level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.25248ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="62.981µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.410232ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="10.5µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=101.367341ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="12.98µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="41.851µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="90.612µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="82.432µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="110.113µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="442.46µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.52µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.278711ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=5.850085ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="92.412µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="38.801µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="230.846µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="106.792µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="87.742µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=48.94318ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="65.572µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="13.941µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="1.82µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.242.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.675234ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="13.57µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.089715ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="7.77µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.328415ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="8.941µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.411µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.67µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.96µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.69µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="32.891µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="20.46µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="54.991µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="301.478µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="5.06µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="6.951µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="224.926µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="886.05µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.458845ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="5.09µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="25.69µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.242 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.242 ipAddr.ipv6="" k8sNodeIP=199.204.45.242 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.242" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.116" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.242" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.242} {CiliumInternalIP 10.0.0.116}] 10.0.0.0/24 [] [] 10.0.0.227 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:40243" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.460014161s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="19.191µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="10.01µs" function="*job.group.Start" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="65.072µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="4.04µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3123 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3123 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3123 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.55471158s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=322.469446ms file-path=/var/run/cilium/state/templates/08f6975cb0abab3dfad1109c5fb654f9970f0294cffe065270bda9740adda0b8/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3123 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1178 ipv4=10.0.0.227 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1178 identityLabels="reserved:health" ipv4=10.0.0.227 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1178 identity=4 identityLabels="reserved:health" ipv4=10.0.0.227 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 c914dbd2-f9b0-44c5-bebb-9d53373fe28a default }" containerID=664c6bf14a16575b28d27b1ee48672c2fc4a72ae2f1d42ff01d48399239872bf datapathConfiguration="&{false false false false false }" interface=lxc8191e2ab4d77 k8sPodName=kube-system/coredns-7c96b6546b-wszh6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=664c6bf14a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wszh6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=664c6bf14a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wszh6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=664c6bf14a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wszh6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=664c6bf14a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 identity=41775 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wszh6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=664c6bf14a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 identity=41775 ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wszh6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 086000f1-cc83-4105-964a-65bcced133c1 default }" containerID=8f975904853f77ca08a7cd78cb73efe45ef7748a9b28c8be10ea6da3f33e98af datapathConfiguration="&{false false false false false }" interface=lxc59f538ce55de k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4cb7w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f97590485 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 ipv4=10.0.0.205 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4cb7w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f97590485 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=b970ba8c-db38-4ae6-a47f-1aeeb690dc4a,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=b970ba8c-db38-4ae6-a47f-1aeeb690dc4a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.205 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4cb7w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=b970ba8c-db38-4ae6-a47f-1aeeb690dc4a;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=b970ba8c-db38-4ae6-a47f-1aeeb690dc4a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8f97590485 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 identity=1704 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=b970ba8c-db38-4ae6-a47f-1aeeb690dc4a,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=b970ba8c-db38-4ae6-a47f-1aeeb690dc4a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.205 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4cb7w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f97590485 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 identity=1704 ipv4=10.0.0.205 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4cb7w subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.146033758s file-path=/var/run/cilium/state/templates/bf8c71c7e003d1a647a249d9b257d4890b509bb5447dddd3133a348fbf5dfae6/bpf_lxc.o subsys=datapath-loader level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8f97590485 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=141 identity=1704 ipv4=10.0.0.205 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4cb7w subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f97590485 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=141 identity=1704 ipv4=10.0.0.205 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4cb7w subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=664c6bf14a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1496 identity=41775 ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wszh6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=664c6bf14a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1496 identity=41775 ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wszh6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1178 identity=4 ipv4=10.0.0.227 ipv6= k8sPodName=/ subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8f97590485 endpointID=141 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-4cb7w subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=b970ba8c-db38-4ae6-a47f-1aeeb690dc4a k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=b970ba8c-db38-4ae6-a47f-1aeeb690dc4a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=8f97590485 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=141 identity=1704 ipv4=10.0.0.205 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4cb7w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.150 09bdc6b1-209c-4b17-a62c-7391eb1bb74e default }" containerID=2b01680d94d50fbfff0af185ed39a36087ae70aaa5a8afe0a6c0e01800e09da4 datapathConfiguration="&{false false false false false }" interface=lxcce667f26027b k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wr7gc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b01680d94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2565 ipv4=10.0.0.150 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wr7gc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b01680d94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2565 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.150 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wr7gc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=2b01680d94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2565 identity=1310 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.150 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wr7gc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b01680d94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2565 identity=1310 ipv4=10.0.0.150 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wr7gc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2b01680d94 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2565 identity=1310 ipv4=10.0.0.150 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wr7gc subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b01680d94 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2565 identity=1310 ipv4=10.0.0.150 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wr7gc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3123 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03123 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03123 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03123 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03123:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3123 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 9296a1de-f451-4df7-ba2b-3fdcbb9e4c16 default }" containerID=085ed2dd0555d3d8406187e7ac5b19c3dbc9891d495647411a1109236c059664 datapathConfiguration="&{false false false false false }" interface=lxc9606da4afd1f k8sPodName=kube-system/coredns-67659f764b-g6n2l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=085ed2dd05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1520 ipv4=10.0.0.87 ipv6= k8sPodName=kube-system/coredns-67659f764b-g6n2l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=085ed2dd05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1520 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.87 ipv6= k8sPodName=kube-system/coredns-67659f764b-g6n2l subsys=endpoint level=info msg="Identity of endpoint changed" containerID=085ed2dd05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1520 identity=41775 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.87 ipv6= k8sPodName=kube-system/coredns-67659f764b-g6n2l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=085ed2dd05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1520 identity=41775 ipv4=10.0.0.87 ipv6= k8sPodName=kube-system/coredns-67659f764b-g6n2l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 7782f92c-41f4-4cdf-97e2-52070adde7e4 default }" containerID=f72fb91630a9228b474cf37715e54ccfdc943376eba12a481bcd7f34da6fc51e datapathConfiguration="&{false false false false false }" interface=lxc77740c1a12dd k8sPodName=kube-system/coredns-67659f764b-vwrj4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f72fb91630 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 ipv4=10.0.0.132 ipv6= k8sPodName=kube-system/coredns-67659f764b-vwrj4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f72fb91630 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.132 ipv6= k8sPodName=kube-system/coredns-67659f764b-vwrj4 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f72fb91630 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identity=41775 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.132 ipv6= k8sPodName=kube-system/coredns-67659f764b-vwrj4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f72fb91630 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identity=41775 ipv4=10.0.0.132 ipv6= k8sPodName=kube-system/coredns-67659f764b-vwrj4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=085ed2dd05 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1520 identity=41775 ipv4=10.0.0.87 ipv6= k8sPodName=kube-system/coredns-67659f764b-g6n2l subsys=endpoint level=info msg="Successful endpoint creation" containerID=085ed2dd05 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1520 identity=41775 ipv4=10.0.0.87 ipv6= k8sPodName=kube-system/coredns-67659f764b-g6n2l subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f72fb91630 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=221 identity=41775 ipv4=10.0.0.132 ipv6= k8sPodName=kube-system/coredns-67659f764b-vwrj4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f72fb91630 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=221 identity=41775 ipv4=10.0.0.132 ipv6= k8sPodName=kube-system/coredns-67659f764b-vwrj4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.247 83737911-afbb-4777-940d-ac0fafb1efcb default }" containerID=865859b214966ec9c23913527401f381c22955265b11819c82b331f352107b46 datapathConfiguration="&{false false false false false }" interface=lxc60e3efaf6a02 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-4ncp7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=865859b214 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3945 ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-4ncp7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=865859b214 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3945 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-4ncp7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=865859b214 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3945 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-4ncp7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=865859b214 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3945 identity=45441 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-4ncp7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=865859b214 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3945 identity=45441 ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-4ncp7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=865859b214 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3945 identity=45441 ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-4ncp7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=865859b214 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3945 identity=45441 ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-4ncp7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=664c6bf14a endpointID=1496 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-wszh6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=664c6bf14a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1496 identity=41775 ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wszh6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 2e81f0cb-01cc-4704-ba00-87d2efaf6789 default }" containerID=15d104bc05e3d08ef26249dcd3dc1464b86ada832a5df8c403db2a51ad780dd8 datapathConfiguration="&{false false false false false }" interface=lxcc033b67a9e7c k8sPodName=cert-manager/cert-manager-webhook-548949fc64-vphg9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15d104bc05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3121 ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-vphg9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15d104bc05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3121 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-vphg9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=15d104bc05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3121 identity=25818 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-vphg9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15d104bc05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3121 identity=25818 ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-vphg9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=15d104bc05 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3121 identity=25818 ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-vphg9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=15d104bc05 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3121 identity=25818 ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-vphg9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.147 e57aa3bf-c515-4ddb-a99c-fd0458205c1f default }" containerID=dc756d10790bf889283f5fe72b943359ab3d03a9fed35fe8a5b2058e75ad137f datapathConfiguration="&{false false false false false }" interface=lxc9ccc46b34dd4 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5tplv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc756d1079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 ipv4=10.0.0.147 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5tplv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc756d1079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.147 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5tplv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc756d1079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identity=26190 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.147 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5tplv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc756d1079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identity=26190 ipv4=10.0.0.147 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5tplv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.177 23aa3aa3-be73-4fd9-982a-8de35443dbb3 default }" containerID=3e85a28b33360b5cfd523075db54811deda9ec077cf09035be5ff4e3e6627c53 datapathConfiguration="&{false false false false false }" interface=lxc9d4c96a17ebb k8sPodName=cert-manager/cert-manager-75c4c745bc-wzktv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e85a28b33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3732 ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wzktv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e85a28b33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3732 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wzktv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=dc756d1079 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=829 identity=26190 ipv4=10.0.0.147 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5tplv subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc756d1079 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=829 identity=26190 ipv4=10.0.0.147 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5tplv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3e85a28b33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3732 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wzktv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e85a28b33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3732 identity=25400 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wzktv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e85a28b33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3732 identity=25400 ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wzktv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3e85a28b33 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3732 identity=25400 ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wzktv subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e85a28b33 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3732 identity=25400 ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wzktv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.92 4f03f1c7-d30a-4a4b-8813-d0e4551787ed default }" containerID=55d4a1eccc723a00a833271edc016e0ad4d6c7bfbb26c79118732c409f68146c datapathConfiguration="&{false false false false false }" interface=lxc3012b857418e k8sPodName=cert-manager/cert-manager-startupapicheck-m7x64 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=55d4a1eccc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2347 ipv4=10.0.0.92 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-m7x64 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=55d4a1eccc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2347 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=48951fbf-1d0f-40e2-b17b-123a882badc5,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=48951fbf-1d0f-40e2-b17b-123a882badc5,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.92 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-m7x64 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=48951fbf-1d0f-40e2-b17b-123a882badc5;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=48951fbf-1d0f-40e2-b17b-123a882badc5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=55d4a1eccc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2347 identity=24116 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=48951fbf-1d0f-40e2-b17b-123a882badc5,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=48951fbf-1d0f-40e2-b17b-123a882badc5,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.92 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-m7x64 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=55d4a1eccc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2347 identity=24116 ipv4=10.0.0.92 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-m7x64 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=55d4a1eccc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2347 identity=24116 ipv4=10.0.0.92 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-m7x64 subsys=endpoint level=info msg="Successful endpoint creation" containerID=55d4a1eccc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2347 identity=24116 ipv4=10.0.0.92 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-m7x64 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=55d4a1eccc endpointID=2347 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-m7x64 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=48951fbf-1d0f-40e2-b17b-123a882badc5 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=48951fbf-1d0f-40e2-b17b-123a882badc5 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=55d4a1eccc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2347 identity=24116 ipv4=10.0.0.92 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-m7x64 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 e8293943-79f0-4d3b-9c4d-a5e3c065d91b default }" containerID=5eb431199bdd6c0d3692f38bfd611fa3746aa3a694a152ee024f0734772376e9 datapathConfiguration="&{false false false false false }" interface=lxca8a36860f5fd k8sPodName=ingress-nginx/ingress-nginx-admission-create-4c457 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5eb431199b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1839 ipv4=10.0.0.117 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4c457 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5eb431199b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1839 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=78d704e4-1186-4ce2-9159-c8bf6ef6eef7,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=78d704e4-1186-4ce2-9159-c8bf6ef6eef7,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.117 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4c457 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=78d704e4-1186-4ce2-9159-c8bf6ef6eef7;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=78d704e4-1186-4ce2-9159-c8bf6ef6eef7;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5eb431199b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1839 identity=24019 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=78d704e4-1186-4ce2-9159-c8bf6ef6eef7,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=78d704e4-1186-4ce2-9159-c8bf6ef6eef7,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.117 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4c457 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5eb431199b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1839 identity=24019 ipv4=10.0.0.117 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4c457 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5eb431199b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1839 identity=24019 ipv4=10.0.0.117 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4c457 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5eb431199b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1839 identity=24019 ipv4=10.0.0.117 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4c457 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5eb431199b endpointID=1839 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-4c457 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=78d704e4-1186-4ce2-9159-c8bf6ef6eef7 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=78d704e4-1186-4ce2-9159-c8bf6ef6eef7 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=5eb431199b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1839 identity=24019 ipv4=10.0.0.117 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4c457 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 3c92f1c1-db32-4463-b604-85fcb4383c8f default }" containerID=72b3f8ff08d96c82795c184dbfae5c6d39cd2c5adb4f3214072b745d23798b2d datapathConfiguration="&{false false false false false }" interface=lxcecc85b422b1a k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-cjvcw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72b3f8ff08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1907 ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-cjvcw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72b3f8ff08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1907 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-cjvcw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=72b3f8ff08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1907 identity=37638 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-cjvcw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=72b3f8ff08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1907 identity=37638 ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-cjvcw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=72b3f8ff08 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1907 identity=37638 ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-cjvcw subsys=endpoint level=info msg="Successful endpoint creation" containerID=72b3f8ff08 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1907 identity=37638 ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-cjvcw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.169 133886b6-1739-4958-90b5-68928f971ab6 default }" containerID=e2f6b8a85290c9feee64f5b97ba77013edc7ec1bbe56737858115328542a3779 datapathConfiguration="&{false false false false false }" interface=lxc350488754b06 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-f8wgl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e2f6b8a852 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3981 ipv4=10.0.0.169 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-f8wgl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e2f6b8a852 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3981 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=3ee3beae-3671-4c90-95bd-82c174759a2a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=3ee3beae-3671-4c90-95bd-82c174759a2a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.169 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-f8wgl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=3ee3beae-3671-4c90-95bd-82c174759a2a;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=3ee3beae-3671-4c90-95bd-82c174759a2a;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e2f6b8a852 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3981 identity=13065 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=3ee3beae-3671-4c90-95bd-82c174759a2a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=3ee3beae-3671-4c90-95bd-82c174759a2a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.169 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-f8wgl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e2f6b8a852 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3981 identity=13065 ipv4=10.0.0.169 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-f8wgl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e2f6b8a852 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3981 identity=13065 ipv4=10.0.0.169 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-f8wgl subsys=endpoint level=info msg="Successful endpoint creation" containerID=e2f6b8a852 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3981 identity=13065 ipv4=10.0.0.169 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-f8wgl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e2f6b8a852 endpointID=3981 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-f8wgl subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=3ee3beae-3671-4c90-95bd-82c174759a2a k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=3ee3beae-3671-4c90-95bd-82c174759a2a k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=e2f6b8a852 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3981 identity=13065 ipv4=10.0.0.169 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-f8wgl subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=1d5a5411-289e-469c-82cf-3ced3b23e066] Description:}]" policyAddRequest=bd2158bd-94b8-4743-bed6-e98c07656578 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=bd2158bd-94b8-4743-bed6-e98c07656578 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=a6e641ee-2008-4362-a53d-e5aa8f78222e] Description:}]" policyAddRequest=47b5db5c-6c3e-4230-a36b-538abd961c72 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=47b5db5c-6c3e-4230-a36b-538abd961c72 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.210 c770918d-b95d-43e0-9ee2-69ed2a1f982c default }" containerID=a4501a7fccd1cf1534d9bf5624d2158cda271b26b2cac5203d0172a61f42c3ab datapathConfiguration="&{false false false false false }" interface=lxcc19ece86fb01 k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-glrtj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a4501a7fcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=906 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-glrtj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a4501a7fcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=906 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-glrtj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.8.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a4501a7fcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=906 identity=10816 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-glrtj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a4501a7fcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=906 identity=10816 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-glrtj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a4501a7fcc datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=906 identity=10816 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-glrtj subsys=endpoint level=info msg="Successful endpoint creation" containerID=a4501a7fcc datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=906 identity=10816 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-glrtj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.70 1a1e1ab6-1658-4118-a74b-0fb4571a6209 default }" containerID=2fe92498e141ad51bae56bdbacd69128a2a726e9d4e481e40d21cbd2a9760510 datapathConfiguration="&{false false false false false }" interface=lxca71b81c7d3eb k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-xxxvt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2fe92498e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-xxxvt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2fe92498e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-xxxvt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.13.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2fe92498e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 identity=19161 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-xxxvt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2fe92498e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 identity=19161 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-xxxvt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2fe92498e1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1920 identity=19161 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-xxxvt subsys=endpoint level=info msg="Successful endpoint creation" containerID=2fe92498e1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1920 identity=19161 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-xxxvt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.115 7c6ebe40-ed7c-475e-889a-354febd0a5cb default }" containerID=f4dd4c8f673e7592afdab3d92c2ddaee2e689afc9a4811019affac035637ca12 datapathConfiguration="&{false false false false false }" interface=lxcfab0d869f0c6 k8sPodName=openstack/pxc-operator-7cff949c8b-phwvx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f4dd4c8f67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2984 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-phwvx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f4dd4c8f67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2984 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-phwvx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f4dd4c8f67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2984 identity=47422 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-phwvx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f4dd4c8f67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2984 identity=47422 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-phwvx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f4dd4c8f67 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2984 identity=47422 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-phwvx subsys=endpoint level=info msg="Successful endpoint creation" containerID=f4dd4c8f67 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2984 identity=47422 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-phwvx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=warning msg="Network status error received, restarting client connections" error="an error on the server (\"[+]ping ok\\n[+]log ok\\n[-]etcd failed: reason withheld\\n[+]poststarthook/start-kube-apiserver-admission-initializer ok\\n[+]poststarthook/generic-apiserver-start-informers ok\\n[+]poststarthook/priority-and-fairness-config-consumer ok\\n[+]poststarthook/priority-and-fairness-filter ok\\n[+]poststarthook/storage-object-count-tracker-hook ok\\n[+]poststarthook/start-apiextensions-informers ok\\n[+]poststarthook/start-apiextensions-controllers ok\\n[+]poststarthook/crd-informer-synced ok\\n[+]poststarthook/start-service-ip-repair-controllers ok\\n[+]poststarthook/rbac/bootstrap-roles ok\\n[+]poststarthook/scheduling/bootstrap-system-priority-classes ok\\n[+]poststarthook/priority-and-fairness-config-producer ok\\n[+]poststarthook/start-system-namespaces-controller ok\\n[+]poststarthook/bootstrap-controller ok\\n[+]poststarthook/start-cluster-authentication-info-controller ok\\n[+]poststarthook/start-kube-apiserver-identity-lease-controller ok\\n[+]poststarthook/start-deprecated-kube-apiserver-identity-lease-garbage-collector ok\\n[+]poststarthook/start-kube-apiserver-identity-lease-garbage-collector ok\\n[+]poststarthook/start-legacy-token-tracking-controller ok\\n[+]poststarthook/aggregator-reload-proxy-client-cert ok\\n[+]poststarthook/start-kube-aggregator-informers ok\\n[+]poststarthook/apiservice-registration-controller ok\\n[+]poststarthook/apiservice-status-available-controller ok\\n[+]poststarthook/kube-apiserver-autoregistration ok\\n[+]autoregister-completion ok\\n[+]poststarthook/apiservice-openapi-controller ok\\n[+]poststarthook/apiservice-openapiv3-controller ok\\n[+]poststarthook/apiservice-discovery-controller ok\\nhealthz check failed\") has prevented the request from succeeding (get healthz.meta.k8s.io)" subsys=k8s-client level=warning msg="Network status error received, restarting client connections" error="an error on the server (\"[+]ping ok\\n[+]log ok\\n[-]etcd failed: reason withheld\\n[+]poststarthook/start-kube-apiserver-admission-initializer ok\\n[+]poststarthook/generic-apiserver-start-informers ok\\n[+]poststarthook/priority-and-fairness-config-consumer ok\\n[+]poststarthook/priority-and-fairness-filter ok\\n[+]poststarthook/storage-object-count-tracker-hook ok\\n[+]poststarthook/start-apiextensions-informers ok\\n[+]poststarthook/start-apiextensions-controllers ok\\n[+]poststarthook/crd-informer-synced ok\\n[+]poststarthook/start-service-ip-repair-controllers ok\\n[+]poststarthook/rbac/bootstrap-roles ok\\n[+]poststarthook/scheduling/bootstrap-system-priority-classes ok\\n[+]poststarthook/priority-and-fairness-config-producer ok\\n[+]poststarthook/start-system-namespaces-controller ok\\n[+]poststarthook/bootstrap-controller ok\\n[+]poststarthook/start-cluster-authentication-info-controller ok\\n[+]poststarthook/start-kube-apiserver-identity-lease-controller ok\\n[+]poststarthook/start-deprecated-kube-apiserver-identity-lease-garbage-collector ok\\n[+]poststarthook/start-kube-apiserver-identity-lease-garbage-collector ok\\n[+]poststarthook/start-legacy-token-tracking-controller ok\\n[+]poststarthook/aggregator-reload-proxy-client-cert ok\\n[+]poststarthook/start-kube-aggregator-informers ok\\n[+]poststarthook/apiservice-registration-controller ok\\n[+]poststarthook/apiservice-status-available-controller ok\\n[+]poststarthook/kube-apiserver-autoregistration ok\\n[+]autoregister-completion ok\\n[+]poststarthook/apiservice-openapi-controller ok\\n[+]poststarthook/apiservice-openapiv3-controller ok\\n[+]poststarthook/apiservice-discovery-controller ok\\nhealthz check failed\") has prevented the request from succeeding (get healthz.meta.k8s.io)" subsys=k8s-client level=info msg="Create endpoint request" addressing="&{10.0.0.41 cc11f4c3-802c-4dfd-9233-a50c1a157b83 default }" containerID=ba8c445b648c94cdf2f0c8fdf8b619688fe966f4d0457825c4f716e9809fed38 datapathConfiguration="&{false false false false false }" interface=lxc3f01fa4fa5ab k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba8c445b64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba8c445b64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba8c445b64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identity=2847 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba8c445b64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identity=2847 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ba8c445b64 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=660 identity=2847 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba8c445b64 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=660 identity=2847 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.66 4bc03f02-dabb-4fea-b85b-f0b9df61ff75 default }" containerID=51d058507a9fa94a7a36edc2cd6b65f1832f12fed70944388485ae0c810b112e datapathConfiguration="&{false false false false false }" interface=lxc3091986af12b k8sPodName=local-path-storage/helper-pod-create-pvc-9cda4996-8271-449b-9539-c7ff48c1ed46 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51d058507a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9cda4996-8271-449b-9539-c7ff48c1ed46 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51d058507a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9cda4996-8271-449b-9539-c7ff48c1ed46 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=51d058507a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identity=25616 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9cda4996-8271-449b-9539-c7ff48c1ed46 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51d058507a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identity=25616 ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9cda4996-8271-449b-9539-c7ff48c1ed46 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=51d058507a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=45 identity=25616 ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9cda4996-8271-449b-9539-c7ff48c1ed46 subsys=endpoint level=info msg="Successful endpoint creation" containerID=51d058507a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=45 identity=25616 ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9cda4996-8271-449b-9539-c7ff48c1ed46 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=51d058507a endpointID=45 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-9cda4996-8271-449b-9539-c7ff48c1ed46 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=51d058507a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=45 identity=25616 ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9cda4996-8271-449b-9539-c7ff48c1ed46 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 c80ac89b-92b9-409c-892b-dbd0aa84f9b8 default }" containerID=244a6b9ca3cdd79dd7c2e0d8d6f6a6878084e7000124058af9a7a90de65f77f1 datapathConfiguration="&{false false false false false }" interface=lxcbcb97f23d652 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=244a6b9ca3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2898 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=244a6b9ca3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2898 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=244a6b9ca3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2898 identity=9773 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=244a6b9ca3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2898 identity=9773 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=244a6b9ca3 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2898 identity=9773 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=244a6b9ca3 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2898 identity=9773 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.00048696604933574786 newInterval=7m30s subsys=map-ct level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=6c7ee0c2-7777-45ad-b1c1-d39991e7a399] Description:}]" policyAddRequest=0f5a9c26-12b9-4cdf-9f92-018d652bb51a subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=0f5a9c26-12b9-4cdf-9f92-018d652bb51a policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.226 8ddd6b10-e29b-4df1-87ea-674b35bc9a61 default }" containerID=6990e9130237f4eea1e44144e3a1b969e447389877a47d2382ac641bc6deb736 datapathConfiguration="&{false false false false false }" interface=lxc61b39f8fc949 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6990e91302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 ipv4=10.0.0.226 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6990e91302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.226 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=23.0.7;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-20.0.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6990e91302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 identity=32620 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.226 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6990e91302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 identity=32620 ipv4=10.0.0.226 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6990e91302 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=891 identity=32620 ipv4=10.0.0.226 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6990e91302 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=891 identity=32620 ipv4=10.0.0.226 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.148 840ecf8f-f543-4f49-8807-c833c6e9d1f7 default }" containerID=1f7987cdf734e3435adf5cdf3b40ccdc77252670270d5aec10e11edc83c24559 datapathConfiguration="&{false false false false false }" interface=lxcfdeeab179b16 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-fvw9b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f7987cdf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1057 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-fvw9b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f7987cdf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1057 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-fvw9b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=1f7987cdf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1057 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-fvw9b line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1f7987cdf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1057 identity=2676 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-fvw9b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f7987cdf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1057 identity=2676 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-fvw9b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.233 090b99c5-db8b-4504-bd5b-2f6acd4d443b default }" containerID=b1102595ef581badd9621f4871e88b8333c9f5010d5cd36ef608b18d1dc81596 datapathConfiguration="&{false false false false false }" interface=lxc588b65d30c6d k8sPodName=monitoring/node-feature-discovery-worker-ftrlh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b1102595ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-ftrlh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 9392d70a-fbea-4f36-ab55-b007c8d191f2 default }" containerID=a4fff671bf63bb25a1a0fec251f6ee1144d4ab14148e561a53667099555f7ff8 datapathConfiguration="&{false false false false false }" interface=lxca9cea61479e1 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-p89nk labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=b1102595ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-ftrlh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=a4fff671bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=240 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-p89nk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a4fff671bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=240 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-p89nk subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=b1102595ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 identity=2846 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-ftrlh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b1102595ef datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=859 identity=2846 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-ftrlh subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a4fff671bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=240 identity=24587 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-p89nk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a4fff671bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=240 identity=24587 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-p89nk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1f7987cdf7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1057 identity=2676 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-fvw9b subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f7987cdf7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1057 identity=2676 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-fvw9b subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b1102595ef datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=859 identity=2846 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-ftrlh subsys=endpoint level=info msg="Successful endpoint creation" containerID=b1102595ef datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=859 identity=2846 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-ftrlh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a4fff671bf datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=240 identity=24587 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-p89nk subsys=endpoint level=info msg="Successful endpoint creation" containerID=a4fff671bf datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=240 identity=24587 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-p89nk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.14 02cc59bb-10d4-4eb7-9dc1-14b025270dbb default }" containerID=0c20d5b452b6abbb21349c044d255aa2c699e76e28cfff0ba262aefc833f32fe datapathConfiguration="&{false false false false false }" interface=lxc889c59ba1564 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6vnmx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0c20d5b452 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=136 ipv4=10.0.0.14 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6vnmx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0c20d5b452 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=136 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.14 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6vnmx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0c20d5b452 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=136 identity=25700 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.14 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6vnmx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0c20d5b452 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=136 identity=25700 ipv4=10.0.0.14 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6vnmx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0c20d5b452 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=136 identity=25700 ipv4=10.0.0.14 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6vnmx subsys=endpoint level=info msg="Successful endpoint creation" containerID=0c20d5b452 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=136 identity=25700 ipv4=10.0.0.14 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6vnmx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3123 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-185-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03123 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03123 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03123 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03123:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3123 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.024848837366591367 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.10 8a24f566-9551-49bf-87b6-18e71bdb1595 default }" containerID=dd3f655fea74c998ee46ebb88f42b2f9aa8cad9aed9ada81baf94b747675bb1d datapathConfiguration="&{false false false false false }" interface=lxc637acb6cc74c k8sPodName=monitoring/kube-prometheus-stack-admission-create-6jndh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd3f655fea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3118 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6jndh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd3f655fea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3118 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=3a567894-66cd-412a-8fc0-88685efe4c8d,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=3a567894-66cd-412a-8fc0-88685efe4c8d,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6jndh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=3a567894-66cd-412a-8fc0-88685efe4c8d;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=3a567894-66cd-412a-8fc0-88685efe4c8d;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd3f655fea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3118 identity=9210 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=3a567894-66cd-412a-8fc0-88685efe4c8d,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=3a567894-66cd-412a-8fc0-88685efe4c8d,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6jndh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dd3f655fea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3118 identity=9210 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6jndh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=dd3f655fea datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3118 identity=9210 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6jndh subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd3f655fea datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3118 identity=9210 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6jndh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dd3f655fea endpointID=3118 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-6jndh subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=3a567894-66cd-412a-8fc0-88685efe4c8d k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=3a567894-66cd-412a-8fc0-88685efe4c8d k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=dd3f655fea datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3118 identity=9210 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6jndh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 1dbfa501-93c4-4711-a71a-3e8c7ee4583e default }" containerID=15711904934fc442b754ace416c814271442498bf33df8e0b9b210a377d14f2f datapathConfiguration="&{false false false false false }" interface=lxcc67ca26a336a k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-m5ft8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1571190493 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-m5ft8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1571190493 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-m5ft8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.91 c20e4545-dbcf-4d63-8885-62df68a7d8b3 default }" containerID=e81fac722ac1a0526f4d6c1d66b90fe776feb839df37eb7547114e8dc46b126a datapathConfiguration="&{false false false false false }" interface=lxcff276b764b5a k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-d86js labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e81fac722a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2107 ipv4=10.0.0.91 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-d86js subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 8b66b4dd-026d-4e90-b310-864f3b830af5 default }" containerID=ab35bc17704aad15792224ebcf086cc29f8816ff241baefc86e4b771e22e6c5c datapathConfiguration="&{false false false false false }" interface=lxc3e1ea51536d9 k8sPodName=monitoring/kube-prometheus-stack-grafana-579f697865-cvtfm labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=e81fac722a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2107 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.91 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-d86js subsys=endpoint level=info msg="New endpoint" containerID=ab35bc1770 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2977 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-579f697865-cvtfm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab35bc1770 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2977 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-579f697865-cvtfm subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:chart=kube-prometheus-stack-58.2.1;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1571190493 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 identity=1915 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-m5ft8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1571190493 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 identity=1915 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-m5ft8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ab35bc1770 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2977 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-579f697865-cvtfm line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=e81fac722a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2107 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.91 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-d86js line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=e81fac722a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2107 identity=46571 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.91 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-d86js oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e81fac722a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2107 identity=46571 ipv4=10.0.0.91 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-d86js subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ab35bc1770 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2977 identity=7483 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-579f697865-cvtfm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ab35bc1770 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2977 identity=7483 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-579f697865-cvtfm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1571190493 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=62 identity=1915 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-m5ft8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1571190493 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=62 identity=1915 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-m5ft8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e81fac722a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2107 identity=46571 ipv4=10.0.0.91 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-d86js subsys=endpoint level=info msg="Successful endpoint creation" containerID=e81fac722a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2107 identity=46571 ipv4=10.0.0.91 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-d86js subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ab35bc1770 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2977 identity=7483 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-579f697865-cvtfm subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab35bc1770 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2977 identity=7483 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-579f697865-cvtfm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.60 9182047a-7d84-43c5-ac06-19cbd77e41a2 default }" containerID=b7097e6c3e5ae4354676cf5b7d253af5b63b624fc2f9be3d13350c1d121684f5 datapathConfiguration="&{false false false false false }" interface=lxcca5395a0e932 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-c6jcx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7097e6c3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3337 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-c6jcx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7097e6c3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3337 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=506f6165-ae66-4196-8738-3ad97af43189,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=506f6165-ae66-4196-8738-3ad97af43189,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-c6jcx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=506f6165-ae66-4196-8738-3ad97af43189;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=506f6165-ae66-4196-8738-3ad97af43189;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b7097e6c3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3337 identity=2399 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=506f6165-ae66-4196-8738-3ad97af43189,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=506f6165-ae66-4196-8738-3ad97af43189,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-c6jcx oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b7097e6c3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3337 identity=2399 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-c6jcx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b7097e6c3e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3337 identity=2399 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-c6jcx subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7097e6c3e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3337 identity=2399 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-c6jcx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b7097e6c3e endpointID=3337 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-c6jcx subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=506f6165-ae66-4196-8738-3ad97af43189 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=506f6165-ae66-4196-8738-3ad97af43189 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=b7097e6c3e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3337 identity=2399 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-c6jcx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 21f50d30-a9cc-480c-a142-d358e164a704 default }" containerID=b076b641c246e8cc7fcacdc8b91d7fcc6cb2d62af7532d107a8dc30f663d147f datapathConfiguration="&{false false false false false }" interface=lxccdc57474500e k8sPodName=local-path-storage/helper-pod-create-pvc-12a031c8-f7c6-45db-978e-0c28152556d3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b076b641c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-12a031c8-f7c6-45db-978e-0c28152556d3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b076b641c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-12a031c8-f7c6-45db-978e-0c28152556d3 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b076b641c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 identity=25616 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-12a031c8-f7c6-45db-978e-0c28152556d3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b076b641c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 identity=25616 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-12a031c8-f7c6-45db-978e-0c28152556d3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b076b641c2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=514 identity=25616 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-12a031c8-f7c6-45db-978e-0c28152556d3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b076b641c2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=514 identity=25616 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-12a031c8-f7c6-45db-978e-0c28152556d3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.119 db98b19d-3b00-44f6-985b-33a5d304b5d2 default }" containerID=51aa61893dcf7aaef5c3f01f3bfd8eb0cfaa3661e78c4076e911ced4f11027ee datapathConfiguration="&{false false false false false }" interface=lxca062c2891ca2 k8sPodName=local-path-storage/helper-pod-create-pvc-abe86788-5b74-4925-92cf-b71253ddd60c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51aa61893d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2649 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-abe86788-5b74-4925-92cf-b71253ddd60c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51aa61893d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2649 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-abe86788-5b74-4925-92cf-b71253ddd60c subsys=endpoint level=info msg="Identity of endpoint changed" containerID=51aa61893d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2649 identity=25616 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-abe86788-5b74-4925-92cf-b71253ddd60c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51aa61893d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2649 identity=25616 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-abe86788-5b74-4925-92cf-b71253ddd60c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=51aa61893d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2649 identity=25616 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-abe86788-5b74-4925-92cf-b71253ddd60c subsys=endpoint level=info msg="Successful endpoint creation" containerID=51aa61893d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2649 identity=25616 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-abe86788-5b74-4925-92cf-b71253ddd60c subsys=daemon level=info msg="Delete endpoint request" containerID=51aa61893d endpointID=2649 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-abe86788-5b74-4925-92cf-b71253ddd60c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=b076b641c2 endpointID=514 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-12a031c8-f7c6-45db-978e-0c28152556d3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=51aa61893d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2649 identity=25616 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-abe86788-5b74-4925-92cf-b71253ddd60c subsys=endpoint level=info msg="Removed endpoint" containerID=b076b641c2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=514 identity=25616 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-12a031c8-f7c6-45db-978e-0c28152556d3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.40 9393a39f-cb71-4eb1-bfca-e653839f818b default }" containerID=520ed936b919078eb240fd284db26a35bbeff2ccff592d2c32f04552c1b072d3 datapathConfiguration="&{false false false false false }" interface=lxc51467f0699a2 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=520ed936b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=999 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=520ed936b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=999 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=520ed936b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=999 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=520ed936b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=999 identity=53238 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=520ed936b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=999 identity=53238 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 f56655cf-9610-4453-ae6f-803990f9a7f0 default }" containerID=19565ca2555310799f6019e4e9714045d827589c8bdf06be77da652567fd230e datapathConfiguration="&{false false false false false }" interface=lxc6462d2f569ae k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19565ca255 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3527 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19565ca255 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3527 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19565ca255 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3527 identity=52670 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19565ca255 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3527 identity=52670 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=520ed936b9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=999 identity=53238 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=520ed936b9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=999 identity=53238 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=19565ca255 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3527 identity=52670 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=19565ca255 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3527 identity=52670 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.83 6ea3b98e-ca29-4e88-8702-c5aa61899872 default }" containerID=40e28e1f9bbb50831c268d913218cd57fd2d3c828bc3896c03da1dff1840f847 datapathConfiguration="&{false false false false false }" interface=lxc5f4bb4bc8df5 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=40e28e1f9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=40e28e1f9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=40e28e1f9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 identity=6524 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=40e28e1f9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 identity=6524 ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.141 0d12b95e-a936-4c78-ac86-8660abf8bd51 default }" containerID=4a1bd332e5874efa07ed017f0e354dbd973cb12630bf19b167133e0b861f07b0 datapathConfiguration="&{false false false false false }" interface=lxcf2773a58693c k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a1bd332e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a1bd332e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a1bd332e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 identity=16717 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a1bd332e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 identity=16717 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=40e28e1f9b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=818 identity=6524 ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=40e28e1f9b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=818 identity=6524 ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4a1bd332e5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=243 identity=16717 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a1bd332e5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=243 identity=16717 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.157 e1973967-e6da-4b74-9200-36b5aacc14e6 default }" containerID=648fe4d2af0fdbcd5e374ae64f039a927c9459eac77df024152ce6b0cd02254f datapathConfiguration="&{false false false false false }" interface=lxc6881ffb586da k8sPodName=monitoring/loki-gateway-748b556d75-f9pmm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=648fe4d2af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2155 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-f9pmm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=648fe4d2af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2155 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-f9pmm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=648fe4d2af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2155 identity=1189 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-f9pmm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=648fe4d2af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2155 identity=1189 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-f9pmm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=648fe4d2af datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2155 identity=1189 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-f9pmm subsys=endpoint level=info msg="Successful endpoint creation" containerID=648fe4d2af datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2155 identity=1189 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-f9pmm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.85 5d8892a1-da41-41bc-9f8f-8f1cd392e5e7 default }" containerID=2ec4f9cf6c39b0b019b634cb48fd0c5546b74a59b10dbe822888e8acedc752ed datapathConfiguration="&{false false false false false }" interface=lxc277283a57bc3 k8sPodName=local-path-storage/helper-pod-create-pvc-bbedcda8-035a-49c5-8f33-b267899137f5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ec4f9cf6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2003 ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bbedcda8-035a-49c5-8f33-b267899137f5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ec4f9cf6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2003 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bbedcda8-035a-49c5-8f33-b267899137f5 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2ec4f9cf6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2003 identity=25616 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bbedcda8-035a-49c5-8f33-b267899137f5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ec4f9cf6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2003 identity=25616 ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bbedcda8-035a-49c5-8f33-b267899137f5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2ec4f9cf6c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2003 identity=25616 ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bbedcda8-035a-49c5-8f33-b267899137f5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ec4f9cf6c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2003 identity=25616 ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bbedcda8-035a-49c5-8f33-b267899137f5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.139 207675b3-8c0a-42b0-956b-4f709e34bc3b default }" containerID=7b08608bf5e9de6615b1d0997b03cbfa731c0f9b66f4bc1c56b0494d08265d50 datapathConfiguration="&{false false false false false }" interface=lxcd8b6e4b64cc6 k8sPodName=monitoring/vector-km2xs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7b08608bf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=819 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/vector-km2xs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7b08608bf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=819 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/vector-km2xs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7b08608bf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=819 identity=64869 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/vector-km2xs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7b08608bf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=819 identity=64869 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/vector-km2xs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7b08608bf5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=819 identity=64869 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/vector-km2xs subsys=endpoint level=info msg="Successful endpoint creation" containerID=7b08608bf5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=819 identity=64869 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/vector-km2xs subsys=daemon level=info msg="Delete endpoint request" containerID=2ec4f9cf6c endpointID=2003 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-bbedcda8-035a-49c5-8f33-b267899137f5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2ec4f9cf6c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2003 identity=25616 ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bbedcda8-035a-49c5-8f33-b267899137f5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 0bfa68bd-78fd-4145-9d99-72999535e154 default }" containerID=a397964b095bedfc7b321029d804030566a75f7f1ca8d0ccdba8fa9b76bc98f2 datapathConfiguration="&{false false false false false }" interface=lxcc3cccf8f3ce5 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a397964b09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a397964b09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a397964b09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 identity=8042 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a397964b09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 identity=8042 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a397964b09 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=893 identity=8042 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a397964b09 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=893 identity=8042 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.198 1151d36a-34e8-4a5d-9e3f-5f4665e98fa0 default }" containerID=116e8f9079dfbabde1bbad60b93f443fc492e51e18c43d9cba4637c2959aa197 datapathConfiguration="&{false false false false false }" interface=lxca3ac7171f6b5 k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-hfxt7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=116e8f9079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4031 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-hfxt7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=116e8f9079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4031 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-hfxt7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=116e8f9079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4031 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-hfxt7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.12.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=116e8f9079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4031 identity=2381 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-hfxt7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=116e8f9079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4031 identity=2381 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-hfxt7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=116e8f9079 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4031 identity=2381 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-hfxt7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=116e8f9079 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4031 identity=2381 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-hfxt7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.113 57527188-cdd0-4860-b1c4-d22c6c7c412f default }" containerID=62881e272fdeffdbd857bdbeece24f647dd84666c6f2c193d8f47a48a2bc0c6e datapathConfiguration="&{false false false false false }" interface=lxcc1bc87173967 k8sPodName=openstack/memcached-memcached-6479589586-64tj9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62881e272f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3349 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-64tj9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62881e272f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3349 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-64tj9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=62881e272f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3349 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.113 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-64tj9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=62881e272f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3349 identity=21488 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-64tj9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=62881e272f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3349 identity=21488 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-64tj9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=62881e272f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3349 identity=21488 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-64tj9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=62881e272f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3349 identity=21488 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-64tj9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.124 5b4446de-6fe4-41db-8481-0eab9ae1d89f default }" containerID=1e636f7228bf471df69c010b8ada61af7dd6c54a20a5e0ee21f5b324aae1ebc2 datapathConfiguration="&{false false false false false }" interface=lxc10fb4f915f82 k8sPodName=local-path-storage/helper-pod-create-pvc-98ed8631-1ddb-42d3-b921-8ec1b9709538 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e636f7228 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1716 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-98ed8631-1ddb-42d3-b921-8ec1b9709538 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e636f7228 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1716 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-98ed8631-1ddb-42d3-b921-8ec1b9709538 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e636f7228 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1716 identity=25616 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-98ed8631-1ddb-42d3-b921-8ec1b9709538 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e636f7228 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1716 identity=25616 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-98ed8631-1ddb-42d3-b921-8ec1b9709538 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e636f7228 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1716 identity=25616 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-98ed8631-1ddb-42d3-b921-8ec1b9709538 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e636f7228 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1716 identity=25616 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-98ed8631-1ddb-42d3-b921-8ec1b9709538 subsys=daemon level=info msg="Delete endpoint request" containerID=1e636f7228 endpointID=1716 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-98ed8631-1ddb-42d3-b921-8ec1b9709538 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1e636f7228 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1716 identity=25616 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-98ed8631-1ddb-42d3-b921-8ec1b9709538 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 90a7e15e-2382-495d-ad92-83808a670612 default }" containerID=e66d5ec31691e54208b518fde961b8cdbb36d3a66bc3819aa360eb556eddf15e datapathConfiguration="&{false false false false false }" interface=lxcd7a862177871 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e66d5ec316 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1074 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e66d5ec316 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1074 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e66d5ec316 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1074 identity=20120 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e66d5ec316 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1074 identity=20120 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e66d5ec316 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1074 identity=20120 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e66d5ec316 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1074 identity=20120 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.90 c7440bc4-b30d-4738-b2b4-3e23ece3bddf default }" containerID=9295e6044e43fb197c414bdc6e99ccb14d7f2bdfc465d33714931dd94eb02bc5 datapathConfiguration="&{false false false false false }" interface=lxce6c14b14bdce k8sPodName=openstack/keystone-api-6cfb45956d-vsjx5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9295e6044e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-api-6cfb45956d-vsjx5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9295e6044e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-api-6cfb45956d-vsjx5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9295e6044e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-api-6cfb45956d-vsjx5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9295e6044e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identity=6712 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-api-6cfb45956d-vsjx5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9295e6044e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identity=6712 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-api-6cfb45956d-vsjx5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 38718447-a940-4f41-99aa-6f66e7553fb4 default }" containerID=3c95d12d84024b42fabbe12010ef41f98903a0ce958623db3c4b34e072cf3603 datapathConfiguration="&{false false false false false }" interface=lxceabdd613d907 k8sPodName=openstack/keystone-credential-setup-jv27z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c95d12d84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1889 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/keystone-credential-setup-jv27z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c95d12d84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1889 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c2a1e3de-0a6e-4c1e-8df8-e21808a67d72,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=c2a1e3de-0a6e-4c1e-8df8-e21808a67d72,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/keystone-credential-setup-jv27z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=9295e6044e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=16 identity=6712 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-api-6cfb45956d-vsjx5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9295e6044e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=16 identity=6712 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-api-6cfb45956d-vsjx5 subsys=daemon level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c2a1e3de-0a6e-4c1e-8df8-e21808a67d72;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=c2a1e3de-0a6e-4c1e-8df8-e21808a67d72;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c95d12d84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1889 identity=18733 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c2a1e3de-0a6e-4c1e-8df8-e21808a67d72,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=c2a1e3de-0a6e-4c1e-8df8-e21808a67d72,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/keystone-credential-setup-jv27z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c95d12d84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1889 identity=18733 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/keystone-credential-setup-jv27z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c95d12d84 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1889 identity=18733 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/keystone-credential-setup-jv27z subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c95d12d84 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1889 identity=18733 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/keystone-credential-setup-jv27z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3c95d12d84 endpointID=1889 k8sNamespace=openstack k8sPodName=keystone-credential-setup-jv27z subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c2a1e3de-0a6e-4c1e-8df8-e21808a67d72 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=c2a1e3de-0a6e-4c1e-8df8-e21808a67d72 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3c95d12d84 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1889 identity=18733 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/keystone-credential-setup-jv27z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 410d1793-8780-424a-b3df-b104b6f8c633 default }" containerID=4557024690e623764e45186e757c496424e8c0e3d8c140edeaac9c92c42d0953 datapathConfiguration="&{false false false false false }" interface=lxc5cfb23771c58 k8sPodName=openstack/keystone-db-init-8wn84 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4557024690 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=379 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-db-init-8wn84 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4557024690 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=379 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=79684255-720b-4d78-affa-ff2ce04b2387,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=79684255-720b-4d78-affa-ff2ce04b2387,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-db-init-8wn84 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=79684255-720b-4d78-affa-ff2ce04b2387;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=79684255-720b-4d78-affa-ff2ce04b2387;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4557024690 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=379 identity=48434 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=79684255-720b-4d78-affa-ff2ce04b2387,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=79684255-720b-4d78-affa-ff2ce04b2387,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-db-init-8wn84 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4557024690 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=379 identity=48434 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-db-init-8wn84 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4557024690 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=379 identity=48434 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-db-init-8wn84 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4557024690 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=379 identity=48434 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-db-init-8wn84 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4557024690 endpointID=379 k8sNamespace=openstack k8sPodName=keystone-db-init-8wn84 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=79684255-720b-4d78-affa-ff2ce04b2387 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=79684255-720b-4d78-affa-ff2ce04b2387 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=4557024690 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=379 identity=48434 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-db-init-8wn84 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.193 bb8428d5-2c07-4125-912f-7d7de335a0ab default }" containerID=f1eac7eee79e6abf8ac547244b64481737052a13088600f6dc833b31bcd34bb8 datapathConfiguration="&{false false false false false }" interface=lxc82503a3340e8 k8sPodName=openstack/keystone-fernet-setup-rhn9d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f1eac7eee7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=994 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-fernet-setup-rhn9d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f1eac7eee7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=994 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ac01b8c3-bcb4-4143-8041-2863b4eb74ee,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=ac01b8c3-bcb4-4143-8041-2863b4eb74ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-fernet-setup-rhn9d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ac01b8c3-bcb4-4143-8041-2863b4eb74ee;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=ac01b8c3-bcb4-4143-8041-2863b4eb74ee;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f1eac7eee7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=994 identity=33365 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ac01b8c3-bcb4-4143-8041-2863b4eb74ee,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=ac01b8c3-bcb4-4143-8041-2863b4eb74ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-fernet-setup-rhn9d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f1eac7eee7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=994 identity=33365 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-fernet-setup-rhn9d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f1eac7eee7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=994 identity=33365 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-fernet-setup-rhn9d subsys=endpoint level=info msg="Successful endpoint creation" containerID=f1eac7eee7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=994 identity=33365 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-fernet-setup-rhn9d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f1eac7eee7 endpointID=994 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-rhn9d subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ac01b8c3-bcb4-4143-8041-2863b4eb74ee k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=ac01b8c3-bcb4-4143-8041-2863b4eb74ee k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f1eac7eee7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=994 identity=33365 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-fernet-setup-rhn9d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 d7f44578-8ea5-4d18-9908-bed4141ab60a default }" containerID=afc98aeb8ac8bc90a151b2940f818db62707a4f9b0d97f79c771697e292ee359 datapathConfiguration="&{false false false false false }" interface=lxc4481d64a3cb3 k8sPodName=openstack/keystone-db-sync-rm4kg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=afc98aeb8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/keystone-db-sync-rm4kg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=afc98aeb8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f726881b-6f3e-4e20-bf3a-5d2f7ea08545,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=f726881b-6f3e-4e20-bf3a-5d2f7ea08545,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/keystone-db-sync-rm4kg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f726881b-6f3e-4e20-bf3a-5d2f7ea08545;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=f726881b-6f3e-4e20-bf3a-5d2f7ea08545;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=afc98aeb8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identity=5754 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f726881b-6f3e-4e20-bf3a-5d2f7ea08545,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=f726881b-6f3e-4e20-bf3a-5d2f7ea08545,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/keystone-db-sync-rm4kg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=afc98aeb8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identity=5754 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/keystone-db-sync-rm4kg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=afc98aeb8a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1152 identity=5754 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/keystone-db-sync-rm4kg subsys=endpoint level=info msg="Successful endpoint creation" containerID=afc98aeb8a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1152 identity=5754 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/keystone-db-sync-rm4kg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=afc98aeb8a endpointID=1152 k8sNamespace=openstack k8sPodName=keystone-db-sync-rm4kg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f726881b-6f3e-4e20-bf3a-5d2f7ea08545 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=f726881b-6f3e-4e20-bf3a-5d2f7ea08545 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=afc98aeb8a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1152 identity=5754 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/keystone-db-sync-rm4kg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 749ca007-d5ef-4e9f-853b-5992d7f9411a default }" containerID=4abe371f9e4ffd0194242d3aa8f1bb8cba5644afb8c106b06c45a74429490433 datapathConfiguration="&{false false false false false }" interface=lxc28bdab6ea2ed k8sPodName=openstack/keystone-rabbit-init-mj6bj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4abe371f9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1409 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-rabbit-init-mj6bj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4abe371f9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1409 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d21bc83d-7037-4c64-9e16-6b02abcf7fc7,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d21bc83d-7037-4c64-9e16-6b02abcf7fc7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-rabbit-init-mj6bj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d21bc83d-7037-4c64-9e16-6b02abcf7fc7;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=d21bc83d-7037-4c64-9e16-6b02abcf7fc7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4abe371f9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1409 identity=55844 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d21bc83d-7037-4c64-9e16-6b02abcf7fc7,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d21bc83d-7037-4c64-9e16-6b02abcf7fc7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-rabbit-init-mj6bj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4abe371f9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1409 identity=55844 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-rabbit-init-mj6bj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4abe371f9e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1409 identity=55844 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-rabbit-init-mj6bj subsys=endpoint level=info msg="Successful endpoint creation" containerID=4abe371f9e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1409 identity=55844 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-rabbit-init-mj6bj subsys=daemon level=info msg="Delete endpoint request" containerID=4abe371f9e endpointID=1409 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-mj6bj subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d21bc83d-7037-4c64-9e16-6b02abcf7fc7 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=d21bc83d-7037-4c64-9e16-6b02abcf7fc7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=4abe371f9e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1409 identity=55844 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-rabbit-init-mj6bj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 79e152a7-c9b8-4b53-b628-9dd60632199e default }" containerID=00b89813ced20b27efb4dd1861537ae861858b01c0d8b33a9a8a3b930d8a4eed datapathConfiguration="&{false false false false false }" interface=lxc2717398fc303 k8sPodName=openstack/keystone-domain-manage-flm9v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00b89813ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=865 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-domain-manage-flm9v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00b89813ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=865 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e63e72ee-6549-4aa0-9dac-053895efd4a8,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=e63e72ee-6549-4aa0-9dac-053895efd4a8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-domain-manage-flm9v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=00b89813ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=865 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-domain-manage-flm9v line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e63e72ee-6549-4aa0-9dac-053895efd4a8;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=e63e72ee-6549-4aa0-9dac-053895efd4a8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=00b89813ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=865 identity=44418 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e63e72ee-6549-4aa0-9dac-053895efd4a8,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=e63e72ee-6549-4aa0-9dac-053895efd4a8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-domain-manage-flm9v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=00b89813ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=865 identity=44418 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-domain-manage-flm9v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=00b89813ce datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=865 identity=44418 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-domain-manage-flm9v subsys=endpoint level=info msg="Successful endpoint creation" containerID=00b89813ce datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=865 identity=44418 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-domain-manage-flm9v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=00b89813ce endpointID=865 k8sNamespace=openstack k8sPodName=keystone-domain-manage-flm9v subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e63e72ee-6549-4aa0-9dac-053895efd4a8 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=e63e72ee-6549-4aa0-9dac-053895efd4a8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=00b89813ce datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=865 identity=44418 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-domain-manage-flm9v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.253 dd71d9e2-2986-43a4-93b0-6ebe85e72234 default }" containerID=09aa04ca898ab53f5a4550de0dc961056cad8b063175bf0f15307f8e324b3900 datapathConfiguration="&{false false false false false }" interface=lxc3b6c8c0caba3 k8sPodName=openstack/keystone-bootstrap-sw4x6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=09aa04ca89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1148 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/keystone-bootstrap-sw4x6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=09aa04ca89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1148 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f3c6dd38-3760-4089-ae08-6da2f117c8e6,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=f3c6dd38-3760-4089-ae08-6da2f117c8e6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/keystone-bootstrap-sw4x6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f3c6dd38-3760-4089-ae08-6da2f117c8e6;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=f3c6dd38-3760-4089-ae08-6da2f117c8e6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=09aa04ca89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1148 identity=44499 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f3c6dd38-3760-4089-ae08-6da2f117c8e6,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=f3c6dd38-3760-4089-ae08-6da2f117c8e6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/keystone-bootstrap-sw4x6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=09aa04ca89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1148 identity=44499 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/keystone-bootstrap-sw4x6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=09aa04ca89 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1148 identity=44499 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/keystone-bootstrap-sw4x6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=09aa04ca89 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1148 identity=44499 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/keystone-bootstrap-sw4x6 subsys=daemon level=info msg="Delete endpoint request" containerID=09aa04ca89 endpointID=1148 k8sNamespace=openstack k8sPodName=keystone-bootstrap-sw4x6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f3c6dd38-3760-4089-ae08-6da2f117c8e6 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=f3c6dd38-3760-4089-ae08-6da2f117c8e6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=09aa04ca89 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1148 identity=44499 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/keystone-bootstrap-sw4x6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 598b0482-7f09-460f-bff6-fdcb79e77d6f default }" containerID=3b709adfa9d8ceb3c88a3671cee1098d81217e6fc752bb537b795a9ee833c4c8 datapathConfiguration="&{false false false false false }" interface=lxc82db6af61280 k8sPodName=local-path-storage/helper-pod-create-pvc-b4482a30-9af3-4ce9-9f75-291f6317d29c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b709adfa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=231 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4482a30-9af3-4ce9-9f75-291f6317d29c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b709adfa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=231 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4482a30-9af3-4ce9-9f75-291f6317d29c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b709adfa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=231 identity=25616 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4482a30-9af3-4ce9-9f75-291f6317d29c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b709adfa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=231 identity=25616 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4482a30-9af3-4ce9-9f75-291f6317d29c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3b709adfa9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=231 identity=25616 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4482a30-9af3-4ce9-9f75-291f6317d29c subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b709adfa9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=231 identity=25616 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4482a30-9af3-4ce9-9f75-291f6317d29c subsys=daemon level=info msg="Delete endpoint request" containerID=3b709adfa9 endpointID=231 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b4482a30-9af3-4ce9-9f75-291f6317d29c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3b709adfa9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=231 identity=25616 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4482a30-9af3-4ce9-9f75-291f6317d29c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 f4a870bc-30cb-4c06-982a-6b63d245ad7e default }" containerID=8a0a5738cc2a630aba40abd3886e8ed9d643cc4521c23b190933ca9a0b029a1d datapathConfiguration="&{false false false false false }" interface=lxc88ff35b00869 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a0a5738cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=430 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a0a5738cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=430 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8a0a5738cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=430 identity=28028 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8a0a5738cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=430 identity=28028 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8a0a5738cc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=430 identity=28028 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a0a5738cc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=430 identity=28028 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.126 fc60aba5-8f58-4f1b-a2f6-0153fd4e3e55 default }" containerID=d5d9e814ceeba4740345466ceddfad431bcf30387c6e7cb10c69daa076dcbe51 datapathConfiguration="&{false false false false false }" interface=lxc9c0d4838551a k8sPodName=openstack/barbican-api-56c4f56596-q6zpk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d5d9e814ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-api-56c4f56596-q6zpk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d5d9e814ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-api-56c4f56596-q6zpk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d5d9e814ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 identity=18070 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-api-56c4f56596-q6zpk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d5d9e814ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 identity=18070 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-api-56c4f56596-q6zpk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 8a5d346a-909d-4b09-8c52-6b63dae1cf72 default }" containerID=610193638a9a6fec3906b5c15793666ba7df3ab96154ebe6004a0759c2d979bb datapathConfiguration="&{false false false false false }" interface=lxc03e4f0e12c49 k8sPodName=openstack/barbican-db-init-v6mjd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=610193638a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-db-init-v6mjd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=610193638a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=91ca902c-422c-419d-b5a9-3fb52518c285,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=91ca902c-422c-419d-b5a9-3fb52518c285,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-db-init-v6mjd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=91ca902c-422c-419d-b5a9-3fb52518c285;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=91ca902c-422c-419d-b5a9-3fb52518c285;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=610193638a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 identity=10853 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=91ca902c-422c-419d-b5a9-3fb52518c285,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=91ca902c-422c-419d-b5a9-3fb52518c285,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-db-init-v6mjd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=610193638a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 identity=10853 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-db-init-v6mjd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d5d9e814ce datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1204 identity=18070 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-api-56c4f56596-q6zpk subsys=endpoint level=info msg="Successful endpoint creation" containerID=d5d9e814ce datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1204 identity=18070 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-api-56c4f56596-q6zpk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=610193638a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1207 identity=10853 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-db-init-v6mjd subsys=endpoint level=info msg="Successful endpoint creation" containerID=610193638a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1207 identity=10853 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-db-init-v6mjd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=610193638a endpointID=1207 k8sNamespace=openstack k8sPodName=barbican-db-init-v6mjd subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=91ca902c-422c-419d-b5a9-3fb52518c285 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=91ca902c-422c-419d-b5a9-3fb52518c285 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=610193638a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1207 identity=10853 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-db-init-v6mjd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 5984581e-3d51-4cb4-a194-b438edf24508 default }" containerID=4d02eb28d8b0b31b9db95d0e6f26424b83342b15a551c243b8a0ae197589540d datapathConfiguration="&{false false false false false }" interface=lxc4364fd2a7b88 k8sPodName=openstack/barbican-db-sync-82nt9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d02eb28d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1871 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-sync-82nt9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d02eb28d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1871 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=24a731ee-eb49-4d92-b5fa-5738bf273ab1,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=24a731ee-eb49-4d92-b5fa-5738bf273ab1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-sync-82nt9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=24a731ee-eb49-4d92-b5fa-5738bf273ab1;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=24a731ee-eb49-4d92-b5fa-5738bf273ab1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4d02eb28d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1871 identity=8077 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=24a731ee-eb49-4d92-b5fa-5738bf273ab1,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=24a731ee-eb49-4d92-b5fa-5738bf273ab1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-sync-82nt9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d02eb28d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1871 identity=8077 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-sync-82nt9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4d02eb28d8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1871 identity=8077 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-sync-82nt9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d02eb28d8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1871 identity=8077 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-sync-82nt9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4d02eb28d8 endpointID=1871 k8sNamespace=openstack k8sPodName=barbican-db-sync-82nt9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=24a731ee-eb49-4d92-b5fa-5738bf273ab1 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=24a731ee-eb49-4d92-b5fa-5738bf273ab1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=4d02eb28d8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1871 identity=8077 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-sync-82nt9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 9f45bf70-6cd1-43e2-8cc2-831ec66d0f4c default }" containerID=7c84181f3d1f3af52e9c3ba03647a4abc4be27213265125226589d36fb4fa71c datapathConfiguration="&{false false false false false }" interface=lxc582631a8502c k8sPodName=openstack/barbican-rabbit-init-fccgq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c84181f3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2082 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-rabbit-init-fccgq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c84181f3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2082 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c7be764d-28ab-4ea1-baaa-deb541dd3151,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c7be764d-28ab-4ea1-baaa-deb541dd3151,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-rabbit-init-fccgq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=c7be764d-28ab-4ea1-baaa-deb541dd3151;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=c7be764d-28ab-4ea1-baaa-deb541dd3151;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7c84181f3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2082 identity=3821 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c7be764d-28ab-4ea1-baaa-deb541dd3151,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c7be764d-28ab-4ea1-baaa-deb541dd3151,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-rabbit-init-fccgq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c84181f3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2082 identity=3821 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-rabbit-init-fccgq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c84181f3d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2082 identity=3821 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-rabbit-init-fccgq subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c84181f3d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2082 identity=3821 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-rabbit-init-fccgq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7c84181f3d endpointID=2082 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-fccgq subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=c7be764d-28ab-4ea1-baaa-deb541dd3151 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=c7be764d-28ab-4ea1-baaa-deb541dd3151 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=7c84181f3d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2082 identity=3821 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-rabbit-init-fccgq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.88 d45fb474-e908-4fec-81b3-1e34b62b533d default }" containerID=064e1a53c9c18780faf1c0a0b2e14f1b26bf916daa5b0afe89f8531f3af23912 datapathConfiguration="&{false false false false false }" interface=lxc11d0b7312853 k8sPodName=openstack/barbican-ks-service-cdr6w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=064e1a53c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2660 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-ks-service-cdr6w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=064e1a53c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2660 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3b62cc86-0326-4a84-b0f5-65f256439f0d,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=3b62cc86-0326-4a84-b0f5-65f256439f0d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-ks-service-cdr6w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3b62cc86-0326-4a84-b0f5-65f256439f0d;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=3b62cc86-0326-4a84-b0f5-65f256439f0d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=064e1a53c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2660 identity=45212 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3b62cc86-0326-4a84-b0f5-65f256439f0d,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=3b62cc86-0326-4a84-b0f5-65f256439f0d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-ks-service-cdr6w oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=064e1a53c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2660 identity=45212 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-ks-service-cdr6w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=064e1a53c9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2660 identity=45212 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-ks-service-cdr6w subsys=endpoint level=info msg="Successful endpoint creation" containerID=064e1a53c9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2660 identity=45212 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-ks-service-cdr6w subsys=daemon level=info msg="Delete endpoint request" containerID=064e1a53c9 endpointID=2660 k8sNamespace=openstack k8sPodName=barbican-ks-service-cdr6w subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3b62cc86-0326-4a84-b0f5-65f256439f0d k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=3b62cc86-0326-4a84-b0f5-65f256439f0d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=064e1a53c9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2660 identity=45212 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-ks-service-cdr6w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 bd213646-e93d-4b5b-b1d3-06d3dc2a3076 default }" containerID=fa76ffd76526d91808877a700edbf7eeacece61344db08b35ecaafc49b4137b1 datapathConfiguration="&{false false false false false }" interface=lxc039756220e68 k8sPodName=openstack/barbican-ks-endpoints-ld4jt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa76ffd765 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=147 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ld4jt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa76ffd765 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=147 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3322de4d-bce0-45de-974d-cbe8ddccb8e9,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3322de4d-bce0-45de-974d-cbe8ddccb8e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ld4jt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fa76ffd765 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=147 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ld4jt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3322de4d-bce0-45de-974d-cbe8ddccb8e9;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=3322de4d-bce0-45de-974d-cbe8ddccb8e9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa76ffd765 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=147 identity=37768 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3322de4d-bce0-45de-974d-cbe8ddccb8e9,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3322de4d-bce0-45de-974d-cbe8ddccb8e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ld4jt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa76ffd765 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=147 identity=37768 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ld4jt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fa76ffd765 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=147 identity=37768 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ld4jt subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa76ffd765 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=147 identity=37768 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ld4jt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fa76ffd765 endpointID=147 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-ld4jt subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3322de4d-bce0-45de-974d-cbe8ddccb8e9 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=3322de4d-bce0-45de-974d-cbe8ddccb8e9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=fa76ffd765 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=147 identity=37768 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ld4jt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 eb08025f-b3b0-496e-8e78-7ccf510f447b default }" containerID=e4d70f7f534973c5520f5c48bb52c5b10e01032c781a10c223b28d7d0f0a24c3 datapathConfiguration="&{false false false false false }" interface=lxc0b4bda7ae7f4 k8sPodName=openstack/barbican-ks-user-q9jxk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4d70f7f53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=343 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-user-q9jxk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4d70f7f53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=343 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c5067053-b890-4200-9700-6901adfe659b,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=c5067053-b890-4200-9700-6901adfe659b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-user-q9jxk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e4d70f7f53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=343 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-user-q9jxk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=c5067053-b890-4200-9700-6901adfe659b;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=c5067053-b890-4200-9700-6901adfe659b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e4d70f7f53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=343 identity=487 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c5067053-b890-4200-9700-6901adfe659b,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=c5067053-b890-4200-9700-6901adfe659b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-user-q9jxk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4d70f7f53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=343 identity=487 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-user-q9jxk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e4d70f7f53 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=343 identity=487 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-user-q9jxk subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4d70f7f53 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=343 identity=487 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-user-q9jxk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e4d70f7f53 endpointID=343 k8sNamespace=openstack k8sPodName=barbican-ks-user-q9jxk subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=c5067053-b890-4200-9700-6901adfe659b k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=c5067053-b890-4200-9700-6901adfe659b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e4d70f7f53 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=343 identity=487 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-user-q9jxk subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.31 23c7d4e2-c8e5-48d5-9092-17318829c5f7 default }" containerID=a48cfae2dabb1a718bedab1229204bfb74b7cdc7d461f8560155acf41d24c2ee datapathConfiguration="&{false false false false false }" interface=lxc83ceebb67b31 k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-clgdp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a48cfae2da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 ipv4=10.0.0.31 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-clgdp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a48cfae2da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.31 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-clgdp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a48cfae2da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.31 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-clgdp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.14.2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a48cfae2da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 identity=38141 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.31 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-clgdp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a48cfae2da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 identity=38141 ipv4=10.0.0.31 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-clgdp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a48cfae2da datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=521 identity=38141 ipv4=10.0.0.31 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-clgdp subsys=endpoint level=info msg="Successful endpoint creation" containerID=a48cfae2da datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=521 identity=38141 ipv4=10.0.0.31 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-clgdp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.12 2162e097-f5cd-4c30-8b10-327edfd054b0 default }" containerID=7209088a19196a39b2b951c3f49e4853406c863a3d364d3e93a05cb3ec309e9b datapathConfiguration="&{false false false false false }" interface=lxc9539ee888917 k8sPodName=openstack/rook-ceph-detect-version-5wmhm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7209088a19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1558 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5wmhm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7209088a19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1558 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=51171859-ea94-412f-9570-03d13f4bae76,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=51171859-ea94-412f-9570-03d13f4bae76,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5wmhm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7209088a19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1558 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5wmhm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=51171859-ea94-412f-9570-03d13f4bae76;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=51171859-ea94-412f-9570-03d13f4bae76;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7209088a19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1558 identity=52432 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=51171859-ea94-412f-9570-03d13f4bae76,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=51171859-ea94-412f-9570-03d13f4bae76,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5wmhm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7209088a19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1558 identity=52432 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5wmhm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7209088a19 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1558 identity=52432 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5wmhm subsys=endpoint level=info msg="Successful endpoint creation" containerID=7209088a19 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1558 identity=52432 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5wmhm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7209088a19 endpointID=1558 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-5wmhm subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=51171859-ea94-412f-9570-03d13f4bae76 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=51171859-ea94-412f-9570-03d13f4bae76 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=7209088a19 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1558 identity=52432 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5wmhm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 9b6210ad-5a90-490e-b71f-170ced9b7e8e default }" containerID=c77e73b6e730e23a8dea8316120d5cfc8470dd45d4ef5aef56cb92014fa75688 datapathConfiguration="&{false false false false false }" interface=lxc8421293074fd k8sPodName=local-path-storage/helper-pod-create-pvc-5731a79f-bb27-471b-b32e-8661f0e3db38 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c77e73b6e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5731a79f-bb27-471b-b32e-8661f0e3db38 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c77e73b6e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5731a79f-bb27-471b-b32e-8661f0e3db38 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c77e73b6e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 identity=25616 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5731a79f-bb27-471b-b32e-8661f0e3db38 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c77e73b6e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 identity=25616 ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5731a79f-bb27-471b-b32e-8661f0e3db38 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c77e73b6e7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=561 identity=25616 ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5731a79f-bb27-471b-b32e-8661f0e3db38 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c77e73b6e7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=561 identity=25616 ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5731a79f-bb27-471b-b32e-8661f0e3db38 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.248 7ab3d703-22e3-4d4e-8c83-afce8032065b default }" containerID=81ecaf7ab0262aed194f8b8e27dc187f3c69e034d8c3ff98b692641e5e365a50 datapathConfiguration="&{false false false false false }" interface=lxcc78251489bca k8sPodName=openstack/ceph-object-controller-detect-version-xgjpv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81ecaf7ab0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1408 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xgjpv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81ecaf7ab0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1408 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=678e4f87-ed64-421c-af7d-883c8b2d55aa,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=678e4f87-ed64-421c-af7d-883c8b2d55aa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xgjpv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=81ecaf7ab0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1408 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.248 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xgjpv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=678e4f87-ed64-421c-af7d-883c8b2d55aa;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=678e4f87-ed64-421c-af7d-883c8b2d55aa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81ecaf7ab0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1408 identity=7101 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=678e4f87-ed64-421c-af7d-883c8b2d55aa,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=678e4f87-ed64-421c-af7d-883c8b2d55aa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xgjpv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81ecaf7ab0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1408 identity=7101 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xgjpv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=81ecaf7ab0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1408 identity=7101 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xgjpv subsys=endpoint level=info msg="Successful endpoint creation" containerID=81ecaf7ab0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1408 identity=7101 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xgjpv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c77e73b6e7 endpointID=561 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5731a79f-bb27-471b-b32e-8661f0e3db38 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c77e73b6e7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=561 identity=25616 ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5731a79f-bb27-471b-b32e-8661f0e3db38 subsys=endpoint level=info msg="Delete endpoint request" containerID=81ecaf7ab0 endpointID=1408 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-xgjpv subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=678e4f87-ed64-421c-af7d-883c8b2d55aa k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=678e4f87-ed64-421c-af7d-883c8b2d55aa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=81ecaf7ab0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1408 identity=7101 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xgjpv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.235 7ed7881b-73ef-44f3-b703-d35226073156 default }" containerID=c7226f6fc848e555ea3f3aad993459025af4cbaf3f29ce0279772ae73a4a210c datapathConfiguration="&{false false false false false }" interface=lxc9cc6dc4073b4 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7226f6fc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1401 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7226f6fc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1401 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7226f6fc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1401 identity=30464 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7226f6fc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1401 identity=30464 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c7226f6fc8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1401 identity=30464 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7226f6fc8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1401 identity=30464 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.04931892272106267 newInterval=16m53s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.225 86f1f833-ea05-4fac-8f79-3b0aad05c214 default }" containerID=a397c7f5fff7266cfd2332cc2d5e4aa8d92d5759757d4ec69061aa3b6ed6ade1 datapathConfiguration="&{false false false false false }" interface=lxcf70a7f05dfa4 k8sPodName=openstack/glance-db-init-llj9l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a397c7f5ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=175 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-db-init-llj9l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a397c7f5ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=175 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5b143a74-c155-4c09-ba1f-bae953419952,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=5b143a74-c155-4c09-ba1f-bae953419952,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-db-init-llj9l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5b143a74-c155-4c09-ba1f-bae953419952;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=5b143a74-c155-4c09-ba1f-bae953419952;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a397c7f5ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=175 identity=46368 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5b143a74-c155-4c09-ba1f-bae953419952,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=5b143a74-c155-4c09-ba1f-bae953419952,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-db-init-llj9l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a397c7f5ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=175 identity=46368 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-db-init-llj9l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a397c7f5ff datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=175 identity=46368 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-db-init-llj9l subsys=endpoint level=info msg="Successful endpoint creation" containerID=a397c7f5ff datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=175 identity=46368 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-db-init-llj9l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a397c7f5ff endpointID=175 k8sNamespace=openstack k8sPodName=glance-db-init-llj9l subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5b143a74-c155-4c09-ba1f-bae953419952 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=5b143a74-c155-4c09-ba1f-bae953419952 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a397c7f5ff datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=175 identity=46368 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-db-init-llj9l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 e44b3a9e-8d26-4efe-b831-debfb59ece7e default }" containerID=a2f4b36c75b081daa09a5af7db216344c5435b3993be5fcb6254ab852768a2ec datapathConfiguration="&{false false false false false }" interface=lxc7ab9cfd21a06 k8sPodName=openstack/glance-db-sync-gck6f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2f4b36c75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1992 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-db-sync-gck6f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2f4b36c75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1992 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=011bbb2e-d2af-4cfe-bdf9-ef2854ed0e50,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=011bbb2e-d2af-4cfe-bdf9-ef2854ed0e50,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-db-sync-gck6f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=011bbb2e-d2af-4cfe-bdf9-ef2854ed0e50;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=011bbb2e-d2af-4cfe-bdf9-ef2854ed0e50;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a2f4b36c75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1992 identity=37405 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=011bbb2e-d2af-4cfe-bdf9-ef2854ed0e50,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=011bbb2e-d2af-4cfe-bdf9-ef2854ed0e50,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-db-sync-gck6f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a2f4b36c75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1992 identity=37405 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-db-sync-gck6f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a2f4b36c75 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1992 identity=37405 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-db-sync-gck6f subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2f4b36c75 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1992 identity=37405 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-db-sync-gck6f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a2f4b36c75 endpointID=1992 k8sNamespace=openstack k8sPodName=glance-db-sync-gck6f subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=011bbb2e-d2af-4cfe-bdf9-ef2854ed0e50 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=011bbb2e-d2af-4cfe-bdf9-ef2854ed0e50 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a2f4b36c75 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1992 identity=37405 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-db-sync-gck6f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 46a92819-c402-40ab-bb51-9c7142ce5b3c default }" containerID=0ac70868fab2c4faec4b0c2a9562d45d20f2d851062d7fd9d5703597e7b6dd09 datapathConfiguration="&{false false false false false }" interface=lxc7a5c0bbc626d k8sPodName=openstack/glance-rabbit-init-67v9j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ac70868fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1408 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-rabbit-init-67v9j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ac70868fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1408 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=584b5d54-88ff-4184-9bd9-84c7cc0007ae,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=584b5d54-88ff-4184-9bd9-84c7cc0007ae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-rabbit-init-67v9j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=584b5d54-88ff-4184-9bd9-84c7cc0007ae;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=584b5d54-88ff-4184-9bd9-84c7cc0007ae;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0ac70868fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1408 identity=15721 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=584b5d54-88ff-4184-9bd9-84c7cc0007ae,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=584b5d54-88ff-4184-9bd9-84c7cc0007ae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-rabbit-init-67v9j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ac70868fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1408 identity=15721 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-rabbit-init-67v9j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0ac70868fa datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1408 identity=15721 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-rabbit-init-67v9j subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ac70868fa datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1408 identity=15721 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-rabbit-init-67v9j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0ac70868fa endpointID=1408 k8sNamespace=openstack k8sPodName=glance-rabbit-init-67v9j subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=584b5d54-88ff-4184-9bd9-84c7cc0007ae k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=584b5d54-88ff-4184-9bd9-84c7cc0007ae k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0ac70868fa datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1408 identity=15721 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-rabbit-init-67v9j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 cfcb996b-5f58-42c4-baed-0ce9984c85be default }" containerID=cf8a875506d06c99ce6f3af3e29512c2bef04cd65ff2d4ee6cd77999c861f52f datapathConfiguration="&{false false false false false }" interface=lxc4db183b4fbc7 k8sPodName=openstack/glance-ks-service-lm5bf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf8a875506 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-ks-service-lm5bf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf8a875506 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c3e92f52-2685-49bb-8193-918dc62f0186,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=c3e92f52-2685-49bb-8193-918dc62f0186,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-ks-service-lm5bf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c3e92f52-2685-49bb-8193-918dc62f0186;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=c3e92f52-2685-49bb-8193-918dc62f0186;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cf8a875506 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 identity=45379 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c3e92f52-2685-49bb-8193-918dc62f0186,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=c3e92f52-2685-49bb-8193-918dc62f0186,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-ks-service-lm5bf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cf8a875506 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 identity=45379 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-ks-service-lm5bf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cf8a875506 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=454 identity=45379 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-ks-service-lm5bf subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf8a875506 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=454 identity=45379 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-ks-service-lm5bf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.37 0a64a404-2f61-43de-ad2d-6ac65d464de5 default }" containerID=f6b28caedb8ab4c2e4c07a4e72b2c6d1f69a3c461760a9460ee50b22bd58bc00 datapathConfiguration="&{false false false false false }" interface=lxc40178c5d1491 k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-2x6ff labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f6b28caedb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2507 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-2x6ff subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f6b28caedb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2507 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-2x6ff subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f6b28caedb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2507 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-2x6ff line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f6b28caedb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2507 identity=14772 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-2x6ff oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f6b28caedb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2507 identity=14772 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-2x6ff subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 0cc7e220-0917-4a14-a83d-86eeed003cb0 default }" containerID=7290de825b4827a8d60c9833a97a6a0b356e261699457910339595e4aa52ccd4 datapathConfiguration="&{false false false false false }" interface=lxc9199c02f647e k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-t5q6v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7290de825b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=404 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-t5q6v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7290de825b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=404 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-t5q6v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.1-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7290de825b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=404 identity=34546 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-t5q6v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7290de825b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=404 identity=34546 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-t5q6v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f6b28caedb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2507 identity=14772 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-2x6ff subsys=endpoint level=info msg="Successful endpoint creation" containerID=f6b28caedb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2507 identity=14772 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-2x6ff subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7290de825b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=404 identity=34546 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-t5q6v subsys=endpoint level=info msg="Successful endpoint creation" containerID=7290de825b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=404 identity=34546 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-t5q6v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cf8a875506 endpointID=454 k8sNamespace=openstack k8sPodName=glance-ks-service-lm5bf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c3e92f52-2685-49bb-8193-918dc62f0186 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=c3e92f52-2685-49bb-8193-918dc62f0186 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=cf8a875506 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=454 identity=45379 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-ks-service-lm5bf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 e0586869-57a3-4ca2-b728-a808edac0bbb default }" containerID=872158460c4d7e9532a8ff7b739686c192609a1f545cafcefa3ccf51a81e9f98 datapathConfiguration="&{false false false false false }" interface=lxc6f6caa14a312 k8sPodName=openstack/glance-ks-endpoints-wqnx9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=872158460c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1634 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-ks-endpoints-wqnx9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=872158460c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1634 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ab6f01e8-0d9f-4af1-9b1f-23beaae90240,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=ab6f01e8-0d9f-4af1-9b1f-23beaae90240,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-ks-endpoints-wqnx9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ab6f01e8-0d9f-4af1-9b1f-23beaae90240;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=ab6f01e8-0d9f-4af1-9b1f-23beaae90240;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=872158460c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1634 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-ks-endpoints-wqnx9 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=872158460c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1634 identity=30496 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ab6f01e8-0d9f-4af1-9b1f-23beaae90240,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=ab6f01e8-0d9f-4af1-9b1f-23beaae90240,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-ks-endpoints-wqnx9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=872158460c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1634 identity=30496 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-ks-endpoints-wqnx9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=872158460c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1634 identity=30496 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-ks-endpoints-wqnx9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=872158460c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1634 identity=30496 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-ks-endpoints-wqnx9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.44 8978567c-55bc-4d70-a14f-58c1a798809d default }" containerID=9f7326c30b64876e40d35f0d20117908621d5d772a163cabd6478177473d4eb7 datapathConfiguration="&{false false false false false }" interface=lxc46024ef8c1db k8sPodName=openstack/ceph-object-controller-detect-version-cnj2c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f7326c30b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1306 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-cnj2c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f7326c30b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1306 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=af4e2762-7e92-46ed-a42e-a277fb51dfcb,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=af4e2762-7e92-46ed-a42e-a277fb51dfcb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-cnj2c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=af4e2762-7e92-46ed-a42e-a277fb51dfcb;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=af4e2762-7e92-46ed-a42e-a277fb51dfcb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f7326c30b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1306 identity=25969 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=af4e2762-7e92-46ed-a42e-a277fb51dfcb,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=af4e2762-7e92-46ed-a42e-a277fb51dfcb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-cnj2c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f7326c30b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1306 identity=25969 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-cnj2c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9f7326c30b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1306 identity=25969 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-cnj2c subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f7326c30b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1306 identity=25969 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-cnj2c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=872158460c endpointID=1634 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-wqnx9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ab6f01e8-0d9f-4af1-9b1f-23beaae90240 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=ab6f01e8-0d9f-4af1-9b1f-23beaae90240 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=872158460c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1634 identity=30496 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-ks-endpoints-wqnx9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.24 2383b217-cd05-4a6c-aa23-f629808290c4 default }" containerID=a7cee43c4035632949236b754815820ec35fa9e6452a9dd28fbf0c0a56183d2a datapathConfiguration="&{false false false false false }" interface=lxc83b97edb2b8c k8sPodName=openstack/glance-ks-user-4g7cj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a7cee43c40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-ks-user-4g7cj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a7cee43c40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bd13793f-c456-4f07-857c-ccf0cfe8fd78,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=bd13793f-c456-4f07-857c-ccf0cfe8fd78,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-ks-user-4g7cj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a7cee43c40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-ks-user-4g7cj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=bd13793f-c456-4f07-857c-ccf0cfe8fd78;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=bd13793f-c456-4f07-857c-ccf0cfe8fd78;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a7cee43c40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 identity=21951 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bd13793f-c456-4f07-857c-ccf0cfe8fd78,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=bd13793f-c456-4f07-857c-ccf0cfe8fd78,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-ks-user-4g7cj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a7cee43c40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 identity=21951 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-ks-user-4g7cj subsys=endpoint level=info msg="Delete endpoint request" containerID=9f7326c30b endpointID=1306 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-cnj2c subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=af4e2762-7e92-46ed-a42e-a277fb51dfcb k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=af4e2762-7e92-46ed-a42e-a277fb51dfcb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=9f7326c30b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1306 identity=25969 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-cnj2c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a7cee43c40 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=937 identity=21951 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-ks-user-4g7cj subsys=endpoint level=info msg="Successful endpoint creation" containerID=a7cee43c40 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=937 identity=21951 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-ks-user-4g7cj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a7cee43c40 endpointID=937 k8sNamespace=openstack k8sPodName=glance-ks-user-4g7cj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=bd13793f-c456-4f07-857c-ccf0cfe8fd78 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=bd13793f-c456-4f07-857c-ccf0cfe8fd78 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a7cee43c40 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=937 identity=21951 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-ks-user-4g7cj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 d538db8c-0273-4c85-8caa-cfabca85b8d6 default }" containerID=c0be098cf75e0fb7e9db311eae2a43f393c9fadf11d0bda1581f214d42163c33 datapathConfiguration="&{false false false false false }" interface=lxc24714b4c4abb k8sPodName=openstack/glance-metadefs-load-xtvqm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0be098cf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2910 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-metadefs-load-xtvqm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0be098cf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2910 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c5c2f9c0-9b30-4055-8950-678f3678a124,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=c5c2f9c0-9b30-4055-8950-678f3678a124,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-metadefs-load-xtvqm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c5c2f9c0-9b30-4055-8950-678f3678a124;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=c5c2f9c0-9b30-4055-8950-678f3678a124;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c0be098cf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2910 identity=34676 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c5c2f9c0-9b30-4055-8950-678f3678a124,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=c5c2f9c0-9b30-4055-8950-678f3678a124,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-metadefs-load-xtvqm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c0be098cf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2910 identity=34676 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-metadefs-load-xtvqm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c0be098cf7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2910 identity=34676 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-metadefs-load-xtvqm subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0be098cf7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2910 identity=34676 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-metadefs-load-xtvqm subsys=daemon level=info msg="Delete endpoint request" containerID=c0be098cf7 endpointID=2910 k8sNamespace=openstack k8sPodName=glance-metadefs-load-xtvqm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c5c2f9c0-9b30-4055-8950-678f3678a124 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=c5c2f9c0-9b30-4055-8950-678f3678a124 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c0be098cf7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2910 identity=34676 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-metadefs-load-xtvqm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 75e43da7-d564-488a-ae11-cbf52a61b1ec default }" containerID=831c5fae76c9d4a39a995019c598c05447ebec3c553dc63a097cd9af4b1791fe datapathConfiguration="&{false false false false false }" interface=lxcc93fa46c7482 k8sPodName=openstack/glance-storage-init-jsmmc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=831c5fae76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-storage-init-jsmmc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=831c5fae76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1fea27bf-3412-4010-b9db-880ce7b4a8a3,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=1fea27bf-3412-4010-b9db-880ce7b4a8a3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-storage-init-jsmmc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1fea27bf-3412-4010-b9db-880ce7b4a8a3;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=1fea27bf-3412-4010-b9db-880ce7b4a8a3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=831c5fae76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 identity=34529 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1fea27bf-3412-4010-b9db-880ce7b4a8a3,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=1fea27bf-3412-4010-b9db-880ce7b4a8a3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-storage-init-jsmmc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=831c5fae76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 identity=34529 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-storage-init-jsmmc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=831c5fae76 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=327 identity=34529 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-storage-init-jsmmc subsys=endpoint level=info msg="Successful endpoint creation" containerID=831c5fae76 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=327 identity=34529 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-storage-init-jsmmc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=831c5fae76 endpointID=327 k8sNamespace=openstack k8sPodName=glance-storage-init-jsmmc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1fea27bf-3412-4010-b9db-880ce7b4a8a3 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=1fea27bf-3412-4010-b9db-880ce7b4a8a3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=831c5fae76 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=327 identity=34529 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-storage-init-jsmmc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 076735c6-d826-4f83-ac27-ac1491b1faab default }" containerID=f6288ecb4d07efeead727a0f6870dd1cba4228b12f0b33e3cd0dfc97cc06f83e datapathConfiguration="&{false false false false false }" interface=lxc61bc0980fa1c k8sPodName=openstack/glance-api-5cffff76cb-9vlm8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f6288ecb4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1335 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-api-5cffff76cb-9vlm8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f6288ecb4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1335 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-api-5cffff76cb-9vlm8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f6288ecb4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1335 identity=16993 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-api-5cffff76cb-9vlm8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f6288ecb4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1335 identity=16993 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-api-5cffff76cb-9vlm8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f6288ecb4d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1335 identity=16993 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-api-5cffff76cb-9vlm8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f6288ecb4d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1335 identity=16993 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-api-5cffff76cb-9vlm8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.122 e2c4e0af-9164-4076-90af-df4190ec7524 default }" containerID=fa9288a2ca7ee73483b99c0c71fc14f1deccc3a7d900c700d1bbd4200a0bc38d datapathConfiguration="&{false false false false false }" interface=lxc6c69b0e8fe74 k8sPodName=openstack/staffeln-conductor-7584c4f87f-c2mgj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa9288a2ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/staffeln-conductor-7584c4f87f-c2mgj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa9288a2ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/staffeln-conductor-7584c4f87f-c2mgj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.123 c94f04e6-fc25-41ca-b5d0-23833172fbe1 default }" containerID=fb0e1b86c48c63d03d197a8bdf2e8c06ae8e5fd5e64f4ba190f59686f855b06b datapathConfiguration="&{false false false false false }" interface=lxc9dba648ea119 k8sPodName=openstack/staffeln-api-66c978f784-j7tkg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb0e1b86c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/staffeln-api-66c978f784-j7tkg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb0e1b86c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/staffeln-api-66c978f784-j7tkg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fa9288a2ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.122 ipv6= k8sPodName=openstack/staffeln-conductor-7584c4f87f-c2mgj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa9288a2ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identity=3656 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/staffeln-conductor-7584c4f87f-c2mgj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa9288a2ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identity=3656 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/staffeln-conductor-7584c4f87f-c2mgj subsys=endpoint level=info msg="Invalid state transition skipped" containerID=fb0e1b86c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.123 ipv6= k8sPodName=openstack/staffeln-api-66c978f784-j7tkg line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb0e1b86c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 identity=29357 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/staffeln-api-66c978f784-j7tkg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fb0e1b86c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 identity=29357 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/staffeln-api-66c978f784-j7tkg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 64411250-9e1d-46e6-8e9c-fb9de8b5a7da default }" containerID=86417d9fe810612d5c85b038cc6d699d867bc2174adf6f7fd22465b92c9d74b7 datapathConfiguration="&{false false false false false }" interface=lxc257fb4b0637f k8sPodName=openstack/staffeln-db-init-rzzhd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=86417d9fe8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=574 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/staffeln-db-init-rzzhd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=86417d9fe8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=574 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=eba8aad7-fb19-4a1c-b758-973685b8b43c,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=eba8aad7-fb19-4a1c-b758-973685b8b43c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/staffeln-db-init-rzzhd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=eba8aad7-fb19-4a1c-b758-973685b8b43c;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=eba8aad7-fb19-4a1c-b758-973685b8b43c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=86417d9fe8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=574 identity=34611 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=eba8aad7-fb19-4a1c-b758-973685b8b43c,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=eba8aad7-fb19-4a1c-b758-973685b8b43c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/staffeln-db-init-rzzhd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=86417d9fe8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=574 identity=34611 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/staffeln-db-init-rzzhd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fb0e1b86c4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=481 identity=29357 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/staffeln-api-66c978f784-j7tkg subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb0e1b86c4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=481 identity=29357 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/staffeln-api-66c978f784-j7tkg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fa9288a2ca datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=46 identity=3656 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/staffeln-conductor-7584c4f87f-c2mgj subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa9288a2ca datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=46 identity=3656 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/staffeln-conductor-7584c4f87f-c2mgj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=86417d9fe8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=574 identity=34611 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/staffeln-db-init-rzzhd subsys=endpoint level=info msg="Successful endpoint creation" containerID=86417d9fe8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=574 identity=34611 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/staffeln-db-init-rzzhd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=86417d9fe8 endpointID=574 k8sNamespace=openstack k8sPodName=staffeln-db-init-rzzhd subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=eba8aad7-fb19-4a1c-b758-973685b8b43c k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=eba8aad7-fb19-4a1c-b758-973685b8b43c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=86417d9fe8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=574 identity=34611 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/staffeln-db-init-rzzhd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 87f1beee-69e1-41b5-99c2-0918403feff7 default }" containerID=65f2014076575b9f5c046ecfaf6b642e563208b1ca9949292957b9cab9280850 datapathConfiguration="&{false false false false false }" interface=lxc6f6b2012b9cd k8sPodName=openstack/staffeln-db-sync-42pj4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65f2014076 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/staffeln-db-sync-42pj4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65f2014076 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=5e983ff4-8d12-4309-b5cd-24bab59ab529,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=5e983ff4-8d12-4309-b5cd-24bab59ab529,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/staffeln-db-sync-42pj4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=5e983ff4-8d12-4309-b5cd-24bab59ab529;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=5e983ff4-8d12-4309-b5cd-24bab59ab529;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=65f2014076 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 identity=531 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=5e983ff4-8d12-4309-b5cd-24bab59ab529,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=5e983ff4-8d12-4309-b5cd-24bab59ab529,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/staffeln-db-sync-42pj4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=65f2014076 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 identity=531 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/staffeln-db-sync-42pj4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=65f2014076 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1075 identity=531 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/staffeln-db-sync-42pj4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=65f2014076 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1075 identity=531 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/staffeln-db-sync-42pj4 subsys=daemon level=info msg="Delete endpoint request" containerID=65f2014076 endpointID=1075 k8sNamespace=openstack k8sPodName=staffeln-db-sync-42pj4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=5e983ff4-8d12-4309-b5cd-24bab59ab529 k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=5e983ff4-8d12-4309-b5cd-24bab59ab529 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=65f2014076 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1075 identity=531 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/staffeln-db-sync-42pj4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 76d1b31b-605f-46b8-bc58-05d22880dcba default }" containerID=42c802c3d80d4a383d08ad5d0a164940893f7b3211beecf707661307786167de datapathConfiguration="&{false false false false false }" interface=lxcfde5ad72af77 k8sPodName=local-path-storage/helper-pod-create-pvc-7b7863f5-4fed-4345-ae32-a4faff4eb274 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=42c802c3d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7b7863f5-4fed-4345-ae32-a4faff4eb274 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=42c802c3d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7b7863f5-4fed-4345-ae32-a4faff4eb274 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=42c802c3d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 identity=25616 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7b7863f5-4fed-4345-ae32-a4faff4eb274 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=42c802c3d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 identity=25616 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7b7863f5-4fed-4345-ae32-a4faff4eb274 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=42c802c3d8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=491 identity=25616 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7b7863f5-4fed-4345-ae32-a4faff4eb274 subsys=endpoint level=info msg="Successful endpoint creation" containerID=42c802c3d8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=491 identity=25616 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7b7863f5-4fed-4345-ae32-a4faff4eb274 subsys=daemon level=info msg="Delete endpoint request" containerID=42c802c3d8 endpointID=491 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-7b7863f5-4fed-4345-ae32-a4faff4eb274 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=42c802c3d8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=491 identity=25616 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7b7863f5-4fed-4345-ae32-a4faff4eb274 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 6fb82c29-7596-4901-ae00-7786ec75243a default }" containerID=4dfb75bc31613dd075dcc32b8b433df61c8e107f16ac371e7354ca4cd874a142 datapathConfiguration="&{false false false false false }" interface=lxc9afd8be36215 k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4dfb75bc31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4dfb75bc31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4dfb75bc31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 identity=3148 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4dfb75bc31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 identity=3148 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4dfb75bc31 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=526 identity=3148 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4dfb75bc31 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=526 identity=3148 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.149 7a3844bc-a0c6-4628-995c-3306cfeb0c6a default }" containerID=b099f7cdadade3f17f634de94ce21163a31027c196ba82ef0f361527a923fbd6 datapathConfiguration="&{false false false false false }" interface=lxc5cac094955d5 k8sPodName=openstack/cinder-scheduler-798595fdc9-n45z6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b099f7cdad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=892 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/cinder-scheduler-798595fdc9-n45z6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b099f7cdad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=892 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/cinder-scheduler-798595fdc9-n45z6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b099f7cdad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=892 identity=30837 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/cinder-scheduler-798595fdc9-n45z6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b099f7cdad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=892 identity=30837 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/cinder-scheduler-798595fdc9-n45z6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.140 06d71d46-d832-47b2-afc7-07a2119de527 default }" containerID=24545bce536584cac2c8ed07697db60079d142ac9673823127c6d37dd9b3a247 datapathConfiguration="&{false false false false false }" interface=lxce93a0390e1f8 k8sPodName=openstack/cinder-api-8495cb8d6b-pzcrg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=24545bce53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1442 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/cinder-api-8495cb8d6b-pzcrg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=24545bce53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1442 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/cinder-api-8495cb8d6b-pzcrg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=24545bce53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1442 identity=49735 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/cinder-api-8495cb8d6b-pzcrg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=24545bce53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1442 identity=49735 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/cinder-api-8495cb8d6b-pzcrg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b099f7cdad datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=892 identity=30837 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/cinder-scheduler-798595fdc9-n45z6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b099f7cdad datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=892 identity=30837 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/cinder-scheduler-798595fdc9-n45z6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.142 a6e43fb8-f098-41b9-a20f-e54922b54571 default }" containerID=9708257efeeac9e5d2edef160b32b4709c1b86665f03053cfaf914d0eb115b4a datapathConfiguration="&{false false false false false }" interface=lxca674964ad955 k8sPodName=openstack/cinder-db-init-m4fmf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9708257efe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-db-init-m4fmf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9708257efe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1385cb55-0eee-42c8-a58e-423f74d7519a,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=1385cb55-0eee-42c8-a58e-423f74d7519a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-db-init-m4fmf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=1385cb55-0eee-42c8-a58e-423f74d7519a;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=1385cb55-0eee-42c8-a58e-423f74d7519a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9708257efe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identity=64120 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1385cb55-0eee-42c8-a58e-423f74d7519a,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=1385cb55-0eee-42c8-a58e-423f74d7519a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-db-init-m4fmf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9708257efe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identity=64120 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-db-init-m4fmf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=24545bce53 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1442 identity=49735 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/cinder-api-8495cb8d6b-pzcrg subsys=endpoint level=info msg="Successful endpoint creation" containerID=24545bce53 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1442 identity=49735 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/cinder-api-8495cb8d6b-pzcrg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9708257efe datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=555 identity=64120 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-db-init-m4fmf subsys=endpoint level=info msg="Successful endpoint creation" containerID=9708257efe datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=555 identity=64120 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-db-init-m4fmf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9708257efe endpointID=555 k8sNamespace=openstack k8sPodName=cinder-db-init-m4fmf subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=1385cb55-0eee-42c8-a58e-423f74d7519a k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=1385cb55-0eee-42c8-a58e-423f74d7519a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=9708257efe datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=555 identity=64120 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-db-init-m4fmf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 63582972-b75d-4d9e-87d9-c09718ddc493 default }" containerID=440bddef0a118471404a07aebfa2517790dcfee84795a39d50daf24ba8346727 datapathConfiguration="&{false false false false false }" interface=lxc86780480969a k8sPodName=openstack/cinder-db-sync-ztfkr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=440bddef0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2232 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/cinder-db-sync-ztfkr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=440bddef0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2232 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=39b29967-e388-41f2-9a53-f9e7a26ef445,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=39b29967-e388-41f2-9a53-f9e7a26ef445,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/cinder-db-sync-ztfkr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=39b29967-e388-41f2-9a53-f9e7a26ef445;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=39b29967-e388-41f2-9a53-f9e7a26ef445;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=440bddef0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2232 identity=4853 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=39b29967-e388-41f2-9a53-f9e7a26ef445,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=39b29967-e388-41f2-9a53-f9e7a26ef445,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/cinder-db-sync-ztfkr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=440bddef0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2232 identity=4853 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/cinder-db-sync-ztfkr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=440bddef0a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2232 identity=4853 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/cinder-db-sync-ztfkr subsys=endpoint level=info msg="Successful endpoint creation" containerID=440bddef0a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2232 identity=4853 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/cinder-db-sync-ztfkr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=440bddef0a endpointID=2232 k8sNamespace=openstack k8sPodName=cinder-db-sync-ztfkr subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=39b29967-e388-41f2-9a53-f9e7a26ef445 k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=39b29967-e388-41f2-9a53-f9e7a26ef445 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=440bddef0a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2232 identity=4853 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/cinder-db-sync-ztfkr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 52c32379-6b59-4290-b84b-98f701ac2619 default }" containerID=09b95ac979ef1356baba6fcfe6d342a9e256578595640c7ecf8c3d65a08a00fc datapathConfiguration="&{false false false false false }" interface=lxc7557684597ec k8sPodName=openstack/cinder-rabbit-init-82wb6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=09b95ac979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=598 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/cinder-rabbit-init-82wb6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=09b95ac979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=598 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=99de6369-c3cb-41e7-9ae6-ae7a0fa378e1,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=99de6369-c3cb-41e7-9ae6-ae7a0fa378e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/cinder-rabbit-init-82wb6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=99de6369-c3cb-41e7-9ae6-ae7a0fa378e1;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=99de6369-c3cb-41e7-9ae6-ae7a0fa378e1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=09b95ac979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=598 identity=7114 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=99de6369-c3cb-41e7-9ae6-ae7a0fa378e1,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=99de6369-c3cb-41e7-9ae6-ae7a0fa378e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/cinder-rabbit-init-82wb6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=09b95ac979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=598 identity=7114 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/cinder-rabbit-init-82wb6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=09b95ac979 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=598 identity=7114 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/cinder-rabbit-init-82wb6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=09b95ac979 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=598 identity=7114 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/cinder-rabbit-init-82wb6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=09b95ac979 endpointID=598 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-82wb6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=99de6369-c3cb-41e7-9ae6-ae7a0fa378e1 k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=99de6369-c3cb-41e7-9ae6-ae7a0fa378e1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=09b95ac979 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=598 identity=7114 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/cinder-rabbit-init-82wb6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 c547f13b-6ee6-45be-b6ad-cb90f404530e default }" containerID=ee7c1b4c156b6eb6f16cc3136506f9e8d0a55f07620af540b28838e5776a851c datapathConfiguration="&{false false false false false }" interface=lxc80ae2c180711 k8sPodName=openstack/cinder-ks-service-4452c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee7c1b4c15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1066 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/cinder-ks-service-4452c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee7c1b4c15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1066 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=53140850-81a7-4584-b636-3123b813831f,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=53140850-81a7-4584-b636-3123b813831f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/cinder-ks-service-4452c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ee7c1b4c15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1066 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.58 ipv6= k8sPodName=openstack/cinder-ks-service-4452c line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=53140850-81a7-4584-b636-3123b813831f;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=53140850-81a7-4584-b636-3123b813831f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee7c1b4c15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1066 identity=21983 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=53140850-81a7-4584-b636-3123b813831f,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=53140850-81a7-4584-b636-3123b813831f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/cinder-ks-service-4452c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee7c1b4c15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1066 identity=21983 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/cinder-ks-service-4452c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ee7c1b4c15 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1066 identity=21983 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/cinder-ks-service-4452c subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee7c1b4c15 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1066 identity=21983 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/cinder-ks-service-4452c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ee7c1b4c15 endpointID=1066 k8sNamespace=openstack k8sPodName=cinder-ks-service-4452c subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=53140850-81a7-4584-b636-3123b813831f k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=53140850-81a7-4584-b636-3123b813831f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=ee7c1b4c15 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1066 identity=21983 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/cinder-ks-service-4452c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 5916da11-309d-4b84-a119-8f435411c497 default }" containerID=df20ca24cc499491b4501bea8e636fceab058769b6d84da73625524540d6864d datapathConfiguration="&{false false false false false }" interface=lxc9d05f56e91cf k8sPodName=openstack/cinder-ks-endpoints-ckhhz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df20ca24cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2837 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/cinder-ks-endpoints-ckhhz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df20ca24cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2837 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=4b48a224-7e78-4476-8032-80f1228c748a,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=4b48a224-7e78-4476-8032-80f1228c748a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/cinder-ks-endpoints-ckhhz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=df20ca24cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2837 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.92 ipv6= k8sPodName=openstack/cinder-ks-endpoints-ckhhz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=4b48a224-7e78-4476-8032-80f1228c748a;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=4b48a224-7e78-4476-8032-80f1228c748a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df20ca24cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2837 identity=18160 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=4b48a224-7e78-4476-8032-80f1228c748a,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=4b48a224-7e78-4476-8032-80f1228c748a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/cinder-ks-endpoints-ckhhz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df20ca24cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2837 identity=18160 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/cinder-ks-endpoints-ckhhz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df20ca24cc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2837 identity=18160 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/cinder-ks-endpoints-ckhhz subsys=endpoint level=info msg="Successful endpoint creation" containerID=df20ca24cc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2837 identity=18160 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/cinder-ks-endpoints-ckhhz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=df20ca24cc endpointID=2837 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-ckhhz subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=4b48a224-7e78-4476-8032-80f1228c748a k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=4b48a224-7e78-4476-8032-80f1228c748a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=df20ca24cc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2837 identity=18160 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/cinder-ks-endpoints-ckhhz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 b4edea07-e019-4a6c-a3d7-03be7a96c8ea default }" containerID=610b850104b1bd6bdf32478114391030b652be1757d7a0aa0b694cf3e441eef9 datapathConfiguration="&{false false false false false }" interface=lxcd1ef70519c79 k8sPodName=openstack/cinder-ks-user-l5dpr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=610b850104 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/cinder-ks-user-l5dpr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=610b850104 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=65286088-ffcc-4be5-bd54-cd3661fe4ab7,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=65286088-ffcc-4be5-bd54-cd3661fe4ab7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/cinder-ks-user-l5dpr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=65286088-ffcc-4be5-bd54-cd3661fe4ab7;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=65286088-ffcc-4be5-bd54-cd3661fe4ab7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=610b850104 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 identity=32812 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=65286088-ffcc-4be5-bd54-cd3661fe4ab7,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=65286088-ffcc-4be5-bd54-cd3661fe4ab7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/cinder-ks-user-l5dpr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=610b850104 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 identity=32812 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/cinder-ks-user-l5dpr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=610b850104 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=874 identity=32812 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/cinder-ks-user-l5dpr subsys=endpoint level=info msg="Successful endpoint creation" containerID=610b850104 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=874 identity=32812 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/cinder-ks-user-l5dpr subsys=daemon level=info msg="Delete endpoint request" containerID=610b850104 endpointID=874 k8sNamespace=openstack k8sPodName=cinder-ks-user-l5dpr subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=65286088-ffcc-4be5-bd54-cd3661fe4ab7 k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=65286088-ffcc-4be5-bd54-cd3661fe4ab7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=610b850104 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=874 identity=32812 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/cinder-ks-user-l5dpr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 1f7d1a35-50ff-4e5a-9e24-fa64614d599a default }" containerID=bca8c67a121c965318d413327840bc1bec37b363c7328bb90eb92eae57052693 datapathConfiguration="&{false false false false false }" interface=lxc56c8d7b7bef5 k8sPodName=openstack/cinder-backup-storage-init-hpbv6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bca8c67a12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-backup-storage-init-hpbv6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bca8c67a12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=51ed88c1-1429-45f1-a1f2-4a23cfc13635,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=51ed88c1-1429-45f1-a1f2-4a23cfc13635,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-backup-storage-init-hpbv6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=51ed88c1-1429-45f1-a1f2-4a23cfc13635;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=51ed88c1-1429-45f1-a1f2-4a23cfc13635;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bca8c67a12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 identity=13555 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=51ed88c1-1429-45f1-a1f2-4a23cfc13635,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=51ed88c1-1429-45f1-a1f2-4a23cfc13635,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-backup-storage-init-hpbv6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=bca8c67a12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 identity=13555 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-backup-storage-init-hpbv6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bca8c67a12 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1868 identity=13555 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-backup-storage-init-hpbv6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bca8c67a12 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1868 identity=13555 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-backup-storage-init-hpbv6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bca8c67a12 endpointID=1868 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-hpbv6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=51ed88c1-1429-45f1-a1f2-4a23cfc13635 k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=51ed88c1-1429-45f1-a1f2-4a23cfc13635 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=bca8c67a12 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1868 identity=13555 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-backup-storage-init-hpbv6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 216f3a0e-ca7a-458d-8715-59a28b8eb612 default }" containerID=752ace9abf11a60308c9dd61a1d6c340650d4257770fece94e52ed2c8a12cf58 datapathConfiguration="&{false false false false false }" interface=lxc09ea8429aaae k8sPodName=openstack/cinder-create-internal-tenant-wh7cq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=752ace9abf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2913 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-wh7cq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=752ace9abf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2913 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e16d592f-334b-472e-afde-b8fa924a15d7,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=e16d592f-334b-472e-afde-b8fa924a15d7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-wh7cq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=e16d592f-334b-472e-afde-b8fa924a15d7;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=e16d592f-334b-472e-afde-b8fa924a15d7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=752ace9abf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2913 identity=43812 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e16d592f-334b-472e-afde-b8fa924a15d7,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=e16d592f-334b-472e-afde-b8fa924a15d7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-wh7cq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=752ace9abf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2913 identity=43812 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-wh7cq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=752ace9abf datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2913 identity=43812 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-wh7cq subsys=endpoint level=info msg="Successful endpoint creation" containerID=752ace9abf datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2913 identity=43812 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-wh7cq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=752ace9abf endpointID=2913 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-wh7cq subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=e16d592f-334b-472e-afde-b8fa924a15d7 k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=e16d592f-334b-472e-afde-b8fa924a15d7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=752ace9abf datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2913 identity=43812 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-wh7cq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 3dd98ef6-cc39-4793-bc87-2199c2cf5b1a default }" containerID=44cbf20af86256181c07ed3ea1c12dbfff895fc2de141b02ac2f783149597d73 datapathConfiguration="&{false false false false false }" interface=lxcc754f02e4f7b k8sPodName=openstack/cinder-storage-init-xj9gn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44cbf20af8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2866 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/cinder-storage-init-xj9gn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44cbf20af8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2866 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=da135a44-8314-4da2-9c07-e789a60689f2,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=da135a44-8314-4da2-9c07-e789a60689f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/cinder-storage-init-xj9gn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=da135a44-8314-4da2-9c07-e789a60689f2;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=da135a44-8314-4da2-9c07-e789a60689f2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44cbf20af8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2866 identity=63013 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=da135a44-8314-4da2-9c07-e789a60689f2,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=da135a44-8314-4da2-9c07-e789a60689f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/cinder-storage-init-xj9gn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=44cbf20af8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2866 identity=63013 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/cinder-storage-init-xj9gn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=44cbf20af8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2866 identity=63013 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/cinder-storage-init-xj9gn subsys=endpoint level=info msg="Successful endpoint creation" containerID=44cbf20af8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2866 identity=63013 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/cinder-storage-init-xj9gn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=44cbf20af8 endpointID=2866 k8sNamespace=openstack k8sPodName=cinder-storage-init-xj9gn subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=da135a44-8314-4da2-9c07-e789a60689f2 k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=da135a44-8314-4da2-9c07-e789a60689f2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=44cbf20af8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2866 identity=63013 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/cinder-storage-init-xj9gn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 a45a0b99-891d-41ca-999c-7ec4c8a2696f default }" containerID=8414c996933a1fb64f48d5bf04c917a13b5628a05ff9b27b0ea095f74077743c datapathConfiguration="&{false false false false false }" interface=lxc418f26691ea6 k8sPodName=openstack/cinder-bootstrap-nwgpj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8414c99693 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2555 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/cinder-bootstrap-nwgpj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8414c99693 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2555 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e3b722b0-48c6-417c-a216-c9340d0ce354,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=e3b722b0-48c6-417c-a216-c9340d0ce354,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/cinder-bootstrap-nwgpj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=e3b722b0-48c6-417c-a216-c9340d0ce354;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=e3b722b0-48c6-417c-a216-c9340d0ce354;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=8414c99693 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2555 identity=43928 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e3b722b0-48c6-417c-a216-c9340d0ce354,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=e3b722b0-48c6-417c-a216-c9340d0ce354,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/cinder-bootstrap-nwgpj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8414c99693 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2555 identity=43928 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/cinder-bootstrap-nwgpj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8414c99693 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2555 identity=43928 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/cinder-bootstrap-nwgpj subsys=endpoint level=info msg="Successful endpoint creation" containerID=8414c99693 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2555 identity=43928 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/cinder-bootstrap-nwgpj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.190 861db728-b1bc-455b-acff-0d4ff284c231 default }" containerID=2d5076de309d66baefd68cbb08ee6eaa4650187f21be980b15001f2036f84974 datapathConfiguration="&{false false false false false }" interface=lxc29028c426806 k8sPodName=openstack/cinder-volume-58788f5989-pmz75 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d5076de30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=549 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-volume-58788f5989-pmz75 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d5076de30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=549 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-volume-58788f5989-pmz75 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2d5076de30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=549 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-volume-58788f5989-pmz75 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d5076de30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=549 identity=16462 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-volume-58788f5989-pmz75 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2d5076de30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=549 identity=16462 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-volume-58788f5989-pmz75 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 0fe4d2f9-2bdd-4819-9813-d86d6edb6d56 default }" containerID=14f80b39f1e9268bbe904dae078afb99d63a1d76afe45a17db4197ec8a269c2d datapathConfiguration="&{false false false false false }" interface=lxc1150e6fdb65c k8sPodName=openstack/cinder-backup-6dd999ff4f-xn2bm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=14f80b39f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/cinder-backup-6dd999ff4f-xn2bm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=14f80b39f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/cinder-backup-6dd999ff4f-xn2bm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=14f80b39f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 identity=39092 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/cinder-backup-6dd999ff4f-xn2bm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=14f80b39f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 identity=39092 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/cinder-backup-6dd999ff4f-xn2bm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2d5076de30 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=549 identity=16462 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-volume-58788f5989-pmz75 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d5076de30 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=549 identity=16462 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-volume-58788f5989-pmz75 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=14f80b39f1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=122 identity=39092 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/cinder-backup-6dd999ff4f-xn2bm subsys=endpoint level=info msg="Successful endpoint creation" containerID=14f80b39f1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=122 identity=39092 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/cinder-backup-6dd999ff4f-xn2bm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8414c99693 endpointID=2555 k8sNamespace=openstack k8sPodName=cinder-bootstrap-nwgpj subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=e3b722b0-48c6-417c-a216-c9340d0ce354 k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=e3b722b0-48c6-417c-a216-c9340d0ce354 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=8414c99693 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2555 identity=43928 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/cinder-bootstrap-nwgpj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 20453417-0852-4123-b0d8-01630716cb59 default }" containerID=ed1372b97d824ad90bd86f8e0f041800340f74cebbd0b23b4a2168d3570a32d0 datapathConfiguration="&{false false false false false }" interface=lxced303f33ad66 k8sPodName=openstack/placement-db-init-2z5jr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed1372b97d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1643 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/placement-db-init-2z5jr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed1372b97d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1643 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=62ef086e-fd96-4d70-a8ac-ed61e9181e93,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=62ef086e-fd96-4d70-a8ac-ed61e9181e93,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/placement-db-init-2z5jr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=62ef086e-fd96-4d70-a8ac-ed61e9181e93;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=62ef086e-fd96-4d70-a8ac-ed61e9181e93;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=ed1372b97d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1643 identity=31493 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=62ef086e-fd96-4d70-a8ac-ed61e9181e93,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=62ef086e-fd96-4d70-a8ac-ed61e9181e93,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/placement-db-init-2z5jr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed1372b97d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1643 identity=31493 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/placement-db-init-2z5jr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 25e47e05-510a-412c-871b-ada768033a48 default }" containerID=f5844c7d828ed3a2ac8fa05fc48d1352eae3a73aef0340f41b099ec96d387ecb datapathConfiguration="&{false false false false false }" interface=lxceff9d2edc99e k8sPodName=openstack/placement-api-54b5688654-5kplr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5844c7d82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=654 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/placement-api-54b5688654-5kplr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5844c7d82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=654 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/placement-api-54b5688654-5kplr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f5844c7d82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=654 identity=47777 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/placement-api-54b5688654-5kplr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f5844c7d82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=654 identity=47777 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/placement-api-54b5688654-5kplr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ed1372b97d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1643 identity=31493 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/placement-db-init-2z5jr subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed1372b97d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1643 identity=31493 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/placement-db-init-2z5jr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f5844c7d82 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=654 identity=47777 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/placement-api-54b5688654-5kplr subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5844c7d82 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=654 identity=47777 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/placement-api-54b5688654-5kplr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ed1372b97d endpointID=1643 k8sNamespace=openstack k8sPodName=placement-db-init-2z5jr subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=62ef086e-fd96-4d70-a8ac-ed61e9181e93 k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=62ef086e-fd96-4d70-a8ac-ed61e9181e93 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=ed1372b97d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1643 identity=31493 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/placement-db-init-2z5jr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.231 0ee9535b-a190-47cb-9992-227aaad58d8a default }" containerID=3e8bf8b9e767ddeb1f57afc445908ef4198fa854a0897de5a23ade8fa8be18c2 datapathConfiguration="&{false false false false false }" interface=lxc30a42c82725b k8sPodName=openstack/placement-db-sync-n7d44 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e8bf8b9e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1240 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/placement-db-sync-n7d44 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e8bf8b9e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1240 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=fba7ebbf-bf48-4ec6-9d17-46685d7272c4,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=fba7ebbf-bf48-4ec6-9d17-46685d7272c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/placement-db-sync-n7d44 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3e8bf8b9e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1240 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.231 ipv6= k8sPodName=openstack/placement-db-sync-n7d44 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=fba7ebbf-bf48-4ec6-9d17-46685d7272c4;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=fba7ebbf-bf48-4ec6-9d17-46685d7272c4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e8bf8b9e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1240 identity=51086 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=fba7ebbf-bf48-4ec6-9d17-46685d7272c4,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=fba7ebbf-bf48-4ec6-9d17-46685d7272c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/placement-db-sync-n7d44 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e8bf8b9e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1240 identity=51086 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/placement-db-sync-n7d44 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3e8bf8b9e7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1240 identity=51086 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/placement-db-sync-n7d44 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e8bf8b9e7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1240 identity=51086 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/placement-db-sync-n7d44 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3e8bf8b9e7 endpointID=1240 k8sNamespace=openstack k8sPodName=placement-db-sync-n7d44 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=fba7ebbf-bf48-4ec6-9d17-46685d7272c4 k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=fba7ebbf-bf48-4ec6-9d17-46685d7272c4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=3e8bf8b9e7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1240 identity=51086 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/placement-db-sync-n7d44 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 449a35f4-d6ff-444d-9aad-a4ce4d2fe66d default }" containerID=da3aff409050e2f739b9e79ff6ff1d081e5f298ed7fa5bc85528c7942e67f303 datapathConfiguration="&{false false false false false }" interface=lxc1a03da2ef0c2 k8sPodName=openstack/placement-ks-service-x5zs8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da3aff4090 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=539 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/placement-ks-service-x5zs8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da3aff4090 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=539 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=e8b77abe-d1bf-4662-8c9f-a6657aec48b6,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=e8b77abe-d1bf-4662-8c9f-a6657aec48b6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/placement-ks-service-x5zs8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=e8b77abe-d1bf-4662-8c9f-a6657aec48b6;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=e8b77abe-d1bf-4662-8c9f-a6657aec48b6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da3aff4090 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=539 identity=5665 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=e8b77abe-d1bf-4662-8c9f-a6657aec48b6,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=e8b77abe-d1bf-4662-8c9f-a6657aec48b6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/placement-ks-service-x5zs8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da3aff4090 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=539 identity=5665 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/placement-ks-service-x5zs8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=da3aff4090 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=539 identity=5665 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/placement-ks-service-x5zs8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=da3aff4090 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=539 identity=5665 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/placement-ks-service-x5zs8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=da3aff4090 endpointID=539 k8sNamespace=openstack k8sPodName=placement-ks-service-x5zs8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=e8b77abe-d1bf-4662-8c9f-a6657aec48b6 k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=e8b77abe-d1bf-4662-8c9f-a6657aec48b6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=da3aff4090 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=539 identity=5665 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/placement-ks-service-x5zs8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 d1ae9e49-db13-4537-9267-da07da68f403 default }" containerID=8935d9d7c14a5623af451b5fc406dfea8e3b2260dd1421d29ce192d61cfec164 datapathConfiguration="&{false false false false false }" interface=lxc3bc580e9a8a7 k8sPodName=openstack/placement-ks-user-l75fh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8935d9d7c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3515 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/placement-ks-user-l75fh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8935d9d7c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3515 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=985f98e8-a546-450d-8092-94c2cad3d21f,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=985f98e8-a546-450d-8092-94c2cad3d21f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/placement-ks-user-l75fh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8935d9d7c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3515 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.175 ipv6= k8sPodName=openstack/placement-ks-user-l75fh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=985f98e8-a546-450d-8092-94c2cad3d21f;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=985f98e8-a546-450d-8092-94c2cad3d21f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8935d9d7c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3515 identity=17191 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=985f98e8-a546-450d-8092-94c2cad3d21f,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=985f98e8-a546-450d-8092-94c2cad3d21f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/placement-ks-user-l75fh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8935d9d7c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3515 identity=17191 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/placement-ks-user-l75fh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8935d9d7c1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3515 identity=17191 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/placement-ks-user-l75fh subsys=endpoint level=info msg="Successful endpoint creation" containerID=8935d9d7c1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3515 identity=17191 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/placement-ks-user-l75fh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8935d9d7c1 endpointID=3515 k8sNamespace=openstack k8sPodName=placement-ks-user-l75fh subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=985f98e8-a546-450d-8092-94c2cad3d21f k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=985f98e8-a546-450d-8092-94c2cad3d21f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=8935d9d7c1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3515 identity=17191 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/placement-ks-user-l75fh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 93c84bc1-3d07-46aa-b7e7-dc606e0136f7 default }" containerID=f50a0defd06f58345682bcf13293ebf8324e87da273f9c6c328ede287fc2d366 datapathConfiguration="&{false false false false false }" interface=lxce2c07f064271 k8sPodName=openstack/placement-ks-endpoints-gsk8f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f50a0defd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1253 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/placement-ks-endpoints-gsk8f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f50a0defd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1253 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=4be0f104-7174-4e59-8e71-be819f25e033,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=4be0f104-7174-4e59-8e71-be819f25e033,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/placement-ks-endpoints-gsk8f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f50a0defd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1253 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.58 ipv6= k8sPodName=openstack/placement-ks-endpoints-gsk8f line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=4be0f104-7174-4e59-8e71-be819f25e033;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=4be0f104-7174-4e59-8e71-be819f25e033;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f50a0defd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1253 identity=31720 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=4be0f104-7174-4e59-8e71-be819f25e033,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=4be0f104-7174-4e59-8e71-be819f25e033,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/placement-ks-endpoints-gsk8f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f50a0defd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1253 identity=31720 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/placement-ks-endpoints-gsk8f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f50a0defd0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1253 identity=31720 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/placement-ks-endpoints-gsk8f subsys=endpoint level=info msg="Successful endpoint creation" containerID=f50a0defd0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1253 identity=31720 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/placement-ks-endpoints-gsk8f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f50a0defd0 endpointID=1253 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-gsk8f subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=4be0f104-7174-4e59-8e71-be819f25e033 k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=4be0f104-7174-4e59-8e71-be819f25e033 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=f50a0defd0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1253 identity=31720 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/placement-ks-endpoints-gsk8f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 01a684b1-ddd6-49ca-bb39-43c99749d060 default }" containerID=0e8df0d17cbb7006126d7c5f84e0ac87b16294e0047e69e22231fed67158cfdb datapathConfiguration="&{false false false false false }" interface=lxcd650fa243414 k8sPodName=openstack/neutron-coredns-554999584b-mvg66 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e8df0d17c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3026 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/neutron-coredns-554999584b-mvg66 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e8df0d17c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3026 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/neutron-coredns-554999584b-mvg66 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=neutron-coredns;k8s:app.kubernetes.io/name=coredns;k8s:application=neutron;k8s:component=coredns;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=0e8df0d17c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3026 identity=11352 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/neutron-coredns-554999584b-mvg66 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e8df0d17c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3026 identity=11352 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/neutron-coredns-554999584b-mvg66 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0e8df0d17c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3026 identity=11352 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/neutron-coredns-554999584b-mvg66 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e8df0d17c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3026 identity=11352 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/neutron-coredns-554999584b-mvg66 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.197 9b713f5e-0643-4b00-a783-0f4a20d298da default }" containerID=d4422219b509f82e71851f73dca544faeca8df96aaf288147b73cf26c0b8f8a9 datapathConfiguration="&{false false false false false }" interface=lxc122b4549a4ba k8sPodName=local-path-storage/helper-pod-create-pvc-ce3344b2-8892-4e61-a69a-b8dbbb7afa8f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d4422219b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1432 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ce3344b2-8892-4e61-a69a-b8dbbb7afa8f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d4422219b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1432 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ce3344b2-8892-4e61-a69a-b8dbbb7afa8f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity marked for deletion (at 2026-07-16T07:30:36.846368606Z); attempting to unmark it" identity="&{{ } {25616 d2232392-0b55-4bda-9c13-f94206a75d42 15727 1 2026-07-16 06:58:49 +0000 UTC map[io.cilium.k8s.policy.cluster:default io.cilium.k8s.policy.serviceaccount:local-path-provisioner io.kubernetes.pod.namespace:local-path-storage] map[io.cilium.heartbeat:2026-07-16T07:30:36.846368606Z] [] [] [{cilium-agent Update cilium.io/v2 2026-07-16 06:58:49 +0000 UTC FieldsV1 {\"f:metadata\":{\"f:labels\":{\".\":{},\"f:io.cilium.k8s.policy.cluster\":{},\"f:io.cilium.k8s.policy.serviceaccount\":{},\"f:io.kubernetes.pod.namespace\":{}}},\"f:security-labels\":{\".\":{},\"f:k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name\":{},\"f:k8s:io.cilium.k8s.namespace.labels.name\":{},\"f:k8s:io.cilium.k8s.policy.cluster\":{},\"f:k8s:io.cilium.k8s.policy.serviceaccount\":{},\"f:k8s:io.kubernetes.pod.namespace\":{}}} } {cilium-operator-generic Update cilium.io/v2 2026-07-16 07:30:36 +0000 UTC FieldsV1 {\"f:metadata\":{\"f:annotations\":{\".\":{},\"f:io.cilium.heartbeat\":{}}}} }]} map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage k8s:io.cilium.k8s.policy.cluster:default k8s:io.cilium.k8s.policy.serviceaccount:local-path-provisioner k8s:io.kubernetes.pod.namespace:local-path-storage]}" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=d4422219b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1432 identity=25616 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ce3344b2-8892-4e61-a69a-b8dbbb7afa8f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d4422219b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1432 identity=25616 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ce3344b2-8892-4e61-a69a-b8dbbb7afa8f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d4422219b5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1432 identity=25616 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ce3344b2-8892-4e61-a69a-b8dbbb7afa8f subsys=endpoint level=info msg="Successful endpoint creation" containerID=d4422219b5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1432 identity=25616 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ce3344b2-8892-4e61-a69a-b8dbbb7afa8f subsys=daemon level=info msg="Delete endpoint request" containerID=d4422219b5 endpointID=1432 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ce3344b2-8892-4e61-a69a-b8dbbb7afa8f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d4422219b5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1432 identity=25616 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ce3344b2-8892-4e61-a69a-b8dbbb7afa8f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 91513ab3-9694-41b8-b6ff-9025e78193f1 default }" containerID=e124faa3f214133cf3f6238bae44a4571a351934d827e73990ae0fc8da0fc7da datapathConfiguration="&{false false false false false }" interface=lxcf3956e29384e k8sPodName=openstack/rabbitmq-nova-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e124faa3f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2515 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e124faa3f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2515 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-nova;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e124faa3f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2515 identity=33890 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e124faa3f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2515 identity=33890 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e124faa3f2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2515 identity=33890 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e124faa3f2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2515 identity=33890 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.146 9fcbb8cc-c055-4cd2-b1c3-baf45b998680 default }" containerID=dfee524a5f47b9d91f729b9b4973173e087f41539044b57fb0cc56de9cbd49a1 datapathConfiguration="&{false false false false false }" interface=lxc99d133d08f55 k8sPodName=openstack/nova-scheduler-5989868b85-vzrhb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dfee524a5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1370 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/nova-scheduler-5989868b85-vzrhb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dfee524a5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1370 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/nova-scheduler-5989868b85-vzrhb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dfee524a5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1370 identity=3583 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/nova-scheduler-5989868b85-vzrhb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dfee524a5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1370 identity=3583 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/nova-scheduler-5989868b85-vzrhb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 c416a221-6100-4b7e-b688-4a9f688e0dd7 default }" containerID=38fdb6139624bc07d88e4b6b9b94ce2340eb5f017be4392eb25c160b7e115cb3 datapathConfiguration="&{false false false false false }" interface=lxc7a90707daf7c k8sPodName=openstack/nova-cell-setup-74smw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=38fdb61396 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2491 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/nova-cell-setup-74smw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=38fdb61396 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2491 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=3934afe3-4d55-4769-86f0-b04e6151fafd,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=3934afe3-4d55-4769-86f0-b04e6151fafd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/nova-cell-setup-74smw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=3934afe3-4d55-4769-86f0-b04e6151fafd;k8s:batch.kubernetes.io/job-name=nova-cell-setup;k8s:component=cell-setup;k8s:controller-uid=3934afe3-4d55-4769-86f0-b04e6151fafd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=38fdb61396 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2491 identity=17494 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=3934afe3-4d55-4769-86f0-b04e6151fafd,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=3934afe3-4d55-4769-86f0-b04e6151fafd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/nova-cell-setup-74smw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=38fdb61396 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2491 identity=17494 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/nova-cell-setup-74smw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 0d0ce80e-c858-4142-9d9c-e18695a0b180 default }" containerID=6feee698d3d2f5ecd895bcacd7e1beda63c1765769aca2403a8d00527f733f7b datapathConfiguration="&{false false false false false }" interface=lxc87c5ebfd8ecf k8sPodName=openstack/nova-api-osapi-78d6c6f4cf-77xnc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6feee698d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=842 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/nova-api-osapi-78d6c6f4cf-77xnc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6feee698d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=842 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/nova-api-osapi-78d6c6f4cf-77xnc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=os-api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6feee698d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=842 identity=22218 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/nova-api-osapi-78d6c6f4cf-77xnc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6feee698d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=842 identity=22218 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/nova-api-osapi-78d6c6f4cf-77xnc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dfee524a5f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1370 identity=3583 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/nova-scheduler-5989868b85-vzrhb subsys=endpoint level=info msg="Successful endpoint creation" containerID=dfee524a5f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1370 identity=3583 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/nova-scheduler-5989868b85-vzrhb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.244 15e893bd-a8fa-4f1e-88cf-172d13893dd5 default }" containerID=0d49e0ae2c0c51e8f9da87bf69712eb65e95c663f5bf7492c0f26a2b88fbcfb9 datapathConfiguration="&{false false false false false }" interface=lxcd6f03b474926 k8sPodName=openstack/nova-conductor-658968c857-pcvgf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d49e0ae2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/nova-conductor-658968c857-pcvgf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d49e0ae2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/nova-conductor-658968c857-pcvgf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d49e0ae2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 identity=49034 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/nova-conductor-658968c857-pcvgf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d49e0ae2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 identity=49034 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/nova-conductor-658968c857-pcvgf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 cd9744a0-167a-4c36-aa48-1fb7e1bd8efc default }" containerID=50abf63998f4a78e6f43399922ce934612a1bf96cd62eeec8762ce4b0de32a67 datapathConfiguration="&{false false false false false }" interface=lxc92bb5a008339 k8sPodName=openstack/nova-bootstrap-pw5zf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=50abf63998 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=813 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/nova-bootstrap-pw5zf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 933a0967-33fd-4840-8178-20e1d941ce49 default }" containerID=af0f8b30fb9e685f9d7f3f659fa7245d9d14b0dc988cb5605b165432ceb4fffc datapathConfiguration="&{false false false false false }" interface=lxc10aeed5166de k8sPodName=openstack/nova-api-metadata-79c8d5b74d-chzkv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af0f8b30fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2416 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/nova-api-metadata-79c8d5b74d-chzkv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=50abf63998 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=813 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=c86443e2-bab6-4b16-96db-65f90ff2f2bc,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=c86443e2-bab6-4b16-96db-65f90ff2f2bc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/nova-bootstrap-pw5zf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=af0f8b30fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2416 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/nova-api-metadata-79c8d5b74d-chzkv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=38fdb61396 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2491 identity=17494 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/nova-cell-setup-74smw subsys=endpoint level=info msg="Successful endpoint creation" containerID=38fdb61396 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2491 identity=17494 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/nova-cell-setup-74smw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.201 44f0127a-c90d-4c99-ac13-d4fc2928d828 default }" containerID=99e0e032535798bbf37c06b6a130d094799412af514b452bb9b143ae4686f50f datapathConfiguration="&{false false false false false }" interface=lxc48cd599a8508 k8sPodName=openstack/nova-db-init-dpqw2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=99e0e03253 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=25 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/nova-db-init-dpqw2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=99e0e03253 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=25 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=479ce112-94df-47ff-b002-3a274c8db384,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=479ce112-94df-47ff-b002-3a274c8db384,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/nova-db-init-dpqw2 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=c86443e2-bab6-4b16-96db-65f90ff2f2bc;k8s:batch.kubernetes.io/job-name=nova-bootstrap;k8s:component=bootstrap;k8s:controller-uid=c86443e2-bab6-4b16-96db-65f90ff2f2bc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-bootstrap;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=50abf63998 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=813 identity=50868 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=c86443e2-bab6-4b16-96db-65f90ff2f2bc,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=c86443e2-bab6-4b16-96db-65f90ff2f2bc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/nova-bootstrap-pw5zf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=50abf63998 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=813 identity=50868 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/nova-bootstrap-pw5zf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=6feee698d3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=842 identity=22218 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/nova-api-osapi-78d6c6f4cf-77xnc subsys=endpoint level=info msg="Successful endpoint creation" containerID=6feee698d3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=842 identity=22218 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/nova-api-osapi-78d6c6f4cf-77xnc subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=metadata;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af0f8b30fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2416 identity=20789 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/nova-api-metadata-79c8d5b74d-chzkv oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=af0f8b30fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2416 identity=20789 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/nova-api-metadata-79c8d5b74d-chzkv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0d49e0ae2c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=186 identity=49034 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/nova-conductor-658968c857-pcvgf subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d49e0ae2c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=186 identity=49034 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/nova-conductor-658968c857-pcvgf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=50abf63998 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=813 identity=50868 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/nova-bootstrap-pw5zf subsys=endpoint level=info msg="Successful endpoint creation" containerID=50abf63998 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=813 identity=50868 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/nova-bootstrap-pw5zf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=99e0e03253 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=25 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.201 ipv6= k8sPodName=openstack/nova-db-init-dpqw2 line=611 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=af0f8b30fb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2416 identity=20789 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/nova-api-metadata-79c8d5b74d-chzkv subsys=endpoint level=info msg="Successful endpoint creation" containerID=af0f8b30fb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2416 identity=20789 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/nova-api-metadata-79c8d5b74d-chzkv subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=479ce112-94df-47ff-b002-3a274c8db384;k8s:batch.kubernetes.io/job-name=nova-db-init;k8s:component=db-init;k8s:controller-uid=479ce112-94df-47ff-b002-3a274c8db384;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=99e0e03253 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=25 identity=23813 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=479ce112-94df-47ff-b002-3a274c8db384,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=479ce112-94df-47ff-b002-3a274c8db384,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/nova-db-init-dpqw2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=99e0e03253 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=25 identity=23813 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/nova-db-init-dpqw2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=99e0e03253 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=25 identity=23813 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/nova-db-init-dpqw2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=99e0e03253 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=25 identity=23813 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/nova-db-init-dpqw2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=99e0e03253 endpointID=25 k8sNamespace=openstack k8sPodName=nova-db-init-dpqw2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=479ce112-94df-47ff-b002-3a274c8db384 k8s:batch.kubernetes.io/job-name=nova-db-init k8s:component=db-init k8s:controller-uid=479ce112-94df-47ff-b002-3a274c8db384 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=99e0e03253 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=25 identity=23813 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/nova-db-init-dpqw2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 4868babc-a041-4c65-9176-bf45111257de default }" containerID=83dcf922af3ecac9debe0963acdb1ddc1d1a1b9056d749ea507a105c7a875d48 datapathConfiguration="&{false false false false false }" interface=lxc0c8cedab1404 k8sPodName=openstack/nova-novncproxy-7585bbc774-vww96 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=83dcf922af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1594 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/nova-novncproxy-7585bbc774-vww96 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=83dcf922af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1594 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/nova-novncproxy-7585bbc774-vww96 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=83dcf922af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1594 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.46 ipv6= k8sPodName=openstack/nova-novncproxy-7585bbc774-vww96 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=novnc-proxy;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=83dcf922af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1594 identity=6086 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/nova-novncproxy-7585bbc774-vww96 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=83dcf922af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1594 identity=6086 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/nova-novncproxy-7585bbc774-vww96 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=83dcf922af datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1594 identity=6086 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/nova-novncproxy-7585bbc774-vww96 subsys=endpoint level=info msg="Successful endpoint creation" containerID=83dcf922af datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1594 identity=6086 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/nova-novncproxy-7585bbc774-vww96 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.230 7625ea67-07f3-48dd-a63f-61e7f39d0224 default }" containerID=b2e6a69991088acafb81ca7c2aa161ac7cbc0386c9ff775547030b7951f977a9 datapathConfiguration="&{false false false false false }" interface=lxcfa7266da50b1 k8sPodName=openstack/nova-db-sync-c875k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b2e6a69991 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=181 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/nova-db-sync-c875k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b2e6a69991 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=181 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=5c68cdad-6042-4f28-9a1a-6ca0652defa8,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=5c68cdad-6042-4f28-9a1a-6ca0652defa8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/nova-db-sync-c875k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=5c68cdad-6042-4f28-9a1a-6ca0652defa8;k8s:batch.kubernetes.io/job-name=nova-db-sync;k8s:component=db-sync;k8s:controller-uid=5c68cdad-6042-4f28-9a1a-6ca0652defa8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-sync;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b2e6a69991 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=181 identity=47819 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=5c68cdad-6042-4f28-9a1a-6ca0652defa8,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=5c68cdad-6042-4f28-9a1a-6ca0652defa8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/nova-db-sync-c875k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b2e6a69991 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=181 identity=47819 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/nova-db-sync-c875k subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b2e6a69991 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=181 identity=47819 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/nova-db-sync-c875k subsys=endpoint level=info msg="Successful endpoint creation" containerID=b2e6a69991 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=181 identity=47819 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/nova-db-sync-c875k subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b2e6a69991 endpointID=181 k8sNamespace=openstack k8sPodName=nova-db-sync-c875k subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=5c68cdad-6042-4f28-9a1a-6ca0652defa8 k8s:batch.kubernetes.io/job-name=nova-db-sync k8s:component=db-sync k8s:controller-uid=5c68cdad-6042-4f28-9a1a-6ca0652defa8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-sync k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=b2e6a69991 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=181 identity=47819 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/nova-db-sync-c875k subsys=endpoint