h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=09747b83a2 endpointID=545 k8sNamespace=openstack k8sPodName=neutron-rabbit-init-87d7h subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=f60f491b-d9fb-4fbe-9605-b8fc13e3e8b3 k8s:batch.kubernetes.io/job-name=neutron-rabbit-init k8s:component=rabbit-init k8s:controller-uid=f60f491b-d9fb-4fbe-9605-b8fc13e3e8b3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-rabbit-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=09747b83a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=545 identity=61682 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/neutron-rabbit-init-87d7h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 0f1d95f6-1776-4e0e-9fd8-d7c2cf517d41 default }" containerID=2dbb5dd78845110289bfeb5ad6a1ba1f787ad281ca46bb4b4ab37316378eb222 datapathConfiguration="&{false false false false false }" interface=lxccdcc0a3c6fd3 k8sPodName=openstack/neutron-ks-service-mcp8z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2dbb5dd788 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/neutron-ks-service-mcp8z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2dbb5dd788 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=2c44a5b2-a1ba-47af-92fe-8ea00acb4ab9,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=2c44a5b2-a1ba-47af-92fe-8ea00acb4ab9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/neutron-ks-service-mcp8z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=2c44a5b2-a1ba-47af-92fe-8ea00acb4ab9;k8s:batch.kubernetes.io/job-name=neutron-ks-service;k8s:component=ks-service;k8s:controller-uid=2c44a5b2-a1ba-47af-92fe-8ea00acb4ab9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-service;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2dbb5dd788 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 identity=24973 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=2c44a5b2-a1ba-47af-92fe-8ea00acb4ab9,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=2c44a5b2-a1ba-47af-92fe-8ea00acb4ab9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/neutron-ks-service-mcp8z oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2dbb5dd788 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 identity=24973 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/neutron-ks-service-mcp8z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2dbb5dd788 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=36 identity=24973 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/neutron-ks-service-mcp8z subsys=endpoint level=info msg="Successful endpoint creation" containerID=2dbb5dd788 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=36 identity=24973 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/neutron-ks-service-mcp8z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2dbb5dd788 endpointID=36 k8sNamespace=openstack k8sPodName=neutron-ks-service-mcp8z subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=2c44a5b2-a1ba-47af-92fe-8ea00acb4ab9 k8s:batch.kubernetes.io/job-name=neutron-ks-service k8s:component=ks-service k8s:controller-uid=2c44a5b2-a1ba-47af-92fe-8ea00acb4ab9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-service k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=2dbb5dd788 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=36 identity=24973 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/neutron-ks-service-mcp8z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 2595dc0e-d3cb-4ac1-be66-25ea9809abda default }" containerID=bc8ff3f5a169f55e437b49861fbba0b4a800e4619ff8d541b919a8f8253c8af3 datapathConfiguration="&{false false false false false }" interface=lxcc94ee131ad47 k8sPodName=openstack/neutron-ks-endpoints-nzb9g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bc8ff3f5a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3528 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/neutron-ks-endpoints-nzb9g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bc8ff3f5a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3528 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=8698d066-0c09-49f5-9458-e9db77626545,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=8698d066-0c09-49f5-9458-e9db77626545,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/neutron-ks-endpoints-nzb9g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=8698d066-0c09-49f5-9458-e9db77626545;k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=8698d066-0c09-49f5-9458-e9db77626545;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-endpoints;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bc8ff3f5a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3528 identity=37813 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=8698d066-0c09-49f5-9458-e9db77626545,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=8698d066-0c09-49f5-9458-e9db77626545,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/neutron-ks-endpoints-nzb9g oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=bc8ff3f5a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3528 identity=37813 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/neutron-ks-endpoints-nzb9g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bc8ff3f5a1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3528 identity=37813 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/neutron-ks-endpoints-nzb9g subsys=endpoint level=info msg="Successful endpoint creation" containerID=bc8ff3f5a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3528 identity=37813 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/neutron-ks-endpoints-nzb9g subsys=daemon level=info msg="Delete endpoint request" containerID=bc8ff3f5a1 endpointID=3528 k8sNamespace=openstack k8sPodName=neutron-ks-endpoints-nzb9g subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=8698d066-0c09-49f5-9458-e9db77626545 k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=8698d066-0c09-49f5-9458-e9db77626545 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-endpoints k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=bc8ff3f5a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3528 identity=37813 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/neutron-ks-endpoints-nzb9g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.11 178d49a5-d7fb-41ca-889d-fa19dc274c8d default }" containerID=26dd2b07657e9d96cf3a068099e1cd25524f95a2dd80bf0972687b0998c7ef79 datapathConfiguration="&{false false false false false }" interface=lxcad1683872305 k8sPodName=openstack/neutron-ks-user-bmls9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=26dd2b0765 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1201 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/neutron-ks-user-bmls9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=26dd2b0765 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1201 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=37b6042b-472a-4a8c-8009-a987e7b9f627,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=37b6042b-472a-4a8c-8009-a987e7b9f627,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/neutron-ks-user-bmls9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=37b6042b-472a-4a8c-8009-a987e7b9f627;k8s:batch.kubernetes.io/job-name=neutron-ks-user;k8s:component=ks-user;k8s:controller-uid=37b6042b-472a-4a8c-8009-a987e7b9f627;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-user;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=26dd2b0765 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1201 identity=10697 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=37b6042b-472a-4a8c-8009-a987e7b9f627,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=37b6042b-472a-4a8c-8009-a987e7b9f627,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/neutron-ks-user-bmls9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=26dd2b0765 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1201 identity=10697 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/neutron-ks-user-bmls9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=26dd2b0765 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1201 identity=10697 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/neutron-ks-user-bmls9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=26dd2b0765 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1201 identity=10697 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/neutron-ks-user-bmls9 subsys=daemon level=info msg="Delete endpoint request" containerID=26dd2b0765 endpointID=1201 k8sNamespace=openstack k8sPodName=neutron-ks-user-bmls9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=37b6042b-472a-4a8c-8009-a987e7b9f627 k8s:batch.kubernetes.io/job-name=neutron-ks-user k8s:component=ks-user k8s:controller-uid=37b6042b-472a-4a8c-8009-a987e7b9f627 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-user k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=26dd2b0765 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1201 identity=10697 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/neutron-ks-user-bmls9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.238 deaab6eb-fa1a-47c4-ab54-debdbe70fbe4 default }" containerID=1110d5984912a68413cba31a90582023c6eeeabcf124804709dbe69f99b8e9f7 datapathConfiguration="&{false false false false false }" interface=lxcea9fb8ee76f4 k8sPodName=openstack/rabbitmq-heat-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1110d59849 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2560 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1110d59849 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2560 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-heat,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-heat-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-heat-server-0" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-heat;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-heat-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-heat-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1110d59849 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2560 identity=62194 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-heat,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-heat-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-heat-server-0" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1110d59849 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2560 identity=62194 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1110d59849 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2560 identity=62194 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1110d59849 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2560 identity=62194 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.129 3263c320-c1f2-485e-8f78-6d842e07ef01 default }" containerID=41bf50a824af92fae9b05327a0d0396c71fd7bc0fecb0f22f67e17ad5c682767 datapathConfiguration="&{false false false false false }" interface=lxce782819b5f96 k8sPodName=openstack/heat-cfn-5d6fb54575-c9rvk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41bf50a824 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2002 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/heat-cfn-5d6fb54575-c9rvk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41bf50a824 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2002 identityLabels="k8s:application=heat,k8s:component=cfn,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-cfn,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/heat-cfn-5d6fb54575-c9rvk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.228 11e58f7c-d1d7-475e-8c7d-ff16251e20cd default }" containerID=0a772d322f23598c6b77acdf94792769f5e9b2dfd3987c46af2204ec9c4e245d datapathConfiguration="&{false false false false false }" interface=lxc6700863743b2 k8sPodName=openstack/heat-engine-6fbf4d5c76-k4gzv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a772d322f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3427 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/heat-engine-6fbf4d5c76-k4gzv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a772d322f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3427 identityLabels="k8s:application=heat,k8s:component=engine,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/heat-engine-6fbf4d5c76-k4gzv subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:component=cfn;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-cfn;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41bf50a824 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2002 identity=51200 identityLabels="k8s:application=heat,k8s:component=cfn,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-cfn,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/heat-cfn-5d6fb54575-c9rvk oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=41bf50a824 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2002 identity=51200 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/heat-cfn-5d6fb54575-c9rvk subsys=endpoint level=info msg="Invalid state transition skipped" containerID=0a772d322f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3427 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.228 ipv6= k8sPodName=openstack/heat-engine-6fbf4d5c76-k4gzv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:component=engine;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a772d322f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3427 identity=36335 identityLabels="k8s:application=heat,k8s:component=engine,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/heat-engine-6fbf4d5c76-k4gzv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a772d322f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3427 identity=36335 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/heat-engine-6fbf4d5c76-k4gzv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.239 445f66c9-b63b-4d15-8b3b-b7578aba613f default }" containerID=56dd83f0d9a4d5aa2017fb80b749a3460b98e4078c166a6ca3f56f075bca0fb8 datapathConfiguration="&{false false false false false }" interface=lxcf9971adf40dc k8sPodName=openstack/heat-api-557556558f-9prl6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=56dd83f0d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2977 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/heat-api-557556558f-9prl6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=56dd83f0d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2977 identityLabels="k8s:application=heat,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/heat-api-557556558f-9prl6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=56dd83f0d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2977 identity=43166 identityLabels="k8s:application=heat,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/heat-api-557556558f-9prl6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=56dd83f0d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2977 identity=43166 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/heat-api-557556558f-9prl6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.235 9b69a9de-abe7-4661-b32c-45e7a991cf82 default }" containerID=f4c0a1102a9fd496c6c08824fad011f7de03a3d9fa213104b553976a1bb1f4a8 datapathConfiguration="&{false false false false false }" interface=lxcdd59967f1b6e k8sPodName=openstack/heat-db-init-vkg7x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f4c0a1102a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3543 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/heat-db-init-vkg7x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f4c0a1102a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3543 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=6418f5fc-a6e8-4f59-be7c-883ad05ef14c,k8s:batch.kubernetes.io/job-name=heat-db-init,k8s:component=db-init,k8s:controller-uid=6418f5fc-a6e8-4f59-be7c-883ad05ef14c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-init,k8s:release_group=heat" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/heat-db-init-vkg7x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=6418f5fc-a6e8-4f59-be7c-883ad05ef14c;k8s:batch.kubernetes.io/job-name=heat-db-init;k8s:component=db-init;k8s:controller-uid=6418f5fc-a6e8-4f59-be7c-883ad05ef14c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-db-init;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f4c0a1102a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3543 identity=40312 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=6418f5fc-a6e8-4f59-be7c-883ad05ef14c,k8s:batch.kubernetes.io/job-name=heat-db-init,k8s:component=db-init,k8s:controller-uid=6418f5fc-a6e8-4f59-be7c-883ad05ef14c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-init,k8s:release_group=heat" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/heat-db-init-vkg7x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f4c0a1102a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3543 identity=40312 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/heat-db-init-vkg7x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=41bf50a824 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2002 identity=51200 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/heat-cfn-5d6fb54575-c9rvk subsys=endpoint level=info msg="Successful endpoint creation" containerID=41bf50a824 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2002 identity=51200 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/heat-cfn-5d6fb54575-c9rvk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0a772d322f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3427 identity=36335 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/heat-engine-6fbf4d5c76-k4gzv subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a772d322f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3427 identity=36335 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/heat-engine-6fbf4d5c76-k4gzv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=56dd83f0d9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2977 identity=43166 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/heat-api-557556558f-9prl6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=56dd83f0d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2977 identity=43166 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/heat-api-557556558f-9prl6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f4c0a1102a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3543 identity=40312 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/heat-db-init-vkg7x subsys=endpoint level=info msg="Successful endpoint creation" containerID=f4c0a1102a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3543 identity=40312 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/heat-db-init-vkg7x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.245 7cac40a3-3e83-4bb2-842c-d66d502355ce default }" containerID=7c63840e88af97a028e65eaeb48461bdd2cd88ed2728a4345a16c0cd425b00f5 datapathConfiguration="&{false false false false false }" interface=lxc5685bf931677 k8sPodName=openstack/heat-engine-cleaner-29757640-wwx9w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c63840e88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757640-wwx9w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c63840e88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=8ea794dc-c11a-459b-a3f7-beaae5a21257,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757640,k8s:component=engine-cleaner,k8s:controller-uid=8ea794dc-c11a-459b-a3f7-beaae5a21257,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757640,k8s:release_group=heat" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757640-wwx9w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7c63840e88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.245 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757640-wwx9w line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=8ea794dc-c11a-459b-a3f7-beaae5a21257;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757640;k8s:component=engine-cleaner;k8s:controller-uid=8ea794dc-c11a-459b-a3f7-beaae5a21257;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29757640;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c63840e88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 identity=45110 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=8ea794dc-c11a-459b-a3f7-beaae5a21257,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757640,k8s:component=engine-cleaner,k8s:controller-uid=8ea794dc-c11a-459b-a3f7-beaae5a21257,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757640,k8s:release_group=heat" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757640-wwx9w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c63840e88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 identity=45110 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757640-wwx9w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c63840e88 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=156 identity=45110 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757640-wwx9w subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c63840e88 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=156 identity=45110 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757640-wwx9w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f4c0a1102a endpointID=3543 k8sNamespace=openstack k8sPodName=heat-db-init-vkg7x subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=6418f5fc-a6e8-4f59-be7c-883ad05ef14c k8s:batch.kubernetes.io/job-name=heat-db-init k8s:component=db-init k8s:controller-uid=6418f5fc-a6e8-4f59-be7c-883ad05ef14c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-db-init k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=f4c0a1102a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3543 identity=40312 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/heat-db-init-vkg7x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.130 ae4b505c-3aae-4224-810c-5ad0693966d7 default }" containerID=4b031d87447deb00b81a4323b948c4bb9fd6e09cc0c34fd1fcc2c565544688b9 datapathConfiguration="&{false false false false false }" interface=lxc11ba6f96dfcd k8sPodName=openstack/heat-db-sync-jbvl2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b031d8744 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=398 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/heat-db-sync-jbvl2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4b031d8744 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=398 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=a346043e-a141-4e26-945c-ecefda9eebd0,k8s:batch.kubernetes.io/job-name=heat-db-sync,k8s:component=db-sync,k8s:controller-uid=a346043e-a141-4e26-945c-ecefda9eebd0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-sync,k8s:release_group=heat" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/heat-db-sync-jbvl2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4b031d8744 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=398 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.130 ipv6= k8sPodName=openstack/heat-db-sync-jbvl2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=a346043e-a141-4e26-945c-ecefda9eebd0;k8s:batch.kubernetes.io/job-name=heat-db-sync;k8s:component=db-sync;k8s:controller-uid=a346043e-a141-4e26-945c-ecefda9eebd0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-db-sync;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4b031d8744 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=398 identity=3522 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=a346043e-a141-4e26-945c-ecefda9eebd0,k8s:batch.kubernetes.io/job-name=heat-db-sync,k8s:component=db-sync,k8s:controller-uid=a346043e-a141-4e26-945c-ecefda9eebd0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-sync,k8s:release_group=heat" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/heat-db-sync-jbvl2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4b031d8744 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=398 identity=3522 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/heat-db-sync-jbvl2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4b031d8744 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=398 identity=3522 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/heat-db-sync-jbvl2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b031d8744 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=398 identity=3522 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/heat-db-sync-jbvl2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4b031d8744 endpointID=398 k8sNamespace=openstack k8sPodName=heat-db-sync-jbvl2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=a346043e-a141-4e26-945c-ecefda9eebd0 k8s:batch.kubernetes.io/job-name=heat-db-sync k8s:component=db-sync k8s:controller-uid=a346043e-a141-4e26-945c-ecefda9eebd0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-db-sync k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=4b031d8744 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=398 identity=3522 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/heat-db-sync-jbvl2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 c485ea18-11f8-4d1f-8de8-613204765cb5 default }" containerID=ba0914d1cb24e15b4b938b983312d88d3e43eca7abd8aca2da404978518f76a8 datapathConfiguration="&{false false false false false }" interface=lxc8193d604734e k8sPodName=openstack/heat-rabbit-init-lmsp6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba0914d1cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3702 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/heat-rabbit-init-lmsp6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba0914d1cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3702 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=aa3e2def-3ebc-42b1-9946-959bc24e27ae,k8s:batch.kubernetes.io/job-name=heat-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=aa3e2def-3ebc-42b1-9946-959bc24e27ae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-rabbit-init,k8s:release_group=heat" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/heat-rabbit-init-lmsp6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ba0914d1cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3702 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.108 ipv6= k8sPodName=openstack/heat-rabbit-init-lmsp6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=aa3e2def-3ebc-42b1-9946-959bc24e27ae;k8s:batch.kubernetes.io/job-name=heat-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=aa3e2def-3ebc-42b1-9946-959bc24e27ae;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-rabbit-init;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba0914d1cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3702 identity=38758 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=aa3e2def-3ebc-42b1-9946-959bc24e27ae,k8s:batch.kubernetes.io/job-name=heat-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=aa3e2def-3ebc-42b1-9946-959bc24e27ae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-rabbit-init,k8s:release_group=heat" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/heat-rabbit-init-lmsp6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba0914d1cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3702 identity=38758 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/heat-rabbit-init-lmsp6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ba0914d1cb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3702 identity=38758 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/heat-rabbit-init-lmsp6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba0914d1cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3702 identity=38758 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/heat-rabbit-init-lmsp6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ba0914d1cb endpointID=3702 k8sNamespace=openstack k8sPodName=heat-rabbit-init-lmsp6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=aa3e2def-3ebc-42b1-9946-959bc24e27ae k8s:batch.kubernetes.io/job-name=heat-rabbit-init k8s:component=rabbit-init k8s:controller-uid=aa3e2def-3ebc-42b1-9946-959bc24e27ae k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-rabbit-init k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=ba0914d1cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3702 identity=38758 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/heat-rabbit-init-lmsp6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 d243b440-7633-4201-b6fb-e67698ac1887 default }" containerID=35bc0abc7b4a8f81e2ee104e12e6addd2c7748510dc61536ea8c7ae0e6161f4b datapathConfiguration="&{false false false false false }" interface=lxc434ad7d8229a k8sPodName=openstack/heat-ks-service-bbp7d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35bc0abc7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=686 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/heat-ks-service-bbp7d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35bc0abc7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=686 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=f09e4e4d-be0a-433c-8759-244c6d1f73e9,k8s:batch.kubernetes.io/job-name=heat-ks-service,k8s:component=ks-service,k8s:controller-uid=f09e4e4d-be0a-433c-8759-244c6d1f73e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-service,k8s:release_group=heat" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/heat-ks-service-bbp7d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=f09e4e4d-be0a-433c-8759-244c6d1f73e9;k8s:batch.kubernetes.io/job-name=heat-ks-service;k8s:component=ks-service;k8s:controller-uid=f09e4e4d-be0a-433c-8759-244c6d1f73e9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-ks-service;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=35bc0abc7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=686 identity=1504 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=f09e4e4d-be0a-433c-8759-244c6d1f73e9,k8s:batch.kubernetes.io/job-name=heat-ks-service,k8s:component=ks-service,k8s:controller-uid=f09e4e4d-be0a-433c-8759-244c6d1f73e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-service,k8s:release_group=heat" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/heat-ks-service-bbp7d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=35bc0abc7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=686 identity=1504 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/heat-ks-service-bbp7d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=35bc0abc7b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=686 identity=1504 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/heat-ks-service-bbp7d subsys=endpoint level=info msg="Successful endpoint creation" containerID=35bc0abc7b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=686 identity=1504 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/heat-ks-service-bbp7d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=35bc0abc7b endpointID=686 k8sNamespace=openstack k8sPodName=heat-ks-service-bbp7d subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=f09e4e4d-be0a-433c-8759-244c6d1f73e9 k8s:batch.kubernetes.io/job-name=heat-ks-service k8s:component=ks-service k8s:controller-uid=f09e4e4d-be0a-433c-8759-244c6d1f73e9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-ks-service k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=35bc0abc7b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=686 identity=1504 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/heat-ks-service-bbp7d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 90fe4790-360a-43c3-a21c-6fe3b019f0df default }" containerID=4576b182b1a11d94e3e923bf0c44171817fbce8b2c3cdd93ccaff029b0791172 datapathConfiguration="&{false false false false false }" interface=lxce630dfdfc64d k8sPodName=openstack/heat-ks-endpoints-vljts labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4576b182b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/heat-ks-endpoints-vljts subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4576b182b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=267575db-a332-4884-af6a-8afeff416f56,k8s:batch.kubernetes.io/job-name=heat-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=267575db-a332-4884-af6a-8afeff416f56,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-endpoints,k8s:release_group=heat" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/heat-ks-endpoints-vljts subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=267575db-a332-4884-af6a-8afeff416f56;k8s:batch.kubernetes.io/job-name=heat-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=267575db-a332-4884-af6a-8afeff416f56;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-ks-endpoints;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4576b182b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 identity=38305 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=267575db-a332-4884-af6a-8afeff416f56,k8s:batch.kubernetes.io/job-name=heat-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=267575db-a332-4884-af6a-8afeff416f56,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-endpoints,k8s:release_group=heat" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/heat-ks-endpoints-vljts oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4576b182b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 identity=38305 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/heat-ks-endpoints-vljts subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4576b182b1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=711 identity=38305 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/heat-ks-endpoints-vljts subsys=endpoint level=info msg="Successful endpoint creation" containerID=4576b182b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=711 identity=38305 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/heat-ks-endpoints-vljts subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4576b182b1 endpointID=711 k8sNamespace=openstack k8sPodName=heat-ks-endpoints-vljts subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=267575db-a332-4884-af6a-8afeff416f56 k8s:batch.kubernetes.io/job-name=heat-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=267575db-a332-4884-af6a-8afeff416f56 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-ks-endpoints k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=4576b182b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=711 identity=38305 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/heat-ks-endpoints-vljts subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 f74a1d72-c0ae-45ba-ba84-cd0b8a9a8133 default }" containerID=96b6ff9cb08677a40ca65933af4460b08920db2dfc71956ff4e472ec943670dd datapathConfiguration="&{false false false false false }" interface=lxc605f81a1c358 k8sPodName=openstack/heat-ks-user-lmqq8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96b6ff9cb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3059 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/heat-ks-user-lmqq8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96b6ff9cb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3059 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=c6c38f9f-1693-4f20-8a3d-6c1c8043738a,k8s:batch.kubernetes.io/job-name=heat-ks-user,k8s:component=ks-user,k8s:controller-uid=c6c38f9f-1693-4f20-8a3d-6c1c8043738a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-user,k8s:release_group=heat" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/heat-ks-user-lmqq8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=c6c38f9f-1693-4f20-8a3d-6c1c8043738a;k8s:batch.kubernetes.io/job-name=heat-ks-user;k8s:component=ks-user;k8s:controller-uid=c6c38f9f-1693-4f20-8a3d-6c1c8043738a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-ks-user;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=96b6ff9cb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3059 identity=5193 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=c6c38f9f-1693-4f20-8a3d-6c1c8043738a,k8s:batch.kubernetes.io/job-name=heat-ks-user,k8s:component=ks-user,k8s:controller-uid=c6c38f9f-1693-4f20-8a3d-6c1c8043738a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-user,k8s:release_group=heat" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/heat-ks-user-lmqq8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96b6ff9cb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3059 identity=5193 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/heat-ks-user-lmqq8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=96b6ff9cb0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3059 identity=5193 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/heat-ks-user-lmqq8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=96b6ff9cb0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3059 identity=5193 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/heat-ks-user-lmqq8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=96b6ff9cb0 endpointID=3059 k8sNamespace=openstack k8sPodName=heat-ks-user-lmqq8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=c6c38f9f-1693-4f20-8a3d-6c1c8043738a k8s:batch.kubernetes.io/job-name=heat-ks-user k8s:component=ks-user k8s:controller-uid=c6c38f9f-1693-4f20-8a3d-6c1c8043738a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-ks-user k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=96b6ff9cb0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3059 identity=5193 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/heat-ks-user-lmqq8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 4e11fec8-cb82-4e08-8615-780342b5ec70 default }" containerID=3bbad62a0657833c1238e0e28bea5e432f69cd04125b46e524eed7dca1e819b7 datapathConfiguration="&{false false false false false }" interface=lxc9815fd039c18 k8sPodName=openstack/heat-bootstrap-s87pv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3bbad62a06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=901 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/heat-bootstrap-s87pv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3bbad62a06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=901 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=68662cc6-8b1e-44e9-ad00-0e802c49c4b5,k8s:batch.kubernetes.io/job-name=heat-bootstrap,k8s:component=bootstrap,k8s:controller-uid=68662cc6-8b1e-44e9-ad00-0e802c49c4b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-bootstrap,k8s:release_group=heat" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/heat-bootstrap-s87pv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=68662cc6-8b1e-44e9-ad00-0e802c49c4b5;k8s:batch.kubernetes.io/job-name=heat-bootstrap;k8s:component=bootstrap;k8s:controller-uid=68662cc6-8b1e-44e9-ad00-0e802c49c4b5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-bootstrap;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3bbad62a06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=901 identity=20422 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=68662cc6-8b1e-44e9-ad00-0e802c49c4b5,k8s:batch.kubernetes.io/job-name=heat-bootstrap,k8s:component=bootstrap,k8s:controller-uid=68662cc6-8b1e-44e9-ad00-0e802c49c4b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-bootstrap,k8s:release_group=heat" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/heat-bootstrap-s87pv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3bbad62a06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=901 identity=20422 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/heat-bootstrap-s87pv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3bbad62a06 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=901 identity=20422 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/heat-bootstrap-s87pv subsys=endpoint level=info msg="Successful endpoint creation" containerID=3bbad62a06 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=901 identity=20422 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/heat-bootstrap-s87pv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3bbad62a06 endpointID=901 k8sNamespace=openstack k8sPodName=heat-bootstrap-s87pv subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=68662cc6-8b1e-44e9-ad00-0e802c49c4b5 k8s:batch.kubernetes.io/job-name=heat-bootstrap k8s:component=bootstrap k8s:controller-uid=68662cc6-8b1e-44e9-ad00-0e802c49c4b5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-bootstrap k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=3bbad62a06 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=901 identity=20422 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/heat-bootstrap-s87pv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 965ecb76-550e-4e75-b78c-203af6c91793 default }" containerID=b8f976c9c3918bbf81d153adee1881a2daf5202b54aca13e397c497e2eba37d5 datapathConfiguration="&{false false false false false }" interface=lxc232b2019c692 k8sPodName=openstack/heat-domain-ks-user-fl49d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8f976c9c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/heat-domain-ks-user-fl49d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8f976c9c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=11882c96-7bf8-4fb9-91a9-bc5ff188c4c9,k8s:batch.kubernetes.io/job-name=heat-domain-ks-user,k8s:component=ks-user,k8s:controller-uid=11882c96-7bf8-4fb9-91a9-bc5ff188c4c9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-domain-ks-user,k8s:release_group=heat" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/heat-domain-ks-user-fl49d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=11882c96-7bf8-4fb9-91a9-bc5ff188c4c9;k8s:batch.kubernetes.io/job-name=heat-domain-ks-user;k8s:component=ks-user;k8s:controller-uid=11882c96-7bf8-4fb9-91a9-bc5ff188c4c9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-domain-ks-user;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8f976c9c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identity=20861 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=11882c96-7bf8-4fb9-91a9-bc5ff188c4c9,k8s:batch.kubernetes.io/job-name=heat-domain-ks-user,k8s:component=ks-user,k8s:controller-uid=11882c96-7bf8-4fb9-91a9-bc5ff188c4c9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-domain-ks-user,k8s:release_group=heat" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/heat-domain-ks-user-fl49d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8f976c9c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identity=20861 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/heat-domain-ks-user-fl49d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b8f976c9c3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=560 identity=20861 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/heat-domain-ks-user-fl49d subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8f976c9c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=560 identity=20861 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/heat-domain-ks-user-fl49d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d5319e296d endpointID=2475 k8sNamespace=openstack k8sPodName=nova-cell-setup-2l8g7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=c181a72f-e646-4d6b-a2d0-ffb564fa8d6e k8s:batch.kubernetes.io/job-name=nova-cell-setup k8s:component=cell-setup k8s:controller-uid=c181a72f-e646-4d6b-a2d0-ffb564fa8d6e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-cell-setup k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=d5319e296d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2475 identity=11851 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/nova-cell-setup-2l8g7 subsys=endpoint level=info msg="Delete endpoint request" containerID=b8f976c9c3 endpointID=560 k8sNamespace=openstack k8sPodName=heat-domain-ks-user-fl49d subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=11882c96-7bf8-4fb9-91a9-bc5ff188c4c9 k8s:batch.kubernetes.io/job-name=heat-domain-ks-user k8s:component=ks-user k8s:controller-uid=11882c96-7bf8-4fb9-91a9-bc5ff188c4c9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-domain-ks-user k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=b8f976c9c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=560 identity=20861 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/heat-domain-ks-user-fl49d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 711abf19-89e2-4aae-8c12-7bfdd245a8d3 default }" containerID=73ad33dc2bc826e7359c0c5ba8f61b7ccbb16cadb7bf1e276de580c32d81f142 datapathConfiguration="&{false false false false false }" interface=lxc123ad7232baa k8sPodName=openstack/heat-trusts-777wf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73ad33dc2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/heat-trusts-777wf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=73ad33dc2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=07e148bf-20c4-4026-8d71-cbf0d3db7c53,k8s:batch.kubernetes.io/job-name=heat-trusts,k8s:component=trusts,k8s:controller-uid=07e148bf-20c4-4026-8d71-cbf0d3db7c53,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-trusts,k8s:release_group=heat" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/heat-trusts-777wf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=07e148bf-20c4-4026-8d71-cbf0d3db7c53;k8s:batch.kubernetes.io/job-name=heat-trusts;k8s:component=trusts;k8s:controller-uid=07e148bf-20c4-4026-8d71-cbf0d3db7c53;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-trusts;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=73ad33dc2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 identity=6261 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=07e148bf-20c4-4026-8d71-cbf0d3db7c53,k8s:batch.kubernetes.io/job-name=heat-trusts,k8s:component=trusts,k8s:controller-uid=07e148bf-20c4-4026-8d71-cbf0d3db7c53,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-trusts,k8s:release_group=heat" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/heat-trusts-777wf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=73ad33dc2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 identity=6261 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/heat-trusts-777wf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=73ad33dc2b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=204 identity=6261 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/heat-trusts-777wf subsys=endpoint level=info msg="Successful endpoint creation" containerID=73ad33dc2b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=204 identity=6261 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/heat-trusts-777wf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7c63840e88 endpointID=156 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29757640-wwx9w subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=8ea794dc-c11a-459b-a3f7-beaae5a21257 k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757640 k8s:component=engine-cleaner k8s:controller-uid=8ea794dc-c11a-459b-a3f7-beaae5a21257 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29757640 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=7c63840e88 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=156 identity=45110 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757640-wwx9w subsys=endpoint level=info msg="Delete endpoint request" containerID=73ad33dc2b endpointID=204 k8sNamespace=openstack k8sPodName=heat-trusts-777wf subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=07e148bf-20c4-4026-8d71-cbf0d3db7c53 k8s:batch.kubernetes.io/job-name=heat-trusts k8s:component=trusts k8s:controller-uid=07e148bf-20c4-4026-8d71-cbf0d3db7c53 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-trusts k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=73ad33dc2b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=204 identity=6261 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/heat-trusts-777wf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 54ad0c21-682c-4b99-85c5-8adb9298553e default }" containerID=a9e08196f3018495020dbebe5ad0acc1404d44f50f73a08b9f0bff001aba01f6 datapathConfiguration="&{false false false false false }" interface=lxc6caf6fbf6a8c k8sPodName=openstack/rabbitmq-octavia-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a9e08196f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=300 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a9e08196f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=300 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-octavia,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-octavia-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-octavia-server-0" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-octavia;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-octavia-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-octavia-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a9e08196f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=300 identity=63580 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-octavia,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-octavia-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-octavia-server-0" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a9e08196f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=300 identity=63580 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a9e08196f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=300 identity=63580 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a9e08196f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=300 identity=63580 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.171 3fc37e41-547d-4793-b5dd-c44e755cb31d default }" containerID=54194c6f10b16e68d6bf7f5b38ea82a4ddf2ea0e30a5c457e01e928ab0e18534 datapathConfiguration="&{false false false false false }" interface=lxc9bf2b536a968 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7frz8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=54194c6f10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2820 ipv4=10.0.0.171 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7frz8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=54194c6f10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2820 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.171 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7frz8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=54194c6f10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2820 identity=13863 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.171 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7frz8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=54194c6f10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2820 identity=13863 ipv4=10.0.0.171 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7frz8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=54194c6f10 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2820 identity=13863 ipv4=10.0.0.171 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7frz8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=54194c6f10 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2820 identity=13863 ipv4=10.0.0.171 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7frz8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.252 fc07b1d5-53e6-42bc-90f4-29890978d751 default }" containerID=5efc3ed480c25f74161f789c9e00fe056dafb206e226bc6f2af159706c5400b6 datapathConfiguration="&{false false false false false }" interface=lxce6c00e2c1d71 k8sPodName=openstack/heat-engine-cleaner-29757645-88767 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5efc3ed480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1843 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757645-88767 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5efc3ed480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1843 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=55572d03-b596-41dc-a64f-acf30774b751,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757645,k8s:component=engine-cleaner,k8s:controller-uid=55572d03-b596-41dc-a64f-acf30774b751,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757645,k8s:release_group=heat" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757645-88767 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5efc3ed480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1843 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.252 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757645-88767 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=55572d03-b596-41dc-a64f-acf30774b751;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757645;k8s:component=engine-cleaner;k8s:controller-uid=55572d03-b596-41dc-a64f-acf30774b751;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29757645;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5efc3ed480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1843 identity=51104 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=55572d03-b596-41dc-a64f-acf30774b751,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757645,k8s:component=engine-cleaner,k8s:controller-uid=55572d03-b596-41dc-a64f-acf30774b751,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757645,k8s:release_group=heat" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757645-88767 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5efc3ed480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1843 identity=51104 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757645-88767 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5efc3ed480 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1843 identity=51104 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757645-88767 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5efc3ed480 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1843 identity=51104 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757645-88767 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5efc3ed480 endpointID=1843 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29757645-88767 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=55572d03-b596-41dc-a64f-acf30774b751 k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757645 k8s:component=engine-cleaner k8s:controller-uid=55572d03-b596-41dc-a64f-acf30774b751 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29757645 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=5efc3ed480 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1843 identity=51104 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757645-88767 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 c431f001-55f1-45cf-a167-96cce81a6a02 default }" containerID=5469b17eeaec2372d9a693136a994ba8a27c3eb427b7bec584b779beb0ebd4b5 datapathConfiguration="&{false false false false false }" interface=lxc22c9e5189cd6 k8sPodName=openstack/octavia-db-init-d5lfg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5469b17eea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/octavia-db-init-d5lfg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5469b17eea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=2fcf0209-83a5-4912-99ce-2b8a36a87133,k8s:batch.kubernetes.io/job-name=octavia-db-init,k8s:component=db-init,k8s:controller-uid=2fcf0209-83a5-4912-99ce-2b8a36a87133,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-db-init,k8s:release_group=octavia" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/octavia-db-init-d5lfg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5469b17eea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.94 ipv6= k8sPodName=openstack/octavia-db-init-d5lfg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=2fcf0209-83a5-4912-99ce-2b8a36a87133;k8s:batch.kubernetes.io/job-name=octavia-db-init;k8s:component=db-init;k8s:controller-uid=2fcf0209-83a5-4912-99ce-2b8a36a87133;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-db-init;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5469b17eea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 identity=59810 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=2fcf0209-83a5-4912-99ce-2b8a36a87133,k8s:batch.kubernetes.io/job-name=octavia-db-init,k8s:component=db-init,k8s:controller-uid=2fcf0209-83a5-4912-99ce-2b8a36a87133,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-db-init,k8s:release_group=octavia" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/octavia-db-init-d5lfg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5469b17eea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 identity=59810 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/octavia-db-init-d5lfg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5469b17eea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=373 identity=59810 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/octavia-db-init-d5lfg subsys=endpoint level=info msg="Successful endpoint creation" containerID=5469b17eea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=373 identity=59810 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/octavia-db-init-d5lfg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.89 00bf6e2e-88eb-4757-b430-1b2d10189ae2 default }" containerID=f043f14d8f5595f00c41afe30d315d93331adecd5ed488a8445d0f4c739b13f2 datapathConfiguration="&{false false false false false }" interface=lxc8e6cb0ac2b53 k8sPodName=openstack/octavia-api-78bfc76d5b-b2kfq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f043f14d8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4095 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/octavia-api-78bfc76d5b-b2kfq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f043f14d8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4095 identityLabels="k8s:application=octavia,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=octavia" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/octavia-api-78bfc76d5b-b2kfq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f043f14d8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4095 identity=34163 identityLabels="k8s:application=octavia,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=octavia" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/octavia-api-78bfc76d5b-b2kfq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f043f14d8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4095 identity=34163 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/octavia-api-78bfc76d5b-b2kfq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f043f14d8f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4095 identity=34163 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/octavia-api-78bfc76d5b-b2kfq subsys=endpoint level=info msg="Successful endpoint creation" containerID=f043f14d8f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4095 identity=34163 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/octavia-api-78bfc76d5b-b2kfq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5469b17eea endpointID=373 k8sNamespace=openstack k8sPodName=octavia-db-init-d5lfg subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=2fcf0209-83a5-4912-99ce-2b8a36a87133 k8s:batch.kubernetes.io/job-name=octavia-db-init k8s:component=db-init k8s:controller-uid=2fcf0209-83a5-4912-99ce-2b8a36a87133 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-db-init k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=5469b17eea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=373 identity=59810 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/octavia-db-init-d5lfg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.206 e4ce4495-f8b0-467f-99ae-9e37affd9419 default }" containerID=c91a21d95a4013aed3867c29e26cda174ec279762067cc48df17c254163d01d5 datapathConfiguration="&{false false false false false }" interface=lxc8683a13f4b98 k8sPodName=openstack/octavia-db-sync-qnpjk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c91a21d95a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1619 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/octavia-db-sync-qnpjk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c91a21d95a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1619 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=1d289297-61e1-4b8e-9522-2a6e45798c7f,k8s:batch.kubernetes.io/job-name=octavia-db-sync,k8s:component=db-sync,k8s:controller-uid=1d289297-61e1-4b8e-9522-2a6e45798c7f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-db-sync,k8s:release_group=octavia" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/octavia-db-sync-qnpjk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c91a21d95a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1619 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.206 ipv6= k8sPodName=openstack/octavia-db-sync-qnpjk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=1d289297-61e1-4b8e-9522-2a6e45798c7f;k8s:batch.kubernetes.io/job-name=octavia-db-sync;k8s:component=db-sync;k8s:controller-uid=1d289297-61e1-4b8e-9522-2a6e45798c7f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-db-sync;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c91a21d95a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1619 identity=45861 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=1d289297-61e1-4b8e-9522-2a6e45798c7f,k8s:batch.kubernetes.io/job-name=octavia-db-sync,k8s:component=db-sync,k8s:controller-uid=1d289297-61e1-4b8e-9522-2a6e45798c7f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-db-sync,k8s:release_group=octavia" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/octavia-db-sync-qnpjk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c91a21d95a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1619 identity=45861 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/octavia-db-sync-qnpjk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c91a21d95a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1619 identity=45861 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/octavia-db-sync-qnpjk subsys=endpoint level=info msg="Successful endpoint creation" containerID=c91a21d95a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1619 identity=45861 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/octavia-db-sync-qnpjk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c91a21d95a endpointID=1619 k8sNamespace=openstack k8sPodName=octavia-db-sync-qnpjk subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=1d289297-61e1-4b8e-9522-2a6e45798c7f k8s:batch.kubernetes.io/job-name=octavia-db-sync k8s:component=db-sync k8s:controller-uid=1d289297-61e1-4b8e-9522-2a6e45798c7f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-db-sync k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=c91a21d95a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1619 identity=45861 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/octavia-db-sync-qnpjk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 08474527-48c6-45a8-8ad9-4406ba01f79b default }" containerID=61c6b7bb7f552d304c27ac9f44d3614767b8abc23d4cd5b9a1ff7e5cf140cbdb datapathConfiguration="&{false false false false false }" interface=lxc23b681751210 k8sPodName=openstack/octavia-rabbit-init-c6ntc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=61c6b7bb7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=524 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/octavia-rabbit-init-c6ntc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=61c6b7bb7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=524 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=bf831147-ed8e-493d-9ab3-ab7692006727,k8s:batch.kubernetes.io/job-name=octavia-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=bf831147-ed8e-493d-9ab3-ab7692006727,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-rabbit-init,k8s:release_group=octavia" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/octavia-rabbit-init-c6ntc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=61c6b7bb7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=524 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.234 ipv6= k8sPodName=openstack/octavia-rabbit-init-c6ntc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=bf831147-ed8e-493d-9ab3-ab7692006727;k8s:batch.kubernetes.io/job-name=octavia-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=bf831147-ed8e-493d-9ab3-ab7692006727;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-rabbit-init;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=61c6b7bb7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=524 identity=1197 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=bf831147-ed8e-493d-9ab3-ab7692006727,k8s:batch.kubernetes.io/job-name=octavia-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=bf831147-ed8e-493d-9ab3-ab7692006727,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-rabbit-init,k8s:release_group=octavia" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/octavia-rabbit-init-c6ntc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=61c6b7bb7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=524 identity=1197 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/octavia-rabbit-init-c6ntc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=61c6b7bb7f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=524 identity=1197 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/octavia-rabbit-init-c6ntc subsys=endpoint level=info msg="Successful endpoint creation" containerID=61c6b7bb7f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=524 identity=1197 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/octavia-rabbit-init-c6ntc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=61c6b7bb7f endpointID=524 k8sNamespace=openstack k8sPodName=octavia-rabbit-init-c6ntc subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=bf831147-ed8e-493d-9ab3-ab7692006727 k8s:batch.kubernetes.io/job-name=octavia-rabbit-init k8s:component=rabbit-init k8s:controller-uid=bf831147-ed8e-493d-9ab3-ab7692006727 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-rabbit-init k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=61c6b7bb7f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=524 identity=1197 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/octavia-rabbit-init-c6ntc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 ca0a5cce-ab7b-46c0-8f4e-1e091dd593b6 default }" containerID=4fab5f05b1021ffee33fe8b48efc47371e4e2bc6c5c34c48cb87b87e40d251fb datapathConfiguration="&{false false false false false }" interface=lxc7340a902765b k8sPodName=openstack/octavia-ks-service-gxx8j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4fab5f05b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=896 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/octavia-ks-service-gxx8j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4fab5f05b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=896 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=da44a9f0-646a-41d9-aa30-e6c085016dc9,k8s:batch.kubernetes.io/job-name=octavia-ks-service,k8s:component=ks-service,k8s:controller-uid=da44a9f0-646a-41d9-aa30-e6c085016dc9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-ks-service,k8s:release_group=octavia" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/octavia-ks-service-gxx8j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=da44a9f0-646a-41d9-aa30-e6c085016dc9;k8s:batch.kubernetes.io/job-name=octavia-ks-service;k8s:component=ks-service;k8s:controller-uid=da44a9f0-646a-41d9-aa30-e6c085016dc9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-ks-service;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4fab5f05b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=896 identity=19442 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=da44a9f0-646a-41d9-aa30-e6c085016dc9,k8s:batch.kubernetes.io/job-name=octavia-ks-service,k8s:component=ks-service,k8s:controller-uid=da44a9f0-646a-41d9-aa30-e6c085016dc9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-ks-service,k8s:release_group=octavia" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/octavia-ks-service-gxx8j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4fab5f05b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=896 identity=19442 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/octavia-ks-service-gxx8j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4fab5f05b1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=896 identity=19442 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/octavia-ks-service-gxx8j subsys=endpoint level=info msg="Successful endpoint creation" containerID=4fab5f05b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=896 identity=19442 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/octavia-ks-service-gxx8j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.64 2102b777-58db-42f0-8246-454019191652 default }" containerID=aaac7a230a21b4653bd56a4ba82f995d589d0d031f6352a039e107ecac407836 datapathConfiguration="&{false false false false false }" interface=lxc289a6d658992 k8sPodName=openstack/heat-engine-cleaner-29757650-wjjr6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aaac7a230a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3812 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757650-wjjr6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aaac7a230a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3812 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=dc179404-9b17-46eb-ad15-de3ec5160cd3,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757650,k8s:component=engine-cleaner,k8s:controller-uid=dc179404-9b17-46eb-ad15-de3ec5160cd3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757650,k8s:release_group=heat" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757650-wjjr6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=dc179404-9b17-46eb-ad15-de3ec5160cd3;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757650;k8s:component=engine-cleaner;k8s:controller-uid=dc179404-9b17-46eb-ad15-de3ec5160cd3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29757650;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aaac7a230a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3812 identity=34014 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=dc179404-9b17-46eb-ad15-de3ec5160cd3,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757650,k8s:component=engine-cleaner,k8s:controller-uid=dc179404-9b17-46eb-ad15-de3ec5160cd3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757650,k8s:release_group=heat" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757650-wjjr6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aaac7a230a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3812 identity=34014 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757650-wjjr6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=aaac7a230a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3812 identity=34014 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757650-wjjr6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aaac7a230a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3812 identity=34014 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757650-wjjr6 subsys=daemon level=info msg="Delete endpoint request" containerID=aaac7a230a endpointID=3812 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29757650-wjjr6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=dc179404-9b17-46eb-ad15-de3ec5160cd3 k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757650 k8s:component=engine-cleaner k8s:controller-uid=dc179404-9b17-46eb-ad15-de3ec5160cd3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29757650 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=aaac7a230a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3812 identity=34014 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757650-wjjr6 subsys=endpoint level=info msg="Delete endpoint request" containerID=4fab5f05b1 endpointID=896 k8sNamespace=openstack k8sPodName=octavia-ks-service-gxx8j subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=da44a9f0-646a-41d9-aa30-e6c085016dc9 k8s:batch.kubernetes.io/job-name=octavia-ks-service k8s:component=ks-service k8s:controller-uid=da44a9f0-646a-41d9-aa30-e6c085016dc9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-ks-service k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=4fab5f05b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=896 identity=19442 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/octavia-ks-service-gxx8j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 85143233-4b07-43b1-836b-ccc9136d7b9c default }" containerID=a61408a222883750044677ca6075feba6fb617682c4724a2a8a97756c07dcd61 datapathConfiguration="&{false false false false false }" interface=lxcaaa42c57f5d9 k8sPodName=openstack/octavia-ks-endpoints-sqpzs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a61408a222 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3517 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/octavia-ks-endpoints-sqpzs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a61408a222 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3517 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=e8777dde-42a0-4229-aa08-263933d6fb36,k8s:batch.kubernetes.io/job-name=octavia-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=e8777dde-42a0-4229-aa08-263933d6fb36,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-ks-endpoints,k8s:release_group=octavia" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/octavia-ks-endpoints-sqpzs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=e8777dde-42a0-4229-aa08-263933d6fb36;k8s:batch.kubernetes.io/job-name=octavia-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=e8777dde-42a0-4229-aa08-263933d6fb36;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-ks-endpoints;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a61408a222 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3517 identity=4902 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=e8777dde-42a0-4229-aa08-263933d6fb36,k8s:batch.kubernetes.io/job-name=octavia-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=e8777dde-42a0-4229-aa08-263933d6fb36,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-ks-endpoints,k8s:release_group=octavia" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/octavia-ks-endpoints-sqpzs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a61408a222 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3517 identity=4902 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/octavia-ks-endpoints-sqpzs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a61408a222 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3517 identity=4902 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/octavia-ks-endpoints-sqpzs subsys=endpoint level=info msg="Successful endpoint creation" containerID=a61408a222 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3517 identity=4902 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/octavia-ks-endpoints-sqpzs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a61408a222 endpointID=3517 k8sNamespace=openstack k8sPodName=octavia-ks-endpoints-sqpzs subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=e8777dde-42a0-4229-aa08-263933d6fb36 k8s:batch.kubernetes.io/job-name=octavia-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=e8777dde-42a0-4229-aa08-263933d6fb36 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-ks-endpoints k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=a61408a222 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3517 identity=4902 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/octavia-ks-endpoints-sqpzs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.224 1b8568e6-a8d0-4bd4-8226-46e944c42f5c default }" containerID=8b40ffeab5ec6283c68afaebb8e545b7796bd66089aa2ad46b4f1c35bee756ea datapathConfiguration="&{false false false false false }" interface=lxcf60f9d25e02f k8sPodName=openstack/octavia-ks-user-h7th2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b40ffeab5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=517 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/octavia-ks-user-h7th2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b40ffeab5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=517 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=b7082928-d3ed-4945-b5e9-a9477b7ab8f9,k8s:batch.kubernetes.io/job-name=octavia-ks-user,k8s:component=ks-user,k8s:controller-uid=b7082928-d3ed-4945-b5e9-a9477b7ab8f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-ks-user,k8s:release_group=octavia" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/octavia-ks-user-h7th2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8b40ffeab5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=517 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.224 ipv6= k8sPodName=openstack/octavia-ks-user-h7th2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=b7082928-d3ed-4945-b5e9-a9477b7ab8f9;k8s:batch.kubernetes.io/job-name=octavia-ks-user;k8s:component=ks-user;k8s:controller-uid=b7082928-d3ed-4945-b5e9-a9477b7ab8f9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-ks-user;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8b40ffeab5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=517 identity=18797 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=b7082928-d3ed-4945-b5e9-a9477b7ab8f9,k8s:batch.kubernetes.io/job-name=octavia-ks-user,k8s:component=ks-user,k8s:controller-uid=b7082928-d3ed-4945-b5e9-a9477b7ab8f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-ks-user,k8s:release_group=octavia" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/octavia-ks-user-h7th2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b40ffeab5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=517 identity=18797 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/octavia-ks-user-h7th2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8b40ffeab5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=517 identity=18797 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/octavia-ks-user-h7th2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b40ffeab5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=517 identity=18797 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/octavia-ks-user-h7th2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8b40ffeab5 endpointID=517 k8sNamespace=openstack k8sPodName=octavia-ks-user-h7th2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=b7082928-d3ed-4945-b5e9-a9477b7ab8f9 k8s:batch.kubernetes.io/job-name=octavia-ks-user k8s:component=ks-user k8s:controller-uid=b7082928-d3ed-4945-b5e9-a9477b7ab8f9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-ks-user k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=8b40ffeab5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=517 identity=18797 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/octavia-ks-user-h7th2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 e045c429-cba3-48ce-b682-23600f92e428 default }" containerID=accca0fe2fe03ca86861ff1b461f96f1a032ced87896546a2fb0e4410b929e7c datapathConfiguration="&{false false false false false }" interface=lxc46e3b288c835 k8sPodName=openstack/octavia-bootstrap-8kkh9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=accca0fe2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/octavia-bootstrap-8kkh9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=accca0fe2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=b9a298e7-f3f7-46af-ab68-a83492b6133d,k8s:batch.kubernetes.io/job-name=octavia-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b9a298e7-f3f7-46af-ab68-a83492b6133d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-bootstrap,k8s:release_group=octavia" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/octavia-bootstrap-8kkh9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=b9a298e7-f3f7-46af-ab68-a83492b6133d;k8s:batch.kubernetes.io/job-name=octavia-bootstrap;k8s:component=bootstrap;k8s:controller-uid=b9a298e7-f3f7-46af-ab68-a83492b6133d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-bootstrap;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=accca0fe2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identity=31661 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=b9a298e7-f3f7-46af-ab68-a83492b6133d,k8s:batch.kubernetes.io/job-name=octavia-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b9a298e7-f3f7-46af-ab68-a83492b6133d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-bootstrap,k8s:release_group=octavia" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/octavia-bootstrap-8kkh9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=accca0fe2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identity=31661 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/octavia-bootstrap-8kkh9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=accca0fe2f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=82 identity=31661 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/octavia-bootstrap-8kkh9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=accca0fe2f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=82 identity=31661 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/octavia-bootstrap-8kkh9 subsys=daemon level=info msg="Delete endpoint request" containerID=accca0fe2f endpointID=82 k8sNamespace=openstack k8sPodName=octavia-bootstrap-8kkh9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=b9a298e7-f3f7-46af-ab68-a83492b6133d k8s:batch.kubernetes.io/job-name=octavia-bootstrap k8s:component=bootstrap k8s:controller-uid=b9a298e7-f3f7-46af-ab68-a83492b6133d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-bootstrap k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=accca0fe2f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=82 identity=31661 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/octavia-bootstrap-8kkh9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.193 d05af934-8faa-49ca-92af-be1ecadbac32 default }" containerID=60e08ceb26d22e9d64c70c87d451721df19c6373e6408beeceb736b0502dd69b datapathConfiguration="&{false false false false false }" interface=lxce75bdc21da96 k8sPodName=openstack/rabbitmq-magnum-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60e08ceb26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=38 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60e08ceb26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=38 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-magnum,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-magnum-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-magnum-server-0" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-magnum;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-magnum-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-magnum-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60e08ceb26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=38 identity=7672 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-magnum,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-magnum-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-magnum-server-0" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60e08ceb26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=38 identity=7672 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=60e08ceb26 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=38 identity=7672 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=60e08ceb26 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=38 identity=7672 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.226 88806aa0-87a1-49bd-8e25-833d755ff47b default }" containerID=17a5c1c6b8cde404f7516efb42d952c3fd87b0e179e515212bedaeba1e66d4b1 datapathConfiguration="&{false false false false false }" interface=lxcc67490d8449f k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-5c26q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=17a5c1c6b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2246 ipv4=10.0.0.226 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-5c26q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=17a5c1c6b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2246 identityLabels="k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/managed-by=kustomize,k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=orc,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=orc-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=orc-controller-manager,k8s:io.kubernetes.pod.namespace=orc-system" ipv4=10.0.0.226 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-5c26q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/managed-by:kustomize k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name:orc k8s:io.cilium.k8s.namespace.labels.control-plane:controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:orc-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/managed-by=kustomize;k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=orc;k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=orc-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=orc-controller-manager;k8s:io.kubernetes.pod.namespace=orc-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=17a5c1c6b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2246 identity=15874 identityLabels="k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/managed-by=kustomize,k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=orc,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=orc-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=orc-controller-manager,k8s:io.kubernetes.pod.namespace=orc-system" ipv4=10.0.0.226 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-5c26q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=17a5c1c6b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2246 identity=15874 ipv4=10.0.0.226 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-5c26q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=17a5c1c6b8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2246 identity=15874 ipv4=10.0.0.226 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-5c26q subsys=endpoint level=info msg="Successful endpoint creation" containerID=17a5c1c6b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2246 identity=15874 ipv4=10.0.0.226 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-5c26q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.17 0aafa06f-11d5-443f-9577-82a0ec5e5eac default }" containerID=91c4219ba1c361d6f3d1c3f799727bcfc77cd45d227ffae46900036038ea81ee datapathConfiguration="&{false false false false false }" interface=lxc58eafcf963d8 k8sPodName=capi-system/capi-controller-manager-69f9d56d75-5qf84 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=91c4219ba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=239 ipv4=10.0.0.17 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-5qf84 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=91c4219ba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=239 identityLabels="k8s:cluster.x-k8s.io/provider=cluster-api,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-manager,k8s:io.kubernetes.pod.namespace=capi-system" ipv4=10.0.0.17 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-5qf84 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider:cluster-api k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io: k8s:io.cilium.k8s.namespace.labels.control-plane:controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:capi-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:cluster.x-k8s.io/provider=cluster-api;k8s:control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api;k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io=;k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=capi-manager;k8s:io.kubernetes.pod.namespace=capi-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=91c4219ba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=239 identity=26049 identityLabels="k8s:cluster.x-k8s.io/provider=cluster-api,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-manager,k8s:io.kubernetes.pod.namespace=capi-system" ipv4=10.0.0.17 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-5qf84 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=91c4219ba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=239 identity=26049 ipv4=10.0.0.17 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-5qf84 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=91c4219ba1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=239 identity=26049 ipv4=10.0.0.17 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-5qf84 subsys=endpoint level=info msg="Successful endpoint creation" containerID=91c4219ba1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=239 identity=26049 ipv4=10.0.0.17 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-5qf84 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.137 196c4d4b-8001-4933-8719-aeb4ed321818 default }" containerID=edb7fb1450b140c01a7855cfb9e333e5b2712c40deb2e3827d26b91fbc22b0e3 datapathConfiguration="&{false false false false false }" interface=lxc5012db4e1282 k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-cx8zx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=edb7fb1450 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1056 ipv4=10.0.0.137 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-cx8zx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=edb7fb1450 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1056 identityLabels="k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system" ipv4=10.0.0.137 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-cx8zx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider:bootstrap-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io: k8s:io.cilium.k8s.namespace.labels.control-plane:controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:capi-kubeadm-bootstrap-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm;k8s:control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm;k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io=;k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager;k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=edb7fb1450 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1056 identity=982 identityLabels="k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system" ipv4=10.0.0.137 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-cx8zx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=edb7fb1450 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1056 identity=982 ipv4=10.0.0.137 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-cx8zx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=edb7fb1450 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1056 identity=982 ipv4=10.0.0.137 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-cx8zx subsys=endpoint level=info msg="Successful endpoint creation" containerID=edb7fb1450 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1056 identity=982 ipv4=10.0.0.137 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-cx8zx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.133 b42f03a6-4de4-4516-802c-2fe7370c01d9 default }" containerID=7ec0ff62eb870d9483beabcd24d3baa2940e24e5f0e653c3836df2c440b64486 datapathConfiguration="&{false false false false false }" interface=lxcfa73f20435d0 k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-zcj9r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ec0ff62eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=849 ipv4=10.0.0.133 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-zcj9r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ec0ff62eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=849 identityLabels="k8s:cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system" ipv4=10.0.0.133 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-zcj9r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider:control-plane-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io: k8s:io.cilium.k8s.namespace.labels.control-plane:controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:capi-kubeadm-control-plane-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:cluster.x-k8s.io/provider=control-plane-kubeadm;k8s:control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm;k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io=;k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager;k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ec0ff62eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=849 identity=6539 identityLabels="k8s:cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system" ipv4=10.0.0.133 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-zcj9r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ec0ff62eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=849 identity=6539 ipv4=10.0.0.133 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-zcj9r subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7ec0ff62eb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=849 identity=6539 ipv4=10.0.0.133 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-zcj9r subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ec0ff62eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=849 identity=6539 ipv4=10.0.0.133 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-zcj9r subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.7 6ed1c92e-cc28-4948-872f-9ea534031e47 default }" containerID=5dcf20431096a4284228a51ed9f8dc6ffeaadd57da734abcacf7da4e39a878b0 datapathConfiguration="&{false false false false false }" interface=lxc07afcf794875 k8sPodName=capo-system/capo-controller-manager-8c5df4f-2khpc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5dcf204310 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4076 ipv4=10.0.0.7 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-2khpc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5dcf204310 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4076 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.7 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-2khpc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider:infrastructure-openstack k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io: k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:capo-system k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit:restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce:restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn:restricted]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:cluster.x-k8s.io/provider=infrastructure-openstack;k8s:control-plane=capo-controller-manager;k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack;k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io=;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system;k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted;k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted;k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=capo-manager;k8s:io.kubernetes.pod.namespace=capo-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5dcf204310 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4076 identity=1632 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.7 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-2khpc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5dcf204310 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4076 identity=1632 ipv4=10.0.0.7 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-2khpc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5dcf204310 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4076 identity=1632 ipv4=10.0.0.7 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-2khpc subsys=endpoint level=info msg="Successful endpoint creation" containerID=5dcf204310 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4076 identity=1632 ipv4=10.0.0.7 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-2khpc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.180 f21a36a8-4f21-473c-b610-e621f3dd0608 default }" containerID=78de7516d3d6745c57412d04f2720fa346bb7a07f9682ff28fd3e811a9efd345 datapathConfiguration="&{false false false false false }" interface=lxca31fa06f37e1 k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-gmszg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=78de7516d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1190 ipv4=10.0.0.180 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-gmszg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=78de7516d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1190 identityLabels="k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system" ipv4=10.0.0.180 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-gmszg subsys=endpoint level=info msg="Identity of endpoint changed" containerID=78de7516d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1190 identity=982 identityLabels="k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system" ipv4=10.0.0.180 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-gmszg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=78de7516d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1190 identity=982 ipv4=10.0.0.180 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-gmszg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=78de7516d3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1190 identity=982 ipv4=10.0.0.180 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-gmszg subsys=endpoint level=info msg="Successful endpoint creation" containerID=78de7516d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1190 identity=982 ipv4=10.0.0.180 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-gmszg subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=edb7fb1450 endpointID=1056 k8sNamespace=capi-kubeadm-bootstrap-system k8sPodName=capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-cx8zx subsys=daemon level=info msg="Releasing key" key="[k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm k8s:control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system]" subsys=allocator level=info msg="Removed endpoint" containerID=edb7fb1450 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1056 identity=982 ipv4=10.0.0.137 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-cx8zx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 4fc13755-759b-45d6-98f0-b06217aebe30 default }" containerID=573661a2f66c4472c307e8791c15a6d63c9bc678cbd8eacda1058ed9361303b1 datapathConfiguration="&{false false false false false }" interface=lxc13dee876b141 k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-f9rdp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=573661a2f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2752 ipv4=10.0.0.251 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-f9rdp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=573661a2f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2752 identityLabels="k8s:cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system" ipv4=10.0.0.251 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-f9rdp subsys=endpoint level=info msg="Identity of endpoint changed" containerID=573661a2f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2752 identity=6539 identityLabels="k8s:cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system" ipv4=10.0.0.251 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-f9rdp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=573661a2f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2752 identity=6539 ipv4=10.0.0.251 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-f9rdp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=573661a2f6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2752 identity=6539 ipv4=10.0.0.251 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-f9rdp subsys=endpoint level=info msg="Successful endpoint creation" containerID=573661a2f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2752 identity=6539 ipv4=10.0.0.251 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-f9rdp subsys=daemon level=info msg="Delete endpoint request" containerID=7ec0ff62eb endpointID=849 k8sNamespace=capi-kubeadm-control-plane-system k8sPodName=capi-kubeadm-control-plane-controller-manager-7db57f6cd7-zcj9r subsys=daemon level=info msg="Releasing key" key="[k8s:cluster.x-k8s.io/provider=control-plane-kubeadm k8s:control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system]" subsys=allocator level=info msg="Removed endpoint" containerID=7ec0ff62eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=849 identity=6539 ipv4=10.0.0.133 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-zcj9r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 25b6d28b-7d08-44d2-b709-b087f423a773 default }" containerID=18a590d49b867318addb894897beca93f36397549b440c6c9dc1a1e02c1e3ef4 datapathConfiguration="&{false false false false false }" interface=lxcdd299e2c129a k8sPodName=capi-system/capi-controller-manager-5647546676-5qnsn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18a590d49b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=661 ipv4=10.0.0.169 ipv6= k8sPodName=capi-system/capi-controller-manager-5647546676-5qnsn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18a590d49b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=661 identityLabels="k8s:cluster.x-k8s.io/provider=cluster-api,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-manager,k8s:io.kubernetes.pod.namespace=capi-system" ipv4=10.0.0.169 ipv6= k8sPodName=capi-system/capi-controller-manager-5647546676-5qnsn subsys=endpoint level=info msg="Identity of endpoint changed" containerID=18a590d49b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=661 identity=26049 identityLabels="k8s:cluster.x-k8s.io/provider=cluster-api,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-manager,k8s:io.kubernetes.pod.namespace=capi-system" ipv4=10.0.0.169 ipv6= k8sPodName=capi-system/capi-controller-manager-5647546676-5qnsn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=18a590d49b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=661 identity=26049 ipv4=10.0.0.169 ipv6= k8sPodName=capi-system/capi-controller-manager-5647546676-5qnsn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=18a590d49b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=661 identity=26049 ipv4=10.0.0.169 ipv6= k8sPodName=capi-system/capi-controller-manager-5647546676-5qnsn subsys=endpoint level=info msg="Successful endpoint creation" containerID=18a590d49b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=661 identity=26049 ipv4=10.0.0.169 ipv6= k8sPodName=capi-system/capi-controller-manager-5647546676-5qnsn subsys=daemon level=info msg="Delete endpoint request" containerID=91c4219ba1 endpointID=239 k8sNamespace=capi-system k8sPodName=capi-controller-manager-69f9d56d75-5qf84 subsys=daemon level=info msg="Releasing key" key="[k8s:cluster.x-k8s.io/provider=cluster-api k8s:control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capi-manager k8s:io.kubernetes.pod.namespace=capi-system]" subsys=allocator level=info msg="Removed endpoint" containerID=91c4219ba1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=239 identity=26049 ipv4=10.0.0.17 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-5qf84 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 283d8d9e-0ef9-4c5a-95fc-82df7c0a72a3 default }" containerID=7f902b9a65a4e6d896f6f0ec2cf7809ed1801f40bc0c533dc5662217270ad336 datapathConfiguration="&{false false false false false }" interface=lxca4b54068b552 k8sPodName=capo-system/capo-controller-manager-6f649456cd-nkt8j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f902b9a65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3835 ipv4=10.0.0.230 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-nkt8j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f902b9a65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3835 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.230 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-nkt8j subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7f902b9a65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3835 identity=1632 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.230 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-nkt8j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f902b9a65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3835 identity=1632 ipv4=10.0.0.230 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-nkt8j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7f902b9a65 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3835 identity=1632 ipv4=10.0.0.230 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-nkt8j subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f902b9a65 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3835 identity=1632 ipv4=10.0.0.230 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-nkt8j subsys=daemon level=info msg="Delete endpoint request" containerID=5dcf204310 endpointID=4076 k8sNamespace=capo-system k8sPodName=capo-controller-manager-8c5df4f-2khpc subsys=daemon level=info msg="Releasing key" key="[k8s:cluster.x-k8s.io/provider=infrastructure-openstack k8s:control-plane=capo-controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capo-manager k8s:io.kubernetes.pod.namespace=capo-system]" subsys=allocator level=info msg="Removed endpoint" containerID=5dcf204310 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4076 identity=1632 ipv4=10.0.0.7 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-2khpc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.187 af671684-e774-4c74-acbf-c9fadccf2d44 default }" containerID=dff818c9e11a14bfdfe81bf5800dcac7a873ba8050b4f046db346bbd9a30b330 datapathConfiguration="&{false false false false false }" interface=lxcdca56db51785 k8sPodName=capo-system/capo-controller-manager-56cf844ccd-rgjgf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dff818c9e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=39 ipv4=10.0.0.187 ipv6= k8sPodName=capo-system/capo-controller-manager-56cf844ccd-rgjgf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dff818c9e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=39 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.187 ipv6= k8sPodName=capo-system/capo-controller-manager-56cf844ccd-rgjgf subsys=endpoint level=info msg="Identity of endpoint changed" containerID=dff818c9e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=39 identity=1632 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.187 ipv6= k8sPodName=capo-system/capo-controller-manager-56cf844ccd-rgjgf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dff818c9e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=39 identity=1632 ipv4=10.0.0.187 ipv6= k8sPodName=capo-system/capo-controller-manager-56cf844ccd-rgjgf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dff818c9e1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=39 identity=1632 ipv4=10.0.0.187 ipv6= k8sPodName=capo-system/capo-controller-manager-56cf844ccd-rgjgf subsys=endpoint level=info msg="Successful endpoint creation" containerID=dff818c9e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=39 identity=1632 ipv4=10.0.0.187 ipv6= k8sPodName=capo-system/capo-controller-manager-56cf844ccd-rgjgf subsys=daemon level=info msg="Delete endpoint request" containerID=7f902b9a65 endpointID=3835 k8sNamespace=capo-system k8sPodName=capo-controller-manager-6f649456cd-nkt8j subsys=daemon level=info msg="Releasing key" key="[k8s:cluster.x-k8s.io/provider=infrastructure-openstack k8s:control-plane=capo-controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capo-manager k8s:io.kubernetes.pod.namespace=capo-system]" subsys=allocator level=info msg="Removed endpoint" containerID=7f902b9a65 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3835 identity=1632 ipv4=10.0.0.230 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-nkt8j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 18271511-698b-4abb-9ec6-35c3c596363e default }" containerID=b87fa81002712c4bb0c8c00c245264f59d6a4f9ea91437f4f739c09d07bf91c2 datapathConfiguration="&{false false false false false }" interface=lxc2e9ffe836321 k8sPodName=openstack/magnum-api-548f746d4-9z8xv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b87fa81002 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1257 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/magnum-api-548f746d4-9z8xv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b87fa81002 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1257 identityLabels="k8s:application=magnum,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=magnum" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/magnum-api-548f746d4-9z8xv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=magnum;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b87fa81002 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1257 identity=4800 identityLabels="k8s:application=magnum,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=magnum" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/magnum-api-548f746d4-9z8xv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b87fa81002 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1257 identity=4800 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/magnum-api-548f746d4-9z8xv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 28d213e3-0b9b-4584-90cf-8f1dd93b950d default }" containerID=4f25bb129ec858ef9de11b1f05a6d9dcb84cade05d6aab2065ec7168f6c8a166 datapathConfiguration="&{false false false false false }" interface=lxcb5a0e9313bdb k8sPodName=openstack/magnum-conductor-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f25bb129e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1025 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/magnum-conductor-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f25bb129e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1025 identityLabels="k8s:application=magnum,k8s:apps.kubernetes.io/pod-index=0,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=magnum,k8s:statefulset.kubernetes.io/pod-name=magnum-conductor-0" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/magnum-conductor-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:apps.kubernetes.io/pod-index=0;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=magnum;k8s:statefulset.kubernetes.io/pod-name=magnum-conductor-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4f25bb129e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1025 identity=36657 identityLabels="k8s:application=magnum,k8s:apps.kubernetes.io/pod-index=0,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=magnum,k8s:statefulset.kubernetes.io/pod-name=magnum-conductor-0" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/magnum-conductor-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4f25bb129e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1025 identity=36657 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/magnum-conductor-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b87fa81002 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1257 identity=4800 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/magnum-api-548f746d4-9z8xv subsys=endpoint level=info msg="Successful endpoint creation" containerID=b87fa81002 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1257 identity=4800 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/magnum-api-548f746d4-9z8xv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.5 831294f6-c097-49f3-ad32-43e638df5bac default }" containerID=fec8f622c50c7a76399d595ad1fb7994f2b0e5b49c6f2ce435834c6413b365fd datapathConfiguration="&{false false false false false }" interface=lxcd5043e08fe6a k8sPodName=openstack/magnum-db-init-vcxmm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fec8f622c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/magnum-db-init-vcxmm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fec8f622c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=f26654c4-042d-4174-9cb4-032742d9c296,k8s:batch.kubernetes.io/job-name=magnum-db-init,k8s:component=db-init,k8s:controller-uid=f26654c4-042d-4174-9cb4-032742d9c296,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-db-init,k8s:release_group=magnum" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/magnum-db-init-vcxmm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:batch.kubernetes.io/controller-uid=f26654c4-042d-4174-9cb4-032742d9c296;k8s:batch.kubernetes.io/job-name=magnum-db-init;k8s:component=db-init;k8s:controller-uid=f26654c4-042d-4174-9cb4-032742d9c296;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=magnum-db-init;k8s:release_group=magnum;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fec8f622c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 identity=57871 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=f26654c4-042d-4174-9cb4-032742d9c296,k8s:batch.kubernetes.io/job-name=magnum-db-init,k8s:component=db-init,k8s:controller-uid=f26654c4-042d-4174-9cb4-032742d9c296,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-db-init,k8s:release_group=magnum" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/magnum-db-init-vcxmm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fec8f622c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 identity=57871 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/magnum-db-init-vcxmm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4f25bb129e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1025 identity=36657 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/magnum-conductor-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f25bb129e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1025 identity=36657 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/magnum-conductor-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fec8f622c5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1269 identity=57871 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/magnum-db-init-vcxmm subsys=endpoint level=info msg="Successful endpoint creation" containerID=fec8f622c5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1269 identity=57871 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/magnum-db-init-vcxmm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fec8f622c5 endpointID=1269 k8sNamespace=openstack k8sPodName=magnum-db-init-vcxmm subsys=daemon level=info msg="Releasing key" key="[k8s:application=magnum k8s:batch.kubernetes.io/controller-uid=f26654c4-042d-4174-9cb4-032742d9c296 k8s:batch.kubernetes.io/job-name=magnum-db-init k8s:component=db-init k8s:controller-uid=f26654c4-042d-4174-9cb4-032742d9c296 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=magnum-db-init k8s:release_group=magnum]" subsys=allocator level=info msg="Removed endpoint" containerID=fec8f622c5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1269 identity=57871 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/magnum-db-init-vcxmm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 fb0d1784-f26f-4c73-b726-c7c1cff43a2f default }" containerID=bf4d9fcb89636cd3099dca8e4100be8e4ca5d468f34b17a9940d92e6a7fc56ea datapathConfiguration="&{false false false false false }" interface=lxcbcffe0599ba4 k8sPodName=openstack/magnum-db-sync-qxbr5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf4d9fcb89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3809 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/magnum-db-sync-qxbr5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf4d9fcb89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3809 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=8aea57fd-96a9-44d9-9b3b-f54e36507f0d,k8s:batch.kubernetes.io/job-name=magnum-db-sync,k8s:component=db-sync,k8s:controller-uid=8aea57fd-96a9-44d9-9b3b-f54e36507f0d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-db-sync,k8s:release_group=magnum" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/magnum-db-sync-qxbr5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:batch.kubernetes.io/controller-uid=8aea57fd-96a9-44d9-9b3b-f54e36507f0d;k8s:batch.kubernetes.io/job-name=magnum-db-sync;k8s:component=db-sync;k8s:controller-uid=8aea57fd-96a9-44d9-9b3b-f54e36507f0d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=magnum-db-sync;k8s:release_group=magnum;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf4d9fcb89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3809 identity=9639 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=8aea57fd-96a9-44d9-9b3b-f54e36507f0d,k8s:batch.kubernetes.io/job-name=magnum-db-sync,k8s:component=db-sync,k8s:controller-uid=8aea57fd-96a9-44d9-9b3b-f54e36507f0d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-db-sync,k8s:release_group=magnum" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/magnum-db-sync-qxbr5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf4d9fcb89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3809 identity=9639 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/magnum-db-sync-qxbr5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bf4d9fcb89 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3809 identity=9639 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/magnum-db-sync-qxbr5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf4d9fcb89 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3809 identity=9639 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/magnum-db-sync-qxbr5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.225 249c22c2-ce7f-4f90-ac98-bd439d5e56e4 default }" containerID=d817d13dc8a1d6d5069e26637b9fac1a4bc5a7257428caacdd534bf5124bd5c3 datapathConfiguration="&{false false false false false }" interface=lxc8af7dccd41c8 k8sPodName=openstack/heat-engine-cleaner-29757655-pwq9k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d817d13dc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1503 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757655-pwq9k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d817d13dc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1503 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=93eccc0d-4a17-4f34-8702-ce25c2696ccc,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757655,k8s:component=engine-cleaner,k8s:controller-uid=93eccc0d-4a17-4f34-8702-ce25c2696ccc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757655,k8s:release_group=heat" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757655-pwq9k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=93eccc0d-4a17-4f34-8702-ce25c2696ccc;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757655;k8s:component=engine-cleaner;k8s:controller-uid=93eccc0d-4a17-4f34-8702-ce25c2696ccc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29757655;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d817d13dc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1503 identity=2341 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=93eccc0d-4a17-4f34-8702-ce25c2696ccc,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757655,k8s:component=engine-cleaner,k8s:controller-uid=93eccc0d-4a17-4f34-8702-ce25c2696ccc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757655,k8s:release_group=heat" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757655-pwq9k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d817d13dc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1503 identity=2341 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757655-pwq9k subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d817d13dc8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1503 identity=2341 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757655-pwq9k subsys=endpoint level=info msg="Successful endpoint creation" containerID=d817d13dc8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1503 identity=2341 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757655-pwq9k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d817d13dc8 endpointID=1503 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29757655-pwq9k subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=93eccc0d-4a17-4f34-8702-ce25c2696ccc k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757655 k8s:component=engine-cleaner k8s:controller-uid=93eccc0d-4a17-4f34-8702-ce25c2696ccc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29757655 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=d817d13dc8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1503 identity=2341 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757655-pwq9k subsys=endpoint level=info msg="Delete endpoint request" containerID=bf4d9fcb89 endpointID=3809 k8sNamespace=openstack k8sPodName=magnum-db-sync-qxbr5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=magnum k8s:batch.kubernetes.io/controller-uid=8aea57fd-96a9-44d9-9b3b-f54e36507f0d k8s:batch.kubernetes.io/job-name=magnum-db-sync k8s:component=db-sync k8s:controller-uid=8aea57fd-96a9-44d9-9b3b-f54e36507f0d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=magnum-db-sync k8s:release_group=magnum]" subsys=allocator level=info msg="Removed endpoint" containerID=bf4d9fcb89 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3809 identity=9639 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/magnum-db-sync-qxbr5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.78 18f38d7c-fafe-4e98-9de1-2b73a5ebeebf default }" containerID=f4622cdcd85236e1ac2ec466b6e709118bca6ac383460236a8860f2f816b4f7c datapathConfiguration="&{false false false false false }" interface=lxcfdf30af5b4e7 k8sPodName=openstack/magnum-rabbit-init-zxwwf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f4622cdcd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/magnum-rabbit-init-zxwwf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f4622cdcd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=d7fff69b-76a1-49ff-b154-1f799f84e9a7,k8s:batch.kubernetes.io/job-name=magnum-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d7fff69b-76a1-49ff-b154-1f799f84e9a7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-rabbit-init,k8s:release_group=magnum" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/magnum-rabbit-init-zxwwf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f4622cdcd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.78 ipv6= k8sPodName=openstack/magnum-rabbit-init-zxwwf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:batch.kubernetes.io/controller-uid=d7fff69b-76a1-49ff-b154-1f799f84e9a7;k8s:batch.kubernetes.io/job-name=magnum-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=d7fff69b-76a1-49ff-b154-1f799f84e9a7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=magnum-rabbit-init;k8s:release_group=magnum;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f4622cdcd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 identity=41891 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=d7fff69b-76a1-49ff-b154-1f799f84e9a7,k8s:batch.kubernetes.io/job-name=magnum-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d7fff69b-76a1-49ff-b154-1f799f84e9a7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-rabbit-init,k8s:release_group=magnum" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/magnum-rabbit-init-zxwwf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f4622cdcd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 identity=41891 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/magnum-rabbit-init-zxwwf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f4622cdcd8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=236 identity=41891 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/magnum-rabbit-init-zxwwf subsys=endpoint level=info msg="Successful endpoint creation" containerID=f4622cdcd8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=236 identity=41891 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/magnum-rabbit-init-zxwwf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f4622cdcd8 endpointID=236 k8sNamespace=openstack k8sPodName=magnum-rabbit-init-zxwwf subsys=daemon level=info msg="Releasing key" key="[k8s:application=magnum k8s:batch.kubernetes.io/controller-uid=d7fff69b-76a1-49ff-b154-1f799f84e9a7 k8s:batch.kubernetes.io/job-name=magnum-rabbit-init k8s:component=rabbit-init k8s:controller-uid=d7fff69b-76a1-49ff-b154-1f799f84e9a7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=magnum-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=magnum-rabbit-init k8s:release_group=magnum]" subsys=allocator level=info msg="Removed endpoint" containerID=f4622cdcd8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=236 identity=41891 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/magnum-rabbit-init-zxwwf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 c7f210a0-21e5-4902-b8aa-183a2ad28184 default }" containerID=99746754cac927cf078b847ac7aa0713666d5923e6598dd513411d46469ef2d7 datapathConfiguration="&{false false false false false }" interface=lxc0bf5b50bbf88 k8sPodName=openstack/magnum-ks-service-99nj8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=99746754ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1718 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/magnum-ks-service-99nj8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=99746754ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1718 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=74e70d00-a304-4f7c-8f82-fdedb1f0707c,k8s:batch.kubernetes.io/job-name=magnum-ks-service,k8s:component=ks-service,k8s:controller-uid=74e70d00-a304-4f7c-8f82-fdedb1f0707c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-ks-service,k8s:release_group=magnum" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/magnum-ks-service-99nj8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:batch.kubernetes.io/controller-uid=74e70d00-a304-4f7c-8f82-fdedb1f0707c;k8s:batch.kubernetes.io/job-name=magnum-ks-service;k8s:component=ks-service;k8s:controller-uid=74e70d00-a304-4f7c-8f82-fdedb1f0707c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=magnum-ks-service;k8s:release_group=magnum;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=99746754ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1718 identity=41535 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=74e70d00-a304-4f7c-8f82-fdedb1f0707c,k8s:batch.kubernetes.io/job-name=magnum-ks-service,k8s:component=ks-service,k8s:controller-uid=74e70d00-a304-4f7c-8f82-fdedb1f0707c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-ks-service,k8s:release_group=magnum" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/magnum-ks-service-99nj8 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=99746754ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1718 identity=41535 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/magnum-ks-service-99nj8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=99746754ca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1718 identity=41535 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/magnum-ks-service-99nj8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=99746754ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1718 identity=41535 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/magnum-ks-service-99nj8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=99746754ca endpointID=1718 k8sNamespace=openstack k8sPodName=magnum-ks-service-99nj8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=magnum k8s:batch.kubernetes.io/controller-uid=74e70d00-a304-4f7c-8f82-fdedb1f0707c k8s:batch.kubernetes.io/job-name=magnum-ks-service k8s:component=ks-service k8s:controller-uid=74e70d00-a304-4f7c-8f82-fdedb1f0707c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=magnum-ks-service k8s:release_group=magnum]" subsys=allocator level=info msg="Removed endpoint" containerID=99746754ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1718 identity=41535 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/magnum-ks-service-99nj8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 c0263e4a-bdcc-4116-b73f-a40a3cd72c6e default }" containerID=5d6b6d7a72a3dfc5e2725181fa02f3b2e0e52d799c547e87c1d0a72dca5fcb01 datapathConfiguration="&{false false false false false }" interface=lxc14484e23eb97 k8sPodName=openstack/magnum-ks-endpoints-cktnr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d6b6d7a72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2639 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/magnum-ks-endpoints-cktnr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d6b6d7a72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2639 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=1efe22d8-f3a6-4de8-87c1-3ff561ce42e7,k8s:batch.kubernetes.io/job-name=magnum-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=1efe22d8-f3a6-4de8-87c1-3ff561ce42e7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-ks-endpoints,k8s:release_group=magnum" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/magnum-ks-endpoints-cktnr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:batch.kubernetes.io/controller-uid=1efe22d8-f3a6-4de8-87c1-3ff561ce42e7;k8s:batch.kubernetes.io/job-name=magnum-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=1efe22d8-f3a6-4de8-87c1-3ff561ce42e7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=magnum-ks-endpoints;k8s:release_group=magnum;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5d6b6d7a72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2639 identity=11631 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=1efe22d8-f3a6-4de8-87c1-3ff561ce42e7,k8s:batch.kubernetes.io/job-name=magnum-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=1efe22d8-f3a6-4de8-87c1-3ff561ce42e7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-ks-endpoints,k8s:release_group=magnum" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/magnum-ks-endpoints-cktnr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d6b6d7a72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2639 identity=11631 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/magnum-ks-endpoints-cktnr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5d6b6d7a72 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2639 identity=11631 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/magnum-ks-endpoints-cktnr subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d6b6d7a72 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2639 identity=11631 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/magnum-ks-endpoints-cktnr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5d6b6d7a72 endpointID=2639 k8sNamespace=openstack k8sPodName=magnum-ks-endpoints-cktnr subsys=daemon level=info msg="Releasing key" key="[k8s:application=magnum k8s:batch.kubernetes.io/controller-uid=1efe22d8-f3a6-4de8-87c1-3ff561ce42e7 k8s:batch.kubernetes.io/job-name=magnum-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=1efe22d8-f3a6-4de8-87c1-3ff561ce42e7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=magnum-ks-endpoints k8s:release_group=magnum]" subsys=allocator level=info msg="Removed endpoint" containerID=5d6b6d7a72 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2639 identity=11631 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/magnum-ks-endpoints-cktnr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 3cfbd398-659e-4525-9bd7-0862c10df66e default }" containerID=2030455f169be288569035784cd5e5c11d5bf0c2b05291b2b4d29be9d553b1c5 datapathConfiguration="&{false false false false false }" interface=lxccbefb27377be k8sPodName=openstack/magnum-ks-user-2z52v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2030455f16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1241 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/magnum-ks-user-2z52v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2030455f16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1241 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=6086f1a3-8fd5-4ea4-9318-2d7b307e8202,k8s:batch.kubernetes.io/job-name=magnum-ks-user,k8s:component=ks-user,k8s:controller-uid=6086f1a3-8fd5-4ea4-9318-2d7b307e8202,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-ks-user,k8s:release_group=magnum" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/magnum-ks-user-2z52v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2030455f16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1241 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.27 ipv6= k8sPodName=openstack/magnum-ks-user-2z52v line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:batch.kubernetes.io/controller-uid=6086f1a3-8fd5-4ea4-9318-2d7b307e8202;k8s:batch.kubernetes.io/job-name=magnum-ks-user;k8s:component=ks-user;k8s:controller-uid=6086f1a3-8fd5-4ea4-9318-2d7b307e8202;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=magnum-ks-user;k8s:release_group=magnum;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2030455f16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1241 identity=4943 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=6086f1a3-8fd5-4ea4-9318-2d7b307e8202,k8s:batch.kubernetes.io/job-name=magnum-ks-user,k8s:component=ks-user,k8s:controller-uid=6086f1a3-8fd5-4ea4-9318-2d7b307e8202,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-ks-user,k8s:release_group=magnum" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/magnum-ks-user-2z52v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2030455f16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1241 identity=4943 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/magnum-ks-user-2z52v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2030455f16 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1241 identity=4943 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/magnum-ks-user-2z52v subsys=endpoint level=info msg="Successful endpoint creation" containerID=2030455f16 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1241 identity=4943 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/magnum-ks-user-2z52v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2030455f16 endpointID=1241 k8sNamespace=openstack k8sPodName=magnum-ks-user-2z52v subsys=daemon level=info msg="Releasing key" key="[k8s:application=magnum k8s:batch.kubernetes.io/controller-uid=6086f1a3-8fd5-4ea4-9318-2d7b307e8202 k8s:batch.kubernetes.io/job-name=magnum-ks-user k8s:component=ks-user k8s:controller-uid=6086f1a3-8fd5-4ea4-9318-2d7b307e8202 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=magnum-ks-user k8s:release_group=magnum]" subsys=allocator level=info msg="Removed endpoint" containerID=2030455f16 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1241 identity=4943 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/magnum-ks-user-2z52v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 91153a3c-1dba-472a-bd3d-7cea574a5c78 default }" containerID=2a4f9c08c11d28453b98ad537df97ab4e3418754d80e7403f2cdf7f2bb44496f datapathConfiguration="&{false false false false false }" interface=lxcc534598133b2 k8sPodName=openstack/magnum-domain-ks-user-gtnbv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a4f9c08c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2308 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/magnum-domain-ks-user-gtnbv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a4f9c08c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2308 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=9d254c63-d015-42b0-9f69-406389d11dc2,k8s:batch.kubernetes.io/job-name=magnum-domain-ks-user,k8s:component=ks-user,k8s:controller-uid=9d254c63-d015-42b0-9f69-406389d11dc2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-user-domain,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-domain-ks-user,k8s:release_group=magnum" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/magnum-domain-ks-user-gtnbv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2a4f9c08c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2308 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.67 ipv6= k8sPodName=openstack/magnum-domain-ks-user-gtnbv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:batch.kubernetes.io/controller-uid=9d254c63-d015-42b0-9f69-406389d11dc2;k8s:batch.kubernetes.io/job-name=magnum-domain-ks-user;k8s:component=ks-user;k8s:controller-uid=9d254c63-d015-42b0-9f69-406389d11dc2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-user-domain;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=magnum-domain-ks-user;k8s:release_group=magnum;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2a4f9c08c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2308 identity=21020 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=9d254c63-d015-42b0-9f69-406389d11dc2,k8s:batch.kubernetes.io/job-name=magnum-domain-ks-user,k8s:component=ks-user,k8s:controller-uid=9d254c63-d015-42b0-9f69-406389d11dc2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-user-domain,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-domain-ks-user,k8s:release_group=magnum" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/magnum-domain-ks-user-gtnbv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a4f9c08c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2308 identity=21020 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/magnum-domain-ks-user-gtnbv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2a4f9c08c1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2308 identity=21020 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/magnum-domain-ks-user-gtnbv subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a4f9c08c1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2308 identity=21020 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/magnum-domain-ks-user-gtnbv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2a4f9c08c1 endpointID=2308 k8sNamespace=openstack k8sPodName=magnum-domain-ks-user-gtnbv subsys=daemon level=info msg="Releasing key" key="[k8s:application=magnum k8s:batch.kubernetes.io/controller-uid=9d254c63-d015-42b0-9f69-406389d11dc2 k8s:batch.kubernetes.io/job-name=magnum-domain-ks-user k8s:component=ks-user k8s:controller-uid=9d254c63-d015-42b0-9f69-406389d11dc2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-user-domain k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=magnum-domain-ks-user k8s:release_group=magnum]" subsys=allocator level=info msg="Removed endpoint" containerID=2a4f9c08c1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2308 identity=21020 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/magnum-domain-ks-user-gtnbv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 b77dd366-6eec-40e1-ac3a-49f640d6bf77 default }" containerID=694a8eda19fefd9a72889b229b7c1b328720cb649a436e29abd1b6da562d9123 datapathConfiguration="&{false false false false false }" interface=lxc1dae4a635a9b k8sPodName=openstack/magnum-cluster-api-proxy-rg967 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=694a8eda19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1870 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/magnum-cluster-api-proxy-rg967 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=694a8eda19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1870 identityLabels="k8s:application=magnum,k8s:component=cluster-api-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-conductor,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/magnum-cluster-api-proxy-rg967 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=694a8eda19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1870 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.122 ipv6= k8sPodName=openstack/magnum-cluster-api-proxy-rg967 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:component=cluster-api-proxy;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-conductor;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=694a8eda19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1870 identity=1614 identityLabels="k8s:application=magnum,k8s:component=cluster-api-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-conductor,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/magnum-cluster-api-proxy-rg967 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=694a8eda19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1870 identity=1614 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/magnum-cluster-api-proxy-rg967 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=694a8eda19 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1870 identity=1614 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/magnum-cluster-api-proxy-rg967 subsys=endpoint level=info msg="Successful endpoint creation" containerID=694a8eda19 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1870 identity=1614 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/magnum-cluster-api-proxy-rg967 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.47 fb3f6a55-9b82-4ea6-a05b-47f346130886 default }" containerID=0f4ee14aca492f1b9db1cbad9660035b3d2cbd75c35e5de75537e6a518f973db datapathConfiguration="&{false false false false false }" interface=lxcfffa5bf43dfc k8sPodName=openstack/magnum-registry-c45778976-czrx6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f4ee14aca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1734 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/magnum-registry-c45778976-czrx6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f4ee14aca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1734 identityLabels="k8s:application=magnum,k8s:component=registry,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/magnum-registry-c45778976-czrx6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:component=registry;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f4ee14aca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1734 identity=21446 identityLabels="k8s:application=magnum,k8s:component=registry,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/magnum-registry-c45778976-czrx6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f4ee14aca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1734 identity=21446 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/magnum-registry-c45778976-czrx6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0f4ee14aca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1734 identity=21446 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/magnum-registry-c45778976-czrx6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f4ee14aca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1734 identity=21446 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/magnum-registry-c45778976-czrx6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=warning msg="Network status error received, restarting client connections" error="an error on the server (\"[+]ping ok\\n[+]log ok\\n[-]etcd failed: reason withheld\\n[+]poststarthook/start-kube-apiserver-admission-initializer ok\\n[+]poststarthook/generic-apiserver-start-informers ok\\n[+]poststarthook/priority-and-fairness-config-consumer ok\\n[+]poststarthook/priority-and-fairness-filter ok\\n[+]poststarthook/storage-object-count-tracker-hook ok\\n[+]poststarthook/start-apiextensions-informers ok\\n[+]poststarthook/start-apiextensions-controllers ok\\n[+]poststarthook/crd-informer-synced ok\\n[+]poststarthook/start-service-ip-repair-controllers ok\\n[+]poststarthook/rbac/bootstrap-roles ok\\n[+]poststarthook/scheduling/bootstrap-system-priority-classes ok\\n[+]poststarthook/priority-and-fairness-config-producer ok\\n[+]poststarthook/start-system-namespaces-controller ok\\n[+]poststarthook/bootstrap-controller ok\\n[+]poststarthook/start-cluster-authentication-info-controller ok\\n[+]poststarthook/start-kube-apiserver-identity-lease-controller ok\\n[+]poststarthook/start-deprecated-kube-apiserver-identity-lease-garbage-collector ok\\n[+]poststarthook/start-kube-apiserver-identity-lease-garbage-collector ok\\n[+]poststarthook/start-legacy-token-tracking-controller ok\\n[+]poststarthook/aggregator-reload-proxy-client-cert ok\\n[+]poststarthook/start-kube-aggregator-informers ok\\n[+]poststarthook/apiservice-registration-controller ok\\n[+]poststarthook/apiservice-status-available-controller ok\\n[+]poststarthook/kube-apiserver-autoregistration ok\\n[+]autoregister-completion ok\\n[+]poststarthook/apiservice-openapi-controller ok\\n[+]poststarthook/apiservice-openapiv3-controller ok\\n[+]poststarthook/apiservice-discovery-controller ok\\nhealthz check failed\") has prevented the request from succeeding (get healthz.meta.k8s.io)" subsys=k8s-client level=info msg="Create endpoint request" addressing="&{10.0.0.189 d1c49124-773d-47e7-98d7-0089f3467961 default }" containerID=a8e184a2c0264f464dbea2f6fa95b96b6d67fa907b534d0030c6428d1f1e0550 datapathConfiguration="&{false false false false false }" interface=lxc610ad830f613 k8sPodName=openstack/heat-engine-cleaner-29757660-v8jmn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a8e184a2c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1530 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757660-v8jmn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a8e184a2c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1530 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=10f6ddd1-a117-4806-b8cf-7cefe866695a,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757660,k8s:component=engine-cleaner,k8s:controller-uid=10f6ddd1-a117-4806-b8cf-7cefe866695a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757660,k8s:release_group=heat" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757660-v8jmn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.33 035a60c5-0cdf-4b70-a2c7-5fa07c9c457d default }" containerID=186d4f9dcf5510bb40c7c7651d5cf4fd5fffb65cb723a26fb702313dd11a58b9 datapathConfiguration="&{false false false false false }" interface=lxc7c2619db7949 k8sPodName=openstack/nova-service-cleaner-29757660-q444x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=186d4f9dcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/nova-service-cleaner-29757660-q444x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 e9968aca-b53c-4082-b5f3-ab2065e13b12 default }" containerID=ed69d6b5dcd5f436d182f1d0533eba57df2e9e979602fafe2df3610a1951e46f datapathConfiguration="&{false false false false false }" interface=lxc2aa72ecadbd6 k8sPodName=openstack/nova-cell-setup-29757660-lzp67 labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=186d4f9dcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=fb6da198-e061-4d7f-8e3a-fe61973e0ae6,k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29757660,k8s:component=service-cleaner,k8s:controller-uid=fb6da198-e061-4d7f-8e3a-fe61973e0ae6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-service-cleaner-29757660,k8s:release_group=nova" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/nova-service-cleaner-29757660-q444x subsys=endpoint level=info msg="New endpoint" containerID=ed69d6b5dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1321 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/nova-cell-setup-29757660-lzp67 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed69d6b5dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1321 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=b96f040d-ab06-4507-a277-4e3665d754cd,k8s:batch.kubernetes.io/job-name=nova-cell-setup-29757660,k8s:component=cell-setup,k8s:controller-uid=b96f040d-ab06-4507-a277-4e3665d754cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup-29757660,k8s:release_group=nova" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/nova-cell-setup-29757660-lzp67 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=10f6ddd1-a117-4806-b8cf-7cefe866695a;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757660;k8s:component=engine-cleaner;k8s:controller-uid=10f6ddd1-a117-4806-b8cf-7cefe866695a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29757660;k8s:release_group=heat;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ed69d6b5dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1321 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.190 ipv6= k8sPodName=openstack/nova-cell-setup-29757660-lzp67 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a8e184a2c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1530 identity=56071 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=10f6ddd1-a117-4806-b8cf-7cefe866695a,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757660,k8s:component=engine-cleaner,k8s:controller-uid=10f6ddd1-a117-4806-b8cf-7cefe866695a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757660,k8s:release_group=heat" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757660-v8jmn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a8e184a2c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1530 identity=56071 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757660-v8jmn subsys=endpoint level=info msg="Invalid state transition skipped" containerID=186d4f9dcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.33 ipv6= k8sPodName=openstack/nova-service-cleaner-29757660-q444x line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=fb6da198-e061-4d7f-8e3a-fe61973e0ae6;k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29757660;k8s:component=service-cleaner;k8s:controller-uid=fb6da198-e061-4d7f-8e3a-fe61973e0ae6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-service-cleaner-29757660;k8s:release_group=nova;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=186d4f9dcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 identity=8262 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=fb6da198-e061-4d7f-8e3a-fe61973e0ae6,k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29757660,k8s:component=service-cleaner,k8s:controller-uid=fb6da198-e061-4d7f-8e3a-fe61973e0ae6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-service-cleaner-29757660,k8s:release_group=nova" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/nova-service-cleaner-29757660-q444x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=186d4f9dcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 identity=8262 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/nova-service-cleaner-29757660-q444x subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=b96f040d-ab06-4507-a277-4e3665d754cd;k8s:batch.kubernetes.io/job-name=nova-cell-setup-29757660;k8s:component=cell-setup;k8s:controller-uid=b96f040d-ab06-4507-a277-4e3665d754cd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup-29757660;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed69d6b5dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1321 identity=26400 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=b96f040d-ab06-4507-a277-4e3665d754cd,k8s:batch.kubernetes.io/job-name=nova-cell-setup-29757660,k8s:component=cell-setup,k8s:controller-uid=b96f040d-ab06-4507-a277-4e3665d754cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup-29757660,k8s:release_group=nova" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/nova-cell-setup-29757660-lzp67 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed69d6b5dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1321 identity=26400 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/nova-cell-setup-29757660-lzp67 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a8e184a2c0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1530 identity=56071 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757660-v8jmn subsys=endpoint level=info msg="Successful endpoint creation" containerID=a8e184a2c0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1530 identity=56071 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757660-v8jmn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=186d4f9dcf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=178 identity=8262 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/nova-service-cleaner-29757660-q444x subsys=endpoint level=info msg="Successful endpoint creation" containerID=186d4f9dcf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=178 identity=8262 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/nova-service-cleaner-29757660-q444x subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ed69d6b5dc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1321 identity=26400 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/nova-cell-setup-29757660-lzp67 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed69d6b5dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1321 identity=26400 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/nova-cell-setup-29757660-lzp67 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a8e184a2c0 endpointID=1530 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29757660-v8jmn subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=10f6ddd1-a117-4806-b8cf-7cefe866695a k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757660 k8s:component=engine-cleaner k8s:controller-uid=10f6ddd1-a117-4806-b8cf-7cefe866695a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29757660 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=a8e184a2c0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1530 identity=56071 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757660-v8jmn subsys=endpoint level=info msg="Delete endpoint request" containerID=ed69d6b5dc endpointID=1321 k8sNamespace=openstack k8sPodName=nova-cell-setup-29757660-lzp67 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=b96f040d-ab06-4507-a277-4e3665d754cd k8s:batch.kubernetes.io/job-name=nova-cell-setup-29757660 k8s:component=cell-setup k8s:controller-uid=b96f040d-ab06-4507-a277-4e3665d754cd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-cell-setup-29757660 k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=ed69d6b5dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1321 identity=26400 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/nova-cell-setup-29757660-lzp67 subsys=endpoint level=info msg="Delete endpoint request" containerID=186d4f9dcf endpointID=178 k8sNamespace=openstack k8sPodName=nova-service-cleaner-29757660-q444x subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=fb6da198-e061-4d7f-8e3a-fe61973e0ae6 k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29757660 k8s:component=service-cleaner k8s:controller-uid=fb6da198-e061-4d7f-8e3a-fe61973e0ae6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-service-cleaner-29757660 k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=186d4f9dcf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=178 identity=8262 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/nova-service-cleaner-29757660-q444x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 7c392e7c-76f2-40b7-a19d-927493852fab default }" containerID=396fd77883c70ecb0d0f82017364db41071a16fe5236983a7eb23a06f10a8e60 datapathConfiguration="&{false false false false false }" interface=lxcc25937d08927 k8sPodName=openstack/cinder-volume-usage-audit-29757665-pvbrv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=396fd77883 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=825 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29757665-pvbrv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=396fd77883 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=825 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ef8e3b78-49b5-40dd-9033-b88052fe60ba,k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29757665,k8s:component=volume-usage-audit,k8s:controller-uid=ef8e3b78-49b5-40dd-9033-b88052fe60ba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-volume-usage-audit-29757665,k8s:release_group=cinder" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29757665-pvbrv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=ef8e3b78-49b5-40dd-9033-b88052fe60ba;k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29757665;k8s:component=volume-usage-audit;k8s:controller-uid=ef8e3b78-49b5-40dd-9033-b88052fe60ba;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-volume-usage-audit-29757665;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=396fd77883 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=825 identity=9723 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ef8e3b78-49b5-40dd-9033-b88052fe60ba,k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29757665,k8s:component=volume-usage-audit,k8s:controller-uid=ef8e3b78-49b5-40dd-9033-b88052fe60ba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-volume-usage-audit-29757665,k8s:release_group=cinder" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29757665-pvbrv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=396fd77883 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=825 identity=9723 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29757665-pvbrv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=396fd77883 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=825 identity=9723 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29757665-pvbrv subsys=endpoint level=info msg="Successful endpoint creation" containerID=396fd77883 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=825 identity=9723 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29757665-pvbrv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.234 ec054cf6-1f72-4d1e-8231-68246f10f523 default }" containerID=089c247c62d7d13895836778c1d21d611a113315adf33b39e3fdd029c0a6bcdb datapathConfiguration="&{false false false false false }" interface=lxcaf3d7fb183bb k8sPodName=openstack/heat-engine-cleaner-29757665-6mnwt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=089c247c62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3417 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757665-6mnwt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=089c247c62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3417 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=4f65de39-d975-4826-b155-0028d1821e24,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757665,k8s:component=engine-cleaner,k8s:controller-uid=4f65de39-d975-4826-b155-0028d1821e24,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757665,k8s:release_group=heat" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757665-6mnwt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=4f65de39-d975-4826-b155-0028d1821e24;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757665;k8s:component=engine-cleaner;k8s:controller-uid=4f65de39-d975-4826-b155-0028d1821e24;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29757665;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=089c247c62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3417 identity=8319 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=4f65de39-d975-4826-b155-0028d1821e24,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757665,k8s:component=engine-cleaner,k8s:controller-uid=4f65de39-d975-4826-b155-0028d1821e24,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757665,k8s:release_group=heat" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757665-6mnwt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=089c247c62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3417 identity=8319 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757665-6mnwt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=089c247c62 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3417 identity=8319 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757665-6mnwt subsys=endpoint level=info msg="Successful endpoint creation" containerID=089c247c62 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3417 identity=8319 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757665-6mnwt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=089c247c62 endpointID=3417 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29757665-6mnwt subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=4f65de39-d975-4826-b155-0028d1821e24 k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757665 k8s:component=engine-cleaner k8s:controller-uid=4f65de39-d975-4826-b155-0028d1821e24 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29757665 k8s:release_group=heat]" subsys=allocator level=info msg="Delete endpoint request" containerID=396fd77883 endpointID=825 k8sNamespace=openstack k8sPodName=cinder-volume-usage-audit-29757665-pvbrv subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=ef8e3b78-49b5-40dd-9033-b88052fe60ba k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29757665 k8s:component=volume-usage-audit k8s:controller-uid=ef8e3b78-49b5-40dd-9033-b88052fe60ba k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-volume-usage-audit-29757665 k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=089c247c62 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3417 identity=8319 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757665-6mnwt subsys=endpoint level=info msg="Removed endpoint" containerID=396fd77883 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=825 identity=9723 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29757665-pvbrv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.219 de71ba28-3bc5-427f-912e-2ff1568dfc7f default }" containerID=6f5ac4f9331bda59dfea93a3590201e3dcbed48d1a9a495bc9e3d975423fc6f3 datapathConfiguration="&{false false false false false }" interface=lxce215ea47f08e k8sPodName=openstack/heat-engine-cleaner-29757670-9zhd2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f5ac4f933 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=237 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757670-9zhd2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f5ac4f933 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=237 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=ce120441-e981-4601-9d46-878450b9e6f6,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757670,k8s:component=engine-cleaner,k8s:controller-uid=ce120441-e981-4601-9d46-878450b9e6f6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757670,k8s:release_group=heat" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757670-9zhd2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=ce120441-e981-4601-9d46-878450b9e6f6;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757670;k8s:component=engine-cleaner;k8s:controller-uid=ce120441-e981-4601-9d46-878450b9e6f6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29757670;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f5ac4f933 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=237 identity=55902 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=ce120441-e981-4601-9d46-878450b9e6f6,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757670,k8s:component=engine-cleaner,k8s:controller-uid=ce120441-e981-4601-9d46-878450b9e6f6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757670,k8s:release_group=heat" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757670-9zhd2 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6f5ac4f933 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=237 identity=55902 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757670-9zhd2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6f5ac4f933 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=237 identity=55902 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757670-9zhd2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f5ac4f933 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=237 identity=55902 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757670-9zhd2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6f5ac4f933 endpointID=237 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29757670-9zhd2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=ce120441-e981-4601-9d46-878450b9e6f6 k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757670 k8s:component=engine-cleaner k8s:controller-uid=ce120441-e981-4601-9d46-878450b9e6f6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29757670 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=6f5ac4f933 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=237 identity=55902 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757670-9zhd2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 e2f3755f-01a9-4680-a796-c0d68d2923ae default }" containerID=07225c1fa81a1949c8809e4ede4351da06ac24b9cd78e41d8b0c3987a1d52982 datapathConfiguration="&{false false false false false }" interface=lxc32e1215c88fc k8sPodName=openstack/tempest-ks-user-xlm5c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=07225c1fa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3338 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/tempest-ks-user-xlm5c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=07225c1fa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3338 identityLabels="k8s:application=tempest,k8s:batch.kubernetes.io/controller-uid=4e666e33-054f-4b45-be10-5d32e789cb70,k8s:batch.kubernetes.io/job-name=tempest-ks-user,k8s:component=ks-user,k8s:controller-uid=4e666e33-054f-4b45-be10-5d32e789cb70,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=tempest-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=tempest-ks-user,k8s:release_group=tempest" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/tempest-ks-user-xlm5c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=tempest;k8s:batch.kubernetes.io/controller-uid=4e666e33-054f-4b45-be10-5d32e789cb70;k8s:batch.kubernetes.io/job-name=tempest-ks-user;k8s:component=ks-user;k8s:controller-uid=4e666e33-054f-4b45-be10-5d32e789cb70;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=tempest-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=tempest-ks-user;k8s:release_group=tempest;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=07225c1fa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3338 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.175 ipv6= k8sPodName=openstack/tempest-ks-user-xlm5c line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=07225c1fa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3338 identity=38081 identityLabels="k8s:application=tempest,k8s:batch.kubernetes.io/controller-uid=4e666e33-054f-4b45-be10-5d32e789cb70,k8s:batch.kubernetes.io/job-name=tempest-ks-user,k8s:component=ks-user,k8s:controller-uid=4e666e33-054f-4b45-be10-5d32e789cb70,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=tempest-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=tempest-ks-user,k8s:release_group=tempest" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/tempest-ks-user-xlm5c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=07225c1fa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3338 identity=38081 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/tempest-ks-user-xlm5c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=07225c1fa8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3338 identity=38081 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/tempest-ks-user-xlm5c subsys=endpoint level=info msg="Successful endpoint creation" containerID=07225c1fa8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3338 identity=38081 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/tempest-ks-user-xlm5c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=07225c1fa8 endpointID=3338 k8sNamespace=openstack k8sPodName=tempest-ks-user-xlm5c subsys=daemon level=info msg="Releasing key" key="[k8s:application=tempest k8s:batch.kubernetes.io/controller-uid=4e666e33-054f-4b45-be10-5d32e789cb70 k8s:batch.kubernetes.io/job-name=tempest-ks-user k8s:component=ks-user k8s:controller-uid=4e666e33-054f-4b45-be10-5d32e789cb70 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=tempest-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=tempest-ks-user k8s:release_group=tempest]" subsys=allocator level=info msg="Removed endpoint" containerID=07225c1fa8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3338 identity=38081 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/tempest-ks-user-xlm5c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 9d7afe55-9ac7-4598-8416-48b22a2f263e default }" containerID=7e866fd44e8dbfa74bf21d65f700db43930ed53992328ba73459614d12073abc datapathConfiguration="&{false false false false false }" interface=lxca74fb935814f k8sPodName=openstack/tempest-run-tests-k88kr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e866fd44e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/tempest-run-tests-k88kr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e866fd44e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 identityLabels="k8s:application=tempest,k8s:batch.kubernetes.io/controller-uid=e23526e6-811f-4001-83eb-f922b4a8bbf9,k8s:batch.kubernetes.io/job-name=tempest-run-tests,k8s:component=run-tests,k8s:controller-uid=e23526e6-811f-4001-83eb-f922b4a8bbf9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=tempest-run-tests,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=tempest-run-tests,k8s:release_group=tempest" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/tempest-run-tests-k88kr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=tempest;k8s:batch.kubernetes.io/controller-uid=e23526e6-811f-4001-83eb-f922b4a8bbf9;k8s:batch.kubernetes.io/job-name=tempest-run-tests;k8s:component=run-tests;k8s:controller-uid=e23526e6-811f-4001-83eb-f922b4a8bbf9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=tempest-run-tests;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=tempest-run-tests;k8s:release_group=tempest;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7e866fd44e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 identity=15219 identityLabels="k8s:application=tempest,k8s:batch.kubernetes.io/controller-uid=e23526e6-811f-4001-83eb-f922b4a8bbf9,k8s:batch.kubernetes.io/job-name=tempest-run-tests,k8s:component=run-tests,k8s:controller-uid=e23526e6-811f-4001-83eb-f922b4a8bbf9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=tempest-run-tests,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=tempest-run-tests,k8s:release_group=tempest" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/tempest-run-tests-k88kr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7e866fd44e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 identity=15219 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/tempest-run-tests-k88kr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7e866fd44e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=198 identity=15219 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/tempest-run-tests-k88kr subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e866fd44e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=198 identity=15219 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/tempest-run-tests-k88kr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.56 6e19e163-97a2-4eee-966d-2116e190f636 default }" containerID=aceb93acd932ea3264e64bf6a3e95d6797496985af2e9c2fc7ffc86117437e32 datapathConfiguration="&{false false false false false }" interface=lxcc89ef9e14c0b k8sPodName=openstack/heat-engine-cleaner-29757675-7zm4f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aceb93acd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757675-7zm4f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aceb93acd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=aabfae89-7e52-4bc0-9c4b-c5657122cece,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757675,k8s:component=engine-cleaner,k8s:controller-uid=aabfae89-7e52-4bc0-9c4b-c5657122cece,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757675,k8s:release_group=heat" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757675-7zm4f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=aabfae89-7e52-4bc0-9c4b-c5657122cece;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757675;k8s:component=engine-cleaner;k8s:controller-uid=aabfae89-7e52-4bc0-9c4b-c5657122cece;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29757675;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aceb93acd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identity=759 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=aabfae89-7e52-4bc0-9c4b-c5657122cece,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757675,k8s:component=engine-cleaner,k8s:controller-uid=aabfae89-7e52-4bc0-9c4b-c5657122cece,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757675,k8s:release_group=heat" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757675-7zm4f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aceb93acd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identity=759 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757675-7zm4f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aceb93acd9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=124 identity=759 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757675-7zm4f subsys=endpoint level=info msg="Successful endpoint creation" containerID=aceb93acd9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=124 identity=759 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757675-7zm4f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aceb93acd9 endpointID=124 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29757675-7zm4f subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=aabfae89-7e52-4bc0-9c4b-c5657122cece k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757675 k8s:component=engine-cleaner k8s:controller-uid=aabfae89-7e52-4bc0-9c4b-c5657122cece k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29757675 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=aceb93acd9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=124 identity=759 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757675-7zm4f subsys=endpoint level=info msg="Delete endpoint request" containerID=7e866fd44e endpointID=198 k8sNamespace=openstack k8sPodName=tempest-run-tests-k88kr subsys=daemon level=info msg="Releasing key" key="[k8s:application=tempest k8s:batch.kubernetes.io/controller-uid=e23526e6-811f-4001-83eb-f922b4a8bbf9 k8s:batch.kubernetes.io/job-name=tempest-run-tests k8s:component=run-tests k8s:controller-uid=e23526e6-811f-4001-83eb-f922b4a8bbf9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=tempest-run-tests k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=tempest-run-tests k8s:release_group=tempest]" subsys=allocator level=info msg="Removed endpoint" containerID=7e866fd44e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=198 identity=15219 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/tempest-run-tests-k88kr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 b630188d-83a8-4830-a9e2-2ce6d205e386 default }" containerID=1196d61af681f9121d73d4bb4861715cd8b4539a475eb90a35b48d5bef81a982 datapathConfiguration="&{false false false false false }" interface=lxc95a0525ebfcd k8sPodName=openstack/heat-engine-cleaner-29757680-5qk9r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1196d61af6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2788 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757680-5qk9r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1196d61af6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2788 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=e0dbb02f-bcee-45e5-82a3-8a8bd49e3f6a,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757680,k8s:component=engine-cleaner,k8s:controller-uid=e0dbb02f-bcee-45e5-82a3-8a8bd49e3f6a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757680,k8s:release_group=heat" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757680-5qk9r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=e0dbb02f-bcee-45e5-82a3-8a8bd49e3f6a;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757680;k8s:component=engine-cleaner;k8s:controller-uid=e0dbb02f-bcee-45e5-82a3-8a8bd49e3f6a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29757680;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1196d61af6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2788 identity=3224 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=e0dbb02f-bcee-45e5-82a3-8a8bd49e3f6a,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757680,k8s:component=engine-cleaner,k8s:controller-uid=e0dbb02f-bcee-45e5-82a3-8a8bd49e3f6a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757680,k8s:release_group=heat" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757680-5qk9r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1196d61af6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2788 identity=3224 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757680-5qk9r subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1196d61af6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2788 identity=3224 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757680-5qk9r subsys=endpoint level=info msg="Successful endpoint creation" containerID=1196d61af6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2788 identity=3224 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757680-5qk9r subsys=daemon level=info msg="Delete endpoint request" containerID=1196d61af6 endpointID=2788 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29757680-5qk9r subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=e0dbb02f-bcee-45e5-82a3-8a8bd49e3f6a k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757680 k8s:component=engine-cleaner k8s:controller-uid=e0dbb02f-bcee-45e5-82a3-8a8bd49e3f6a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29757680 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=1196d61af6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2788 identity=3224 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757680-5qk9r subsys=endpoint