level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.026329ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="120.854µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.161953ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="8.93µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=91.273867ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="14.441µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="11.66µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="70.202µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="48.551µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="61.211µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="603.516µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.85µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.986929ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.463097ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="36.941µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="35.501µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="212.126µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="97.122µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="92.322µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=42.207161ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="102.523µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="12.151µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.021µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.216.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.055699ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="20.541µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.449555ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="11.881µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.543701ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="5.54µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.31µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.03µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.68µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="4.58µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="22.57µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="13.42µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="60.542µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="246.886µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.01µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="16.37µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="276.538µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="685.169µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration="838.844µs" function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="2.91µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="15.43µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.216 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.216 ipAddr.ipv6="" k8sNodeIP=199.204.45.216 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.216" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.69" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.216" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.216} {CiliumInternalIP 10.0.0.69}] 10.0.0.0/24 [] [] 10.0.0.173 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:38789" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.658401081s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="27.501µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="20.61µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="44.941µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="15.13µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.70425857s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=291.657822ms file-path=/var/run/cilium/state/templates/3d1eaec9f0dfbe0f9555d6d56cbaab1df6556be89cd8cb1e45e30f83ba700cf0/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=382 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.249 874b8695-c7e1-4b2a-ba60-15ac4e7252cc default }" containerID=1468aca80eab6f3d9d80e3f90c9f09198f3e577ede3e6de55d74a818fb53df1a datapathConfiguration="&{false false false false false }" interface=lxc3ec7641b5218 k8sPodName=kube-system/coredns-7c96b6546b-hj9sr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1468aca80e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 ipv4=10.0.0.249 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-hj9sr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1468aca80e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.249 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-hj9sr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.104 481efb3a-9965-4364-ab0e-bce95d2b57b9 default }" containerID=348f8111f74e43e86b3bc42b906e2a7bf3567a30b1f3e1cb4e606290f319fe44 datapathConfiguration="&{false false false false false }" interface=lxc923c2d3ea8da k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qp599 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=348f8111f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=854 ipv4=10.0.0.104 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qp599 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=348f8111f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=854 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=b03f51d9-7341-42dc-ae81-0b0e4ac6c0e0,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=b03f51d9-7341-42dc-ae81-0b0e4ac6c0e0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.104 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qp599 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1468aca80e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identity=5092 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.249 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-hj9sr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1468aca80e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identity=5092 ipv4=10.0.0.249 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-hj9sr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=348f8111f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=854 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.104 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qp599 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=b03f51d9-7341-42dc-ae81-0b0e4ac6c0e0;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=b03f51d9-7341-42dc-ae81-0b0e4ac6c0e0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=348f8111f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=854 identity=3207 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=b03f51d9-7341-42dc-ae81-0b0e4ac6c0e0,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=b03f51d9-7341-42dc-ae81-0b0e4ac6c0e0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.104 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qp599 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=348f8111f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=854 identity=3207 ipv4=10.0.0.104 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qp599 subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2651 ipv4=10.0.0.173 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2651 identityLabels="reserved:health" ipv4=10.0.0.173 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2651 identity=4 identityLabels="reserved:health" ipv4=10.0.0.173 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.068747824s file-path=/var/run/cilium/state/templates/8fe7e168cb7c96a1bbf6e409301d1955d39f98d12c7b95d5fc3b962594d91c80/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=1468aca80e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1152 identity=5092 ipv4=10.0.0.249 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-hj9sr subsys=endpoint level=info msg="Successful endpoint creation" containerID=1468aca80e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1152 identity=5092 ipv4=10.0.0.249 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-hj9sr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=348f8111f7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=854 identity=3207 ipv4=10.0.0.104 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qp599 subsys=endpoint level=info msg="Successful endpoint creation" containerID=348f8111f7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=854 identity=3207 ipv4=10.0.0.104 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qp599 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2651 identity=4 ipv4=10.0.0.173 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=348f8111f7 endpointID=854 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-qp599 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=b03f51d9-7341-42dc-ae81-0b0e4ac6c0e0 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=b03f51d9-7341-42dc-ae81-0b0e4ac6c0e0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=348f8111f7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=854 identity=3207 ipv4=10.0.0.104 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qp599 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.193 cbde0e5a-fa56-4de8-9bfc-39d60432b35a default }" containerID=9f144405b1aaab1dcc80cd75a0af406fae795f8ab889a17abbf1b17130f81476 datapathConfiguration="&{false false false false false }" interface=lxc4c21e97d70c4 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-n42vh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f144405b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2613 ipv4=10.0.0.193 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-n42vh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f144405b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2613 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.193 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-n42vh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f144405b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2613 identity=49233 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.193 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-n42vh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f144405b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2613 identity=49233 ipv4=10.0.0.193 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-n42vh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9f144405b1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2613 identity=49233 ipv4=10.0.0.193 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-n42vh subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f144405b1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2613 identity=49233 ipv4=10.0.0.193 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-n42vh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=382 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00382 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00382 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00382 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00382:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=382 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 3fe0f658-de82-4917-b1cd-9e8e96b905e2 default }" containerID=2249c1c53baa5f3d7a66d3eed6064b688e476b8c6b175b693c0ec178e41b621e datapathConfiguration="&{false false false false false }" interface=lxcdbfabf69a979 k8sPodName=kube-system/coredns-67659f764b-n6dxs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2249c1c53b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=333 ipv4=10.0.0.6 ipv6= k8sPodName=kube-system/coredns-67659f764b-n6dxs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2249c1c53b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=333 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.6 ipv6= k8sPodName=kube-system/coredns-67659f764b-n6dxs subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2249c1c53b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=333 identity=5092 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.6 ipv6= k8sPodName=kube-system/coredns-67659f764b-n6dxs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2249c1c53b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=333 identity=5092 ipv4=10.0.0.6 ipv6= k8sPodName=kube-system/coredns-67659f764b-n6dxs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.82 854ec773-e175-4147-addb-a81a2f63ab9a default }" containerID=47917bcbed396f89bf9507816c18225123a189d1513b821050625d73d0e80574 datapathConfiguration="&{false false false false false }" interface=lxc653f71a264ff k8sPodName=kube-system/coredns-67659f764b-wwbh9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=47917bcbed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2841 ipv4=10.0.0.82 ipv6= k8sPodName=kube-system/coredns-67659f764b-wwbh9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=47917bcbed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2841 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.82 ipv6= k8sPodName=kube-system/coredns-67659f764b-wwbh9 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=47917bcbed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2841 identity=5092 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.82 ipv6= k8sPodName=kube-system/coredns-67659f764b-wwbh9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=47917bcbed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2841 identity=5092 ipv4=10.0.0.82 ipv6= k8sPodName=kube-system/coredns-67659f764b-wwbh9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2249c1c53b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=333 identity=5092 ipv4=10.0.0.6 ipv6= k8sPodName=kube-system/coredns-67659f764b-n6dxs subsys=endpoint level=info msg="Successful endpoint creation" containerID=2249c1c53b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=333 identity=5092 ipv4=10.0.0.6 ipv6= k8sPodName=kube-system/coredns-67659f764b-n6dxs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=47917bcbed datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2841 identity=5092 ipv4=10.0.0.82 ipv6= k8sPodName=kube-system/coredns-67659f764b-wwbh9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=47917bcbed datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2841 identity=5092 ipv4=10.0.0.82 ipv6= k8sPodName=kube-system/coredns-67659f764b-wwbh9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.172 a9cec0f2-3de5-49df-b853-fdebba8c077c default }" containerID=5fca63f531cf299b01a0eec9eb01a05dd9cd4398ef3c49170d182491f5bd3f8f datapathConfiguration="&{false false false false false }" interface=lxc7c8caa14d796 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-w2v4m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5fca63f531 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-w2v4m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5fca63f531 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-w2v4m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5fca63f531 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identity=45606 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-w2v4m oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5fca63f531 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identity=45606 ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-w2v4m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5fca63f531 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=462 identity=45606 ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-w2v4m subsys=endpoint level=info msg="Successful endpoint creation" containerID=5fca63f531 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=462 identity=45606 ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-w2v4m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1468aca80e endpointID=1152 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-hj9sr subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=1468aca80e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1152 identity=5092 ipv4=10.0.0.249 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-hj9sr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.141 3958c061-ea3a-443d-81b5-454a3afd8a4b default }" containerID=b109d8cecbdd31895dd17ea95307248ea9a48dac73519528eb4eacded764a430 datapathConfiguration="&{false false false false false }" interface=lxc4eb51e6e42a4 k8sPodName=cert-manager/cert-manager-startupapicheck-llqnv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b109d8cecb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-llqnv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b109d8cecb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=08b3f45a-26b9-4377-9a67-9b7ddd5951c7,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=08b3f45a-26b9-4377-9a67-9b7ddd5951c7,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-llqnv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b109d8cecb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-llqnv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=08b3f45a-26b9-4377-9a67-9b7ddd5951c7;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=08b3f45a-26b9-4377-9a67-9b7ddd5951c7;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b109d8cecb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 identity=62358 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=08b3f45a-26b9-4377-9a67-9b7ddd5951c7,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=08b3f45a-26b9-4377-9a67-9b7ddd5951c7,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-llqnv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b109d8cecb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 identity=62358 ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-llqnv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b109d8cecb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=309 identity=62358 ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-llqnv subsys=endpoint level=info msg="Successful endpoint creation" containerID=b109d8cecb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=309 identity=62358 ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-llqnv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.135 c5fc7eca-93d7-4ce1-ad97-bfde8bcc8027 default }" containerID=1159ffa2b53e150a92c0b2a8b9e168ab11a9a2a605414799d77530e4f015e9c9 datapathConfiguration="&{false false false false false }" interface=lxc23e4764c2c3a k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ps9xz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1159ffa2b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1875 ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ps9xz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 f9502496-b752-43bf-ab68-3c6885bc785a default }" containerID=53a3425477bb36da28600aade265c3b762ec8f12e4e7416df524499d950586b9 datapathConfiguration="&{false false false false false }" interface=lxc95cb469403b7 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-k75nv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=53a3425477 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2074 ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-k75nv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1159ffa2b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1875 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ps9xz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=53a3425477 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2074 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-k75nv subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1159ffa2b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1875 identity=54830 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ps9xz oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=1159ffa2b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1875 identity=54830 ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ps9xz subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=53a3425477 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2074 identity=47066 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-k75nv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=53a3425477 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2074 identity=47066 ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-k75nv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 5b4177e9-7629-4baa-8ef6-7d388075f15e default }" containerID=54d37ba6781a2891b3d0e285c7affe148f324cabef3574c1879ae3c5752c7ba9 datapathConfiguration="&{false false false false false }" interface=lxcb800f801e852 k8sPodName=cert-manager/cert-manager-75c4c745bc-hxlvq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=54d37ba678 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1027 ipv4=10.0.0.121 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hxlvq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=54d37ba678 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1027 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.121 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hxlvq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=54d37ba678 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1027 identity=44435 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.121 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hxlvq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=54d37ba678 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1027 identity=44435 ipv4=10.0.0.121 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hxlvq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1159ffa2b5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1875 identity=54830 ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ps9xz subsys=endpoint level=info msg="Successful endpoint creation" containerID=1159ffa2b5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1875 identity=54830 ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ps9xz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=53a3425477 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2074 identity=47066 ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-k75nv subsys=endpoint level=info msg="Successful endpoint creation" containerID=53a3425477 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2074 identity=47066 ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-k75nv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=54d37ba678 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1027 identity=44435 ipv4=10.0.0.121 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hxlvq subsys=endpoint level=info msg="Successful endpoint creation" containerID=54d37ba678 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1027 identity=44435 ipv4=10.0.0.121 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hxlvq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b109d8cecb endpointID=309 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-llqnv subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=08b3f45a-26b9-4377-9a67-9b7ddd5951c7 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=08b3f45a-26b9-4377-9a67-9b7ddd5951c7 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=b109d8cecb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=309 identity=62358 ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-llqnv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.199 544ad6fa-b2d7-4035-af74-de7ce162d8be default }" containerID=cb0cdaf0d24c6c3caa6dd44cfae3ff3dbde6311d3f7e75ad13518a5e505ba632 datapathConfiguration="&{false false false false false }" interface=lxc6691d0b50c48 k8sPodName=ingress-nginx/ingress-nginx-admission-create-lppvf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb0cdaf0d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=421 ipv4=10.0.0.199 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lppvf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cb0cdaf0d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=421 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=ff52003a-081d-43db-8f41-9800c450d499,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=ff52003a-081d-43db-8f41-9800c450d499,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.199 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lppvf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=ff52003a-081d-43db-8f41-9800c450d499;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=ff52003a-081d-43db-8f41-9800c450d499;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cb0cdaf0d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=421 identity=31832 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=ff52003a-081d-43db-8f41-9800c450d499,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=ff52003a-081d-43db-8f41-9800c450d499,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.199 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lppvf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cb0cdaf0d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=421 identity=31832 ipv4=10.0.0.199 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lppvf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cb0cdaf0d2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=421 identity=31832 ipv4=10.0.0.199 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lppvf subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb0cdaf0d2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=421 identity=31832 ipv4=10.0.0.199 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lppvf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cb0cdaf0d2 endpointID=421 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-lppvf subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=ff52003a-081d-43db-8f41-9800c450d499 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=ff52003a-081d-43db-8f41-9800c450d499 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=cb0cdaf0d2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=421 identity=31832 ipv4=10.0.0.199 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lppvf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 6f619546-602a-420f-a5e5-a3583b3347ac default }" containerID=19dba18fbf5b4db9f3f5387c0e5eae0e2bf523d2910b4633a7ff745b94d0686f datapathConfiguration="&{false false false false false }" interface=lxcc3d4af9d240f k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jl8kw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19dba18fbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2377 ipv4=10.0.0.183 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jl8kw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19dba18fbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2377 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.183 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jl8kw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19dba18fbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2377 identity=17121 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.183 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jl8kw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19dba18fbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2377 identity=17121 ipv4=10.0.0.183 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jl8kw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=19dba18fbf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2377 identity=17121 ipv4=10.0.0.183 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jl8kw subsys=endpoint level=info msg="Successful endpoint creation" containerID=19dba18fbf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2377 identity=17121 ipv4=10.0.0.183 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jl8kw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.196 fc5e43d4-2f7f-4f2c-8209-c91d65ddaa86 default }" containerID=8329cd1884900773311857afeab6bebc9fb652ba36c960ca8a2618ea0eb13505 datapathConfiguration="&{false false false false false }" interface=lxcf72071e2ca21 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-645vr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8329cd1884 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 ipv4=10.0.0.196 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-645vr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8329cd1884 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=6868dd24-8140-44e2-a730-18fea8fb7678,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=6868dd24-8140-44e2-a730-18fea8fb7678,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.196 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-645vr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=6868dd24-8140-44e2-a730-18fea8fb7678;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=6868dd24-8140-44e2-a730-18fea8fb7678;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8329cd1884 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identity=24938 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=6868dd24-8140-44e2-a730-18fea8fb7678,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=6868dd24-8140-44e2-a730-18fea8fb7678,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.196 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-645vr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8329cd1884 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identity=24938 ipv4=10.0.0.196 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-645vr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8329cd1884 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=453 identity=24938 ipv4=10.0.0.196 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-645vr subsys=endpoint level=info msg="Successful endpoint creation" containerID=8329cd1884 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=453 identity=24938 ipv4=10.0.0.196 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-645vr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8329cd1884 endpointID=453 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-645vr subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=6868dd24-8140-44e2-a730-18fea8fb7678 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=6868dd24-8140-44e2-a730-18fea8fb7678 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=8329cd1884 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=453 identity=24938 ipv4=10.0.0.196 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-645vr subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=901b90dd-bc9e-440c-a0c1-ee67ac8e54ef] Description:}]" policyAddRequest=19ceac19-4f63-41ec-b71f-b57f3835825e subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=19ceac19-4f63-41ec-b71f-b57f3835825e policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=a79e426e-9dd2-4a41-b42a-479f5fc65e43] Description:}]" policyAddRequest=87164d4a-15b7-4a5a-a221-e5d3246b74e2 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=87164d4a-15b7-4a5a-a221-e5d3246b74e2 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.238 de2faa3e-f440-4583-bd5a-8b4fa202f273 default }" containerID=50f647c8f5fa5fae1bafd242e2c700ae9004ede19d47e0142b972429dd08ea7a datapathConfiguration="&{false false false false false }" interface=lxcedad755313e8 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-z6bgh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=50f647c8f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-z6bgh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=50f647c8f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-z6bgh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=50f647c8f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identity=20781 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-z6bgh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=50f647c8f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identity=20781 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-z6bgh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=50f647c8f5 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2047 identity=20781 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-z6bgh subsys=endpoint level=info msg="Successful endpoint creation" containerID=50f647c8f5 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2047 identity=20781 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-z6bgh subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.137 bad3a639-f679-4e91-990c-380dba5d30e1 default }" containerID=eeffa1365aa41d1b6c2c690a371997fb67b8cc2b7f868f8496c69c39fd9a24ee datapathConfiguration="&{false false false false false }" interface=lxcccac881c5d0a k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-t6k45 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eeffa1365a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-t6k45 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eeffa1365a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-t6k45 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eeffa1365a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 identity=31066 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-t6k45 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eeffa1365a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 identity=31066 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-t6k45 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eeffa1365a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=393 identity=31066 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-t6k45 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eeffa1365a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=393 identity=31066 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-t6k45 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.110 a378ad68-909b-4ff5-bc48-f6f2ab469b5a default }" containerID=d8f91e8753363bfc1a1768cdb4101a9caf5cf10d9e99eed33dc8821a89008351 datapathConfiguration="&{false false false false false }" interface=lxcb4aed4109b46 k8sPodName=openstack/pxc-operator-69cb5bbdb9-9dlhz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d8f91e8753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=528 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9dlhz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d8f91e8753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=528 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9dlhz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=d8f91e8753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=528 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.110 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9dlhz line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d8f91e8753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=528 identity=28518 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9dlhz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d8f91e8753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=528 identity=28518 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9dlhz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d8f91e8753 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=528 identity=28518 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9dlhz subsys=endpoint level=info msg="Successful endpoint creation" containerID=d8f91e8753 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=528 identity=28518 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9dlhz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.98 9209eea7-c6c3-4b5d-ac41-ffa52efce76f default }" containerID=a472304d029e6880a99ff0fb52acf5132500a67bae128fd427e0f7494329a7b5 datapathConfiguration="&{false false false false false }" interface=lxc7912eafe28b1 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a472304d02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2803 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a472304d02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2803 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a472304d02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2803 identity=15868 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a472304d02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2803 identity=15868 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 6984c3d3-b5c5-4e43-b3bd-58ca412f0cf7 default }" containerID=8f8fea84d87d486fa4d8f706a406e7a2037a99720debd65580abc5e63c2012cd datapathConfiguration="&{false false false false false }" interface=lxc6692cde5871b k8sPodName=local-path-storage/helper-pod-create-pvc-172d668f-7cad-4906-935f-ff5444d8ec33 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f8fea84d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=468 ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-172d668f-7cad-4906-935f-ff5444d8ec33 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f8fea84d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=468 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-172d668f-7cad-4906-935f-ff5444d8ec33 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8f8fea84d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=468 identity=5443 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-172d668f-7cad-4906-935f-ff5444d8ec33 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f8fea84d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=468 identity=5443 ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-172d668f-7cad-4906-935f-ff5444d8ec33 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a472304d02 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2803 identity=15868 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a472304d02 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2803 identity=15868 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8f8fea84d8 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=468 identity=5443 ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-172d668f-7cad-4906-935f-ff5444d8ec33 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f8fea84d8 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=468 identity=5443 ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-172d668f-7cad-4906-935f-ff5444d8ec33 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8f8fea84d8 endpointID=468 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-172d668f-7cad-4906-935f-ff5444d8ec33 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8f8fea84d8 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=468 identity=5443 ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-172d668f-7cad-4906-935f-ff5444d8ec33 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 dc8ef661-b9a0-42dd-9ffb-136c448f2a47 default }" containerID=3640b8c3edeba0dd853aff8257b3c247b1b32e4a7aa7e155cb5c9aed9b589a2c datapathConfiguration="&{false false false false false }" interface=lxcecec0e35e85f k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3640b8c3ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3640b8c3ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3640b8c3ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 identity=36028 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3640b8c3ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 identity=36028 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3640b8c3ed datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=118 identity=36028 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3640b8c3ed datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=118 identity=36028 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=fbe5f54c-c673-4b3e-a900-815319b38b95] Description:}]" policyAddRequest=a674ccf5-3f20-444b-b5b6-dbbfe73f7937 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=a674ccf5-3f20-444b-b5b6-dbbfe73f7937 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.108 355c3a7b-2bfc-4482-b91a-0ca0f17b4efd default }" containerID=05f2d4391b6bd41f7bbacbc92924805a76b46cd52baf2f3ffc5d2d1e0b4186b3 datapathConfiguration="&{false false false false false }" interface=lxccf7b17f28ef8 k8sPodName=local-path-storage/helper-pod-create-pvc-063d8afb-54cd-41e7-9a3e-202ba41f1576 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=05f2d4391b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2554 ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-063d8afb-54cd-41e7-9a3e-202ba41f1576 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=05f2d4391b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2554 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-063d8afb-54cd-41e7-9a3e-202ba41f1576 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=05f2d4391b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2554 identity=5443 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-063d8afb-54cd-41e7-9a3e-202ba41f1576 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=05f2d4391b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2554 identity=5443 ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-063d8afb-54cd-41e7-9a3e-202ba41f1576 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=05f2d4391b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2554 identity=5443 ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-063d8afb-54cd-41e7-9a3e-202ba41f1576 subsys=endpoint level=info msg="Successful endpoint creation" containerID=05f2d4391b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2554 identity=5443 ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-063d8afb-54cd-41e7-9a3e-202ba41f1576 subsys=daemon level=info msg="Delete endpoint request" containerID=05f2d4391b endpointID=2554 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-063d8afb-54cd-41e7-9a3e-202ba41f1576 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=05f2d4391b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2554 identity=5443 ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-063d8afb-54cd-41e7-9a3e-202ba41f1576 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 91ea9fd4-3b47-4f8e-9039-f2b0c77b683f default }" containerID=25ab85529ef345d883678e678b0306e5642e40a27b12667ad0fa1e90090855ef datapathConfiguration="&{false false false false false }" interface=lxcfff44ea3b729 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=25ab85529e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2615 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=25ab85529e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2615 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=25ab85529e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2615 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.136 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=25ab85529e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2615 identity=28239 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=25ab85529e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2615 identity=28239 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=25ab85529e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2615 identity=28239 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=25ab85529e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2615 identity=28239 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=bf818f41-3018-4a94-89ba-75811512ecf2] Description:}]" policyAddRequest=1134f199-9b63-4cf4-92e2-d0c2c46bfa7a subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=1134f199-9b63-4cf4-92e2-d0c2c46bfa7a policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.54 a21974b6-0b24-49a1-b73a-93a9d58ae0a7 default }" containerID=dc740cbb5c408ffbc01f4377056a582900fac94df4409f4375ace03796b333be datapathConfiguration="&{false false false false false }" interface=lxcbaa31b7c1271 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc740cbb5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=960 ipv4=10.0.0.54 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc740cbb5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=960 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.54 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc740cbb5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=960 identity=7176 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.54 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc740cbb5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=960 identity=7176 ipv4=10.0.0.54 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dc740cbb5c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=960 identity=7176 ipv4=10.0.0.54 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc740cbb5c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=960 identity=7176 ipv4=10.0.0.54 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009570251734819485 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.111 cc67ea0c-9e5b-4a6e-9a0f-69f1a8d05b40 default }" containerID=acba613083b736e7c3deee66c3f849db09d2b001cbe9737b7d1de3c9b761af51 datapathConfiguration="&{false false false false false }" interface=lxc8a39466fb5bc k8sPodName=monitoring/node-feature-discovery-worker-bhdlw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=acba613083 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1592 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-bhdlw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=acba613083 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1592 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-bhdlw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.12 aa065df3-a681-4c69-a854-76eb0a52783b default }" containerID=266282da69d8506bd484371d7259f5e9476d6a3419dcf74348de0575ab9d780f datapathConfiguration="&{false false false false false }" interface=lxca62ce628e7c5 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9wwc4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=266282da69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1273 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9wwc4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=266282da69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1273 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9wwc4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=acba613083 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1592 identity=24082 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-bhdlw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=acba613083 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1592 identity=24082 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-bhdlw subsys=endpoint level=info msg="Invalid state transition skipped" containerID=266282da69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1273 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9wwc4 line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=266282da69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1273 identity=41797 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9wwc4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=266282da69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1273 identity=41797 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9wwc4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=acba613083 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1592 identity=24082 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-bhdlw subsys=endpoint level=info msg="Successful endpoint creation" containerID=acba613083 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1592 identity=24082 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-bhdlw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.127 499ed7fc-055a-4078-a7cb-e0b878930dd4 default }" containerID=85e00b7bff5497eb1de2d064b3c9cade666dfaf33c2fe01bc5db524c31cc8769 datapathConfiguration="&{false false false false false }" interface=lxcb6b19b2a671c k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-p9trt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85e00b7bff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4058 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-p9trt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85e00b7bff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4058 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-p9trt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85e00b7bff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4058 identity=8320 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-p9trt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85e00b7bff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4058 identity=8320 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-p9trt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=266282da69 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1273 identity=41797 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9wwc4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=266282da69 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1273 identity=41797 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9wwc4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=85e00b7bff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4058 identity=8320 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-p9trt subsys=endpoint level=info msg="Successful endpoint creation" containerID=85e00b7bff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4058 identity=8320 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-p9trt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.164 486958a3-d98f-4698-b6e6-9781a04000ad default }" containerID=791b2e329be9c2d896718596c0ec0118018f9bfec26bc61afc64fc264392f0ef datapathConfiguration="&{false false false false false }" interface=lxc8d5966461953 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8dspr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=791b2e329b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1486 ipv4=10.0.0.164 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8dspr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=791b2e329b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1486 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.164 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8dspr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=791b2e329b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1486 identity=20319 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.164 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8dspr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=791b2e329b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1486 identity=20319 ipv4=10.0.0.164 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8dspr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=791b2e329b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1486 identity=20319 ipv4=10.0.0.164 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8dspr subsys=endpoint level=info msg="Successful endpoint creation" containerID=791b2e329b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1486 identity=20319 ipv4=10.0.0.164 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8dspr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=382 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00382 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00382 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00382 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00382:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=382 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.85 c80458f3-01d5-4665-909d-85d6d8517e98 default }" containerID=b4f3c6577059fa9dd3e14b4725513210fcfb066f7f1201879e62d76d03506977 datapathConfiguration="&{false false false false false }" interface=lxc833e92dfe92c k8sPodName=monitoring/kube-prometheus-stack-admission-create-sx8jp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4f3c65770 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-sx8jp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4f3c65770 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=ecf8c382-cf58-4e48-b97f-c508d1fa8db5,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=ecf8c382-cf58-4e48-b97f-c508d1fa8db5,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-sx8jp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b4f3c65770 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-sx8jp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=ecf8c382-cf58-4e48-b97f-c508d1fa8db5;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=ecf8c382-cf58-4e48-b97f-c508d1fa8db5;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b4f3c65770 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 identity=3536 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=ecf8c382-cf58-4e48-b97f-c508d1fa8db5,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=ecf8c382-cf58-4e48-b97f-c508d1fa8db5,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-sx8jp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b4f3c65770 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 identity=3536 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-sx8jp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b4f3c65770 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3 identity=3536 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-sx8jp subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4f3c65770 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3 identity=3536 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-sx8jp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b4f3c65770 endpointID=3 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-sx8jp subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=ecf8c382-cf58-4e48-b97f-c508d1fa8db5 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=ecf8c382-cf58-4e48-b97f-c508d1fa8db5 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=b4f3c65770 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3 identity=3536 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-sx8jp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 b8abda10-58dd-435d-9194-abef9fecb346 default }" containerID=56de678954cf906bfdbe9bae128d2e4e7d775765193d41b2fa3464556bbf7ce8 datapathConfiguration="&{false false false false false }" interface=lxc97012b713eab k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-csh6h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=56de678954 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2340 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-csh6h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=56de678954 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2340 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-csh6h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=56de678954 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2340 identity=40638 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-csh6h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=56de678954 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2340 identity=40638 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-csh6h subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=56de678954 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2340 identity=40638 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-csh6h subsys=endpoint level=info msg="Successful endpoint creation" containerID=56de678954 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2340 identity=40638 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-csh6h subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.64 40962df6-6881-4ed1-9046-32328100daaf default }" containerID=01c72b6c2c40ffac4bf3200156b90e49bc0dda76e16442b77c9575faf917d0c7 datapathConfiguration="&{false false false false false }" interface=lxc5a0fe6d2e2c5 k8sPodName=monitoring/kube-prometheus-stack-grafana-5d6699dcf7-rkvhq labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.35 2574520a-4da1-44c6-9efa-d1348f2d703d default }" containerID=1fd7dab12ae9d60fdb16e8e740887a4db0af8ec18a1c970203a1e0b1ac528fb3 datapathConfiguration="&{false false false false false }" interface=lxc81fa281e8bec k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-zcngc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01c72b6c2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3426 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5d6699dcf7-rkvhq subsys=endpoint level=info msg="New endpoint" containerID=1fd7dab12a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=328 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-zcngc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01c72b6c2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3426 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5d6699dcf7-rkvhq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=1fd7dab12a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=328 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-zcngc subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=01c72b6c2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3426 identity=4452 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5d6699dcf7-rkvhq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=01c72b6c2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3426 identity=4452 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5d6699dcf7-rkvhq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1fd7dab12a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=328 identity=54100 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-zcngc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1fd7dab12a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=328 identity=54100 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-zcngc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=01c72b6c2c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3426 identity=4452 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5d6699dcf7-rkvhq subsys=endpoint level=info msg="Successful endpoint creation" containerID=01c72b6c2c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3426 identity=4452 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5d6699dcf7-rkvhq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1fd7dab12a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=328 identity=54100 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-zcngc subsys=endpoint level=info msg="Successful endpoint creation" containerID=1fd7dab12a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=328 identity=54100 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-zcngc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.81 f7497dc1-6023-4f84-8b2d-08669e40754a default }" containerID=776f16f12a5b7e4724d1c1f2173809a8d62e4c573eb3ca0b3cdcadd597f422df datapathConfiguration="&{false false false false false }" interface=lxcc05a3602bb85 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bxwg8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=776f16f12a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2304 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bxwg8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=776f16f12a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2304 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=ac78d0b1-690a-46e4-9297-4874078083e3,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=ac78d0b1-690a-46e4-9297-4874078083e3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bxwg8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=ac78d0b1-690a-46e4-9297-4874078083e3;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=ac78d0b1-690a-46e4-9297-4874078083e3;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=776f16f12a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2304 identity=1541 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=ac78d0b1-690a-46e4-9297-4874078083e3,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=ac78d0b1-690a-46e4-9297-4874078083e3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bxwg8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=776f16f12a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2304 identity=1541 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bxwg8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=776f16f12a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2304 identity=1541 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bxwg8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=776f16f12a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2304 identity=1541 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bxwg8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=776f16f12a endpointID=2304 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-bxwg8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=ac78d0b1-690a-46e4-9297-4874078083e3 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=ac78d0b1-690a-46e4-9297-4874078083e3 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=776f16f12a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2304 identity=1541 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bxwg8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 673f6771-503e-4cda-b4c0-c19a7611b3b6 default }" containerID=cd6f935b9dfe4b35880eaf24dfcf0536833fda36d3be86ac86921926bb332af2 datapathConfiguration="&{false false false false false }" interface=lxcf59427047d53 k8sPodName=local-path-storage/helper-pod-create-pvc-ec0a09e8-b6a8-478e-b037-b57f092a71a4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd6f935b9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1646 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec0a09e8-b6a8-478e-b037-b57f092a71a4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd6f935b9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1646 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec0a09e8-b6a8-478e-b037-b57f092a71a4 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cd6f935b9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1646 identity=5443 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec0a09e8-b6a8-478e-b037-b57f092a71a4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cd6f935b9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1646 identity=5443 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec0a09e8-b6a8-478e-b037-b57f092a71a4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cd6f935b9d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1646 identity=5443 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec0a09e8-b6a8-478e-b037-b57f092a71a4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd6f935b9d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1646 identity=5443 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec0a09e8-b6a8-478e-b037-b57f092a71a4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.107 2605c958-1143-4391-8d29-a9b73f820bba default }" containerID=9d865c1bec0e991bd1a34265562c0f3aad3dd5231ba6d62c8c19f7f0d7718444 datapathConfiguration="&{false false false false false }" interface=lxc24fc09d6c57f k8sPodName=local-path-storage/helper-pod-create-pvc-8b4c10ea-87ff-4afb-8960-53e37740cf9e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d865c1bec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b4c10ea-87ff-4afb-8960-53e37740cf9e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d865c1bec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b4c10ea-87ff-4afb-8960-53e37740cf9e subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9d865c1bec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 identity=5443 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b4c10ea-87ff-4afb-8960-53e37740cf9e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d865c1bec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 identity=5443 ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b4c10ea-87ff-4afb-8960-53e37740cf9e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9d865c1bec datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=690 identity=5443 ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b4c10ea-87ff-4afb-8960-53e37740cf9e subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d865c1bec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=690 identity=5443 ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b4c10ea-87ff-4afb-8960-53e37740cf9e subsys=daemon level=info msg="Delete endpoint request" containerID=cd6f935b9d endpointID=1646 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ec0a09e8-b6a8-478e-b037-b57f092a71a4 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=cd6f935b9d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1646 identity=5443 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec0a09e8-b6a8-478e-b037-b57f092a71a4 subsys=endpoint level=info msg="Delete endpoint request" containerID=9d865c1bec endpointID=690 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8b4c10ea-87ff-4afb-8960-53e37740cf9e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9d865c1bec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=690 identity=5443 ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b4c10ea-87ff-4afb-8960-53e37740cf9e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 e4313b90-5513-4819-8a52-91bd539267cd default }" containerID=dae0f04ecc0942bbcc3aa2761f6cd4e4f2fe302090c4c5e066b7a7fe46115c54 datapathConfiguration="&{false false false false false }" interface=lxc64c0f3bfb308 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dae0f04ecc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dae0f04ecc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dae0f04ecc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dae0f04ecc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 identity=64242 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dae0f04ecc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 identity=64242 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dae0f04ecc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1472 identity=64242 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dae0f04ecc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1472 identity=64242 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.194 e6abeb16-f4fa-4452-a46d-60538168a787 default }" containerID=706ca261c5175b60df4c461f17cd79e771d8d114faba8a00f9a12b770208534c datapathConfiguration="&{false false false false false }" interface=lxc1f20dc028e48 k8sPodName=monitoring/loki-gateway-cf54cb88c-dljt7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=706ca261c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2513 ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dljt7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=706ca261c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2513 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dljt7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=706ca261c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2513 identity=1225 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dljt7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=706ca261c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2513 identity=1225 ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dljt7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 1b15fb49-6b5c-4e35-a037-f2ec231bc108 default }" containerID=bc22a9224ed640e3ae93be8fc81cb7dd246e9fa6c376afd8b800006a8e661dcf datapathConfiguration="&{false false false false false }" interface=lxc83192d726289 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bc22a9224e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1929 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bc22a9224e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1929 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bc22a9224e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1929 identity=45977 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bc22a9224e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1929 identity=45977 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 bac57c27-0bc5-4905-9452-038dacdaecc6 default }" containerID=dbd3d386bc32391c79424774a8cb48ff2365fa88b03fbdbfbca323a0d96567b3 datapathConfiguration="&{false false false false false }" interface=lxc92d0b299cc27 k8sPodName=local-path-storage/helper-pod-create-pvc-2f1fa5bd-07c3-498e-9d53-a5860d84f387 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dbd3d386bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f1fa5bd-07c3-498e-9d53-a5860d84f387 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dbd3d386bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f1fa5bd-07c3-498e-9d53-a5860d84f387 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dbd3d386bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 identity=5443 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f1fa5bd-07c3-498e-9d53-a5860d84f387 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dbd3d386bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 identity=5443 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f1fa5bd-07c3-498e-9d53-a5860d84f387 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 618f6b6d-582a-461d-b1e7-57978feb2bdf default }" containerID=05f9441693a8b2ef8237affe16cfd0cc42b104e615d22b2a2a8038b3502b2aba datapathConfiguration="&{false false false false false }" interface=lxc7a6318dfb4dc k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=05f9441693 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=271 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=05f9441693 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=271 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=05f9441693 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=271 identity=3554 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=05f9441693 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=271 identity=3554 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=706ca261c5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2513 identity=1225 ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dljt7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=706ca261c5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2513 identity=1225 ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dljt7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bc22a9224e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1929 identity=45977 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bc22a9224e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1929 identity=45977 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=dbd3d386bc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1866 identity=5443 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f1fa5bd-07c3-498e-9d53-a5860d84f387 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dbd3d386bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1866 identity=5443 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f1fa5bd-07c3-498e-9d53-a5860d84f387 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.228 f02920dd-abb1-49c9-aaac-c57e5135e89a default }" containerID=35abe45bdf97ba961feea0adb2a1c518ab5f3de9f5362e1b446810d5b419261b datapathConfiguration="&{false false false false false }" interface=lxca672497929b2 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35abe45bdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=215 ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35abe45bdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=215 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=35abe45bdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=215 identity=34025 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=35abe45bdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=215 identity=34025 ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=05f9441693 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=271 identity=3554 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=05f9441693 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=271 identity=3554 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=35abe45bdf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=215 identity=34025 ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=35abe45bdf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=215 identity=34025 ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.188 e69d06e7-9ab7-4ada-879f-98b691f235b1 default }" containerID=6b1f59a14763e9095a1b47aec40f10da8489a925f562e54b39e0d87dca506e1b datapathConfiguration="&{false false false false false }" interface=lxc692daf202772 k8sPodName=monitoring/vector-hxg6d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b1f59a147 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2581 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/vector-hxg6d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b1f59a147 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2581 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/vector-hxg6d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6b1f59a147 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2581 identity=19438 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/vector-hxg6d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b1f59a147 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2581 identity=19438 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/vector-hxg6d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6b1f59a147 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2581 identity=19438 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/vector-hxg6d subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b1f59a147 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2581 identity=19438 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/vector-hxg6d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dbd3d386bc endpointID=1866 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2f1fa5bd-07c3-498e-9d53-a5860d84f387 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=dbd3d386bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1866 identity=5443 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f1fa5bd-07c3-498e-9d53-a5860d84f387 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.213 7c9dbef3-aa71-4370-8f6d-5634bbf7a657 default }" containerID=5ec15fb87e02ad6f20bfd4217ab7c1878077aacd2ca8d25b617d4fae775cde38 datapathConfiguration="&{false false false false false }" interface=lxc8a4f1cf5d7fb k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ec15fb87e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1249 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ec15fb87e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1249 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ec15fb87e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1249 identity=11261 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5ec15fb87e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1249 identity=11261 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5ec15fb87e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1249 identity=11261 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ec15fb87e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1249 identity=11261 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.254 67a6d3da-09ab-41d2-aba1-7b9f5e657df0 default }" containerID=f624f31e9dd912cffccc44c74fe2ce41ccfeb48282f5182e29dd596dac91983f datapathConfiguration="&{false false false false false }" interface=lxc63cd2ca928a9 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5g2j7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f624f31e9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2004 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5g2j7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f624f31e9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2004 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5g2j7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f624f31e9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2004 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5g2j7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f624f31e9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2004 identity=33945 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5g2j7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f624f31e9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2004 identity=33945 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5g2j7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f624f31e9d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2004 identity=33945 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5g2j7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f624f31e9d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2004 identity=33945 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5g2j7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.20 0f791f13-d955-49db-af58-7e4fbbbb9026 default }" containerID=4af389beabfd9ea3ad55e1e1ba1926f5f08423214f9e23daf433260a80dc3909 datapathConfiguration="&{false false false false false }" interface=lxcb07970c1503d k8sPodName=openstack/memcached-memcached-6479589586-phwpb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4af389beab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3042 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-phwpb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4af389beab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3042 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-phwpb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4af389beab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3042 identity=50734 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-phwpb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4af389beab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3042 identity=50734 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-phwpb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4af389beab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3042 identity=50734 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-phwpb subsys=endpoint level=info msg="Successful endpoint creation" containerID=4af389beab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3042 identity=50734 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-phwpb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.71 739f5d2c-f7e8-4a71-941b-a23e865eb83c default }" containerID=b44ff5f9def0ab3cb5f20f5b46947f7c790b10a02b9f5af773247bd527ef3b41 datapathConfiguration="&{false false false false false }" interface=lxc11feb7a123cd k8sPodName=local-path-storage/helper-pod-create-pvc-d38b106d-dab3-4466-8573-9f7b90bca00f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b44ff5f9de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1632 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d38b106d-dab3-4466-8573-9f7b90bca00f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b44ff5f9de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1632 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d38b106d-dab3-4466-8573-9f7b90bca00f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b44ff5f9de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1632 identity=5443 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d38b106d-dab3-4466-8573-9f7b90bca00f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b44ff5f9de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1632 identity=5443 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d38b106d-dab3-4466-8573-9f7b90bca00f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b44ff5f9de datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1632 identity=5443 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d38b106d-dab3-4466-8573-9f7b90bca00f subsys=endpoint level=info msg="Successful endpoint creation" containerID=b44ff5f9de datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1632 identity=5443 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d38b106d-dab3-4466-8573-9f7b90bca00f subsys=daemon level=info msg="Delete endpoint request" containerID=b44ff5f9de endpointID=1632 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d38b106d-dab3-4466-8573-9f7b90bca00f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b44ff5f9de datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1632 identity=5443 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d38b106d-dab3-4466-8573-9f7b90bca00f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 4ee5914c-ff1f-4ae6-95b6-7dc6dd15e3ff default }" containerID=d167e9676250338cd469268acd618d0f3d80ec0e4a7d81abffae11124f331019 datapathConfiguration="&{false false false false false }" interface=lxc0c14019412bc k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d167e96762 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=883 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d167e96762 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=883 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d167e96762 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=883 identity=56663 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d167e96762 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=883 identity=56663 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d167e96762 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=883 identity=56663 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d167e96762 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=883 identity=56663 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.89 a2d160dd-1875-4a10-a621-00926d7543df default }" containerID=51cb6bb35ca617e9a6e475e05b31aac8f87abf01993a73d5e9c90a63086dc18e datapathConfiguration="&{false false false false false }" interface=lxcf92c054d257a k8sPodName=openstack/keystone-credential-setup-zq8jf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51cb6bb35c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2925 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-credential-setup-zq8jf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51cb6bb35c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2925 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=79a4ecf0-989f-4715-984c-dff3f71b0365,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=79a4ecf0-989f-4715-984c-dff3f71b0365,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-credential-setup-zq8jf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=79a4ecf0-989f-4715-984c-dff3f71b0365;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=79a4ecf0-989f-4715-984c-dff3f71b0365;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=51cb6bb35c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2925 identity=13161 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=79a4ecf0-989f-4715-984c-dff3f71b0365,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=79a4ecf0-989f-4715-984c-dff3f71b0365,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-credential-setup-zq8jf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51cb6bb35c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2925 identity=13161 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-credential-setup-zq8jf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=51cb6bb35c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2925 identity=13161 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-credential-setup-zq8jf subsys=endpoint level=info msg="Successful endpoint creation" containerID=51cb6bb35c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2925 identity=13161 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-credential-setup-zq8jf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.166 df40cb3b-2d44-4c15-8ecf-c31c66b7196d default }" containerID=ff44382d55dd951806ae089869890a2e493b766290cedbb4cf007c60409766ce datapathConfiguration="&{false false false false false }" interface=lxc0075e2551937 k8sPodName=openstack/keystone-api-fc5b9f9db-b5xtc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff44382d55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-api-fc5b9f9db-b5xtc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff44382d55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-api-fc5b9f9db-b5xtc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff44382d55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 identity=2239 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-api-fc5b9f9db-b5xtc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ff44382d55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 identity=2239 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-api-fc5b9f9db-b5xtc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ff44382d55 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=712 identity=2239 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-api-fc5b9f9db-b5xtc subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff44382d55 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=712 identity=2239 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-api-fc5b9f9db-b5xtc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=51cb6bb35c endpointID=2925 k8sNamespace=openstack k8sPodName=keystone-credential-setup-zq8jf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=79a4ecf0-989f-4715-984c-dff3f71b0365 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=79a4ecf0-989f-4715-984c-dff3f71b0365 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=51cb6bb35c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2925 identity=13161 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-credential-setup-zq8jf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 b9d7799d-26a5-4d62-81c2-8b4f9f42bc75 default }" containerID=ef7f0c75eeffe5f9306ad3b81034ff9e87ffe1e2efbb6ba4b05b5c4836f43485 datapathConfiguration="&{false false false false false }" interface=lxcc90544e4c9d2 k8sPodName=openstack/keystone-db-init-z5q6x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef7f0c75ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=993 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-db-init-z5q6x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef7f0c75ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=993 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a86b7142-1fed-456a-a990-e35fff41201b,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=a86b7142-1fed-456a-a990-e35fff41201b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-db-init-z5q6x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a86b7142-1fed-456a-a990-e35fff41201b;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=a86b7142-1fed-456a-a990-e35fff41201b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=ef7f0c75ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=993 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-db-init-z5q6x line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ef7f0c75ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=993 identity=2927 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a86b7142-1fed-456a-a990-e35fff41201b,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=a86b7142-1fed-456a-a990-e35fff41201b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-db-init-z5q6x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef7f0c75ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=993 identity=2927 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-db-init-z5q6x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ef7f0c75ee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=993 identity=2927 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-db-init-z5q6x subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef7f0c75ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=993 identity=2927 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-db-init-z5q6x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ef7f0c75ee endpointID=993 k8sNamespace=openstack k8sPodName=keystone-db-init-z5q6x subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a86b7142-1fed-456a-a990-e35fff41201b k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=a86b7142-1fed-456a-a990-e35fff41201b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ef7f0c75ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=993 identity=2927 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-db-init-z5q6x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 0155ef1d-a0b9-44ca-840c-705fc9780d92 default }" containerID=f1894036e0a2db5144a4a28c16d41bc87a571e0510b5b82213e45bfca099387c datapathConfiguration="&{false false false false false }" interface=lxc7878f319e4d1 k8sPodName=openstack/keystone-fernet-setup-rtf65 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f1894036e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=432 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-fernet-setup-rtf65 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f1894036e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=432 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7861e730-d87d-4e7c-89c8-5770d546a34a,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=7861e730-d87d-4e7c-89c8-5770d546a34a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-fernet-setup-rtf65 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f1894036e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=432 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-fernet-setup-rtf65 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7861e730-d87d-4e7c-89c8-5770d546a34a;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=7861e730-d87d-4e7c-89c8-5770d546a34a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f1894036e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=432 identity=9809 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7861e730-d87d-4e7c-89c8-5770d546a34a,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=7861e730-d87d-4e7c-89c8-5770d546a34a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-fernet-setup-rtf65 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f1894036e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=432 identity=9809 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-fernet-setup-rtf65 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f1894036e0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=432 identity=9809 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-fernet-setup-rtf65 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f1894036e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=432 identity=9809 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-fernet-setup-rtf65 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f1894036e0 endpointID=432 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-rtf65 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7861e730-d87d-4e7c-89c8-5770d546a34a k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=7861e730-d87d-4e7c-89c8-5770d546a34a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f1894036e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=432 identity=9809 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-fernet-setup-rtf65 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 71630fcd-ecac-415a-a5ec-dfe86d4f6f00 default }" containerID=3d42bba0a8c621a39d72edb681cf8d27a9ce5f00835e7a3f8675f90cf5c19bb4 datapathConfiguration="&{false false false false false }" interface=lxcef37aafd840a k8sPodName=openstack/keystone-db-sync-hlv48 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d42bba0a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2017 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-db-sync-hlv48 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d42bba0a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2017 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=79cb4e5d-b62a-479e-a172-150652b65aed,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=79cb4e5d-b62a-479e-a172-150652b65aed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-db-sync-hlv48 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=79cb4e5d-b62a-479e-a172-150652b65aed;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=79cb4e5d-b62a-479e-a172-150652b65aed;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3d42bba0a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2017 identity=7186 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=79cb4e5d-b62a-479e-a172-150652b65aed,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=79cb4e5d-b62a-479e-a172-150652b65aed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-db-sync-hlv48 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3d42bba0a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2017 identity=7186 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-db-sync-hlv48 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3d42bba0a8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2017 identity=7186 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-db-sync-hlv48 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d42bba0a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2017 identity=7186 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-db-sync-hlv48 subsys=daemon level=info msg="Delete endpoint request" containerID=3d42bba0a8 endpointID=2017 k8sNamespace=openstack k8sPodName=keystone-db-sync-hlv48 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=79cb4e5d-b62a-479e-a172-150652b65aed k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=79cb4e5d-b62a-479e-a172-150652b65aed k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3d42bba0a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2017 identity=7186 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-db-sync-hlv48 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 d324c01b-5bfe-49db-880f-0fa7cdc08b22 default }" containerID=8ef04b3c539cfdcade945f0b3fed0dadbad9ae936801a6bed2ad123f88d25b4d datapathConfiguration="&{false false false false false }" interface=lxc698034a7bcf5 k8sPodName=openstack/keystone-rabbit-init-pzd2k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ef04b3c53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3566 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-rabbit-init-pzd2k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ef04b3c53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3566 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d3d9a331-15eb-4278-994d-ae597b97a365,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d3d9a331-15eb-4278-994d-ae597b97a365,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-rabbit-init-pzd2k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d3d9a331-15eb-4278-994d-ae597b97a365;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=d3d9a331-15eb-4278-994d-ae597b97a365;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=8ef04b3c53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3566 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-rabbit-init-pzd2k line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8ef04b3c53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3566 identity=11005 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d3d9a331-15eb-4278-994d-ae597b97a365,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d3d9a331-15eb-4278-994d-ae597b97a365,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-rabbit-init-pzd2k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ef04b3c53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3566 identity=11005 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-rabbit-init-pzd2k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8ef04b3c53 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3566 identity=11005 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-rabbit-init-pzd2k subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ef04b3c53 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3566 identity=11005 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-rabbit-init-pzd2k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8ef04b3c53 endpointID=3566 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-pzd2k subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d3d9a331-15eb-4278-994d-ae597b97a365 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=d3d9a331-15eb-4278-994d-ae597b97a365 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8ef04b3c53 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3566 identity=11005 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-rabbit-init-pzd2k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.60 027f742f-f585-4853-bc20-3bf088dc9713 default }" containerID=f0990cdd3dafdad744eea15b2c2b4fecf0ebba2463d0f9f3563337b77cca1b41 datapathConfiguration="&{false false false false false }" interface=lxc29ba292fe480 k8sPodName=openstack/keystone-domain-manage-lpxfl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f0990cdd3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1989 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-lpxfl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f0990cdd3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1989 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f7e9a592-4399-4234-8093-55d85ebb948e,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=f7e9a592-4399-4234-8093-55d85ebb948e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-lpxfl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f7e9a592-4399-4234-8093-55d85ebb948e;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=f7e9a592-4399-4234-8093-55d85ebb948e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f0990cdd3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1989 identity=50777 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f7e9a592-4399-4234-8093-55d85ebb948e,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=f7e9a592-4399-4234-8093-55d85ebb948e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-lpxfl oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f0990cdd3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1989 identity=50777 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-lpxfl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f0990cdd3d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1989 identity=50777 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-lpxfl subsys=endpoint level=info msg="Successful endpoint creation" containerID=f0990cdd3d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1989 identity=50777 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-lpxfl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f0990cdd3d endpointID=1989 k8sNamespace=openstack k8sPodName=keystone-domain-manage-lpxfl subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f7e9a592-4399-4234-8093-55d85ebb948e k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=f7e9a592-4399-4234-8093-55d85ebb948e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f0990cdd3d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1989 identity=50777 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-lpxfl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 b2a93ed3-be89-4611-b0f0-46236b3fe397 default }" containerID=d379934bced4b4039a537ebcd75aff332554de4c1e5942bf9c0d5688e8b1f72c datapathConfiguration="&{false false false false false }" interface=lxcae2c146e88fd k8sPodName=openstack/keystone-bootstrap-4wb8n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d379934bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/keystone-bootstrap-4wb8n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d379934bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0226486f-77cc-41a6-a67e-a3646eda2498,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=0226486f-77cc-41a6-a67e-a3646eda2498,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/keystone-bootstrap-4wb8n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0226486f-77cc-41a6-a67e-a3646eda2498;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=0226486f-77cc-41a6-a67e-a3646eda2498;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d379934bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identity=55002 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0226486f-77cc-41a6-a67e-a3646eda2498,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=0226486f-77cc-41a6-a67e-a3646eda2498,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/keystone-bootstrap-4wb8n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d379934bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identity=55002 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/keystone-bootstrap-4wb8n subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d379934bce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=829 identity=55002 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/keystone-bootstrap-4wb8n subsys=endpoint level=info msg="Successful endpoint creation" containerID=d379934bce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=829 identity=55002 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/keystone-bootstrap-4wb8n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d379934bce endpointID=829 k8sNamespace=openstack k8sPodName=keystone-bootstrap-4wb8n subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0226486f-77cc-41a6-a67e-a3646eda2498 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=0226486f-77cc-41a6-a67e-a3646eda2498 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d379934bce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=829 identity=55002 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/keystone-bootstrap-4wb8n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 e6144971-4d4c-48f6-a5bf-3c61de60e06b default }" containerID=033e14a3b9b48dfd747c08083066c6f9ec7822e9df9bdca98607e648fa4318cc datapathConfiguration="&{false false false false false }" interface=lxcb9fa5f962a2f k8sPodName=local-path-storage/helper-pod-create-pvc-08a585c0-e8e1-4f73-b246-a529518c8116 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=033e14a3b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3768 ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-08a585c0-e8e1-4f73-b246-a529518c8116 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=033e14a3b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3768 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-08a585c0-e8e1-4f73-b246-a529518c8116 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=033e14a3b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3768 identity=5443 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-08a585c0-e8e1-4f73-b246-a529518c8116 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=033e14a3b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3768 identity=5443 ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-08a585c0-e8e1-4f73-b246-a529518c8116 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=033e14a3b9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3768 identity=5443 ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-08a585c0-e8e1-4f73-b246-a529518c8116 subsys=endpoint level=info msg="Successful endpoint creation" containerID=033e14a3b9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3768 identity=5443 ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-08a585c0-e8e1-4f73-b246-a529518c8116 subsys=daemon level=info msg="Delete endpoint request" containerID=033e14a3b9 endpointID=3768 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-08a585c0-e8e1-4f73-b246-a529518c8116 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=033e14a3b9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3768 identity=5443 ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-08a585c0-e8e1-4f73-b246-a529518c8116 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 f1f50ea3-bc5a-4b9b-b6c9-ddcc019b0c68 default }" containerID=feea89088bedce9d1328ef41a01e28e5edb2c48ebf52743a453b6f614f2b407b datapathConfiguration="&{false false false false false }" interface=lxc368f9cbaabf9 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=feea89088b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3309 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=feea89088b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3309 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=feea89088b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3309 identity=21881 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=feea89088b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3309 identity=21881 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=feea89088b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3309 identity=21881 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=feea89088b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3309 identity=21881 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.100 3569c668-a2ae-4aa0-93cc-01ef500661ae default }" containerID=9e50f1613b509d03be9515e5f5cc9858cdce444a2bf5f4bffa8f562a9184958d datapathConfiguration="&{false false false false false }" interface=lxcc2fcc7a62689 k8sPodName=openstack/barbican-api-57758bbf46-tn8vk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e50f1613b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2627 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/barbican-api-57758bbf46-tn8vk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e50f1613b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2627 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/barbican-api-57758bbf46-tn8vk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e50f1613b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2627 identity=30927 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/barbican-api-57758bbf46-tn8vk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e50f1613b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2627 identity=30927 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/barbican-api-57758bbf46-tn8vk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.78 7c8d1920-6abd-43a8-b99f-a88ec7fb631e default }" containerID=70753e42d198323df29ef532037881f58f92baf4d6acd86ba10658aadbf06f5a datapathConfiguration="&{false false false false false }" interface=lxc2746fd646c11 k8sPodName=openstack/barbican-db-init-qhwtx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=70753e42d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/barbican-db-init-qhwtx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=70753e42d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7d17158d-9957-4bc3-80cb-b63d07197ab4,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=7d17158d-9957-4bc3-80cb-b63d07197ab4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/barbican-db-init-qhwtx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=7d17158d-9957-4bc3-80cb-b63d07197ab4;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=7d17158d-9957-4bc3-80cb-b63d07197ab4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=70753e42d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 identity=47210 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7d17158d-9957-4bc3-80cb-b63d07197ab4,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=7d17158d-9957-4bc3-80cb-b63d07197ab4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/barbican-db-init-qhwtx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=70753e42d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 identity=47210 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/barbican-db-init-qhwtx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e50f1613b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2627 identity=30927 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/barbican-api-57758bbf46-tn8vk subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e50f1613b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2627 identity=30927 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/barbican-api-57758bbf46-tn8vk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=70753e42d1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=289 identity=47210 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/barbican-db-init-qhwtx subsys=endpoint level=info msg="Successful endpoint creation" containerID=70753e42d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=289 identity=47210 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/barbican-db-init-qhwtx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=70753e42d1 endpointID=289 k8sNamespace=openstack k8sPodName=barbican-db-init-qhwtx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=7d17158d-9957-4bc3-80cb-b63d07197ab4 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=7d17158d-9957-4bc3-80cb-b63d07197ab4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=70753e42d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=289 identity=47210 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/barbican-db-init-qhwtx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.235 5602dce2-357d-492c-8e71-23dde8a12c68 default }" containerID=68a6f5e4700f1281572c3ccf9c8402fd11244129cbeab68df648dd6d6f2b71ee datapathConfiguration="&{false false false false false }" interface=lxcdf746f56eaf2 k8sPodName=openstack/barbican-db-sync-7564t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68a6f5e470 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-db-sync-7564t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68a6f5e470 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5c70e646-2405-4a2a-a455-a5044313aff7,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=5c70e646-2405-4a2a-a455-a5044313aff7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-db-sync-7564t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5c70e646-2405-4a2a-a455-a5044313aff7;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=5c70e646-2405-4a2a-a455-a5044313aff7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=68a6f5e470 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 identity=36544 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5c70e646-2405-4a2a-a455-a5044313aff7,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=5c70e646-2405-4a2a-a455-a5044313aff7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-db-sync-7564t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68a6f5e470 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 identity=36544 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-db-sync-7564t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=68a6f5e470 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=337 identity=36544 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-db-sync-7564t subsys=endpoint level=info msg="Successful endpoint creation" containerID=68a6f5e470 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=337 identity=36544 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-db-sync-7564t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=68a6f5e470 endpointID=337 k8sNamespace=openstack k8sPodName=barbican-db-sync-7564t subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5c70e646-2405-4a2a-a455-a5044313aff7 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=5c70e646-2405-4a2a-a455-a5044313aff7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=68a6f5e470 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=337 identity=36544 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-db-sync-7564t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 9e210f83-884b-4dfd-b1d0-0a44219249d7 default }" containerID=83dc2404fdcdc574db8cf223d210e203230100977669b263694ea0b158b008a2 datapathConfiguration="&{false false false false false }" interface=lxce78f3af80b74 k8sPodName=openstack/barbican-rabbit-init-m5z7k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=83dc2404fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/barbican-rabbit-init-m5z7k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=83dc2404fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=49c4c723-96ab-48b0-ae28-2cc6ec97a7aa,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=49c4c723-96ab-48b0-ae28-2cc6ec97a7aa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/barbican-rabbit-init-m5z7k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=83dc2404fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.174 ipv6= k8sPodName=openstack/barbican-rabbit-init-m5z7k line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=49c4c723-96ab-48b0-ae28-2cc6ec97a7aa;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=49c4c723-96ab-48b0-ae28-2cc6ec97a7aa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=83dc2404fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 identity=41101 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=49c4c723-96ab-48b0-ae28-2cc6ec97a7aa,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=49c4c723-96ab-48b0-ae28-2cc6ec97a7aa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/barbican-rabbit-init-m5z7k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=83dc2404fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 identity=41101 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/barbican-rabbit-init-m5z7k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=83dc2404fd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=94 identity=41101 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/barbican-rabbit-init-m5z7k subsys=endpoint level=info msg="Successful endpoint creation" containerID=83dc2404fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=94 identity=41101 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/barbican-rabbit-init-m5z7k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.035886753148376103 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=83dc2404fd endpointID=94 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-m5z7k subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=49c4c723-96ab-48b0-ae28-2cc6ec97a7aa k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=49c4c723-96ab-48b0-ae28-2cc6ec97a7aa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=83dc2404fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=94 identity=41101 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/barbican-rabbit-init-m5z7k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 a8b93248-096f-4e72-b439-66647873e60d default }" containerID=bcf2c329afb4f73a2e420fc4bf00510d34809595aade6833d3f5b0b8ef177ab1 datapathConfiguration="&{false false false false false }" interface=lxcd8fa24898674 k8sPodName=openstack/barbican-ks-service-hrszc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bcf2c329af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=67 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-ks-service-hrszc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bcf2c329af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=67 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5ce61364-9bc7-4326-9154-1f9715101b33,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=5ce61364-9bc7-4326-9154-1f9715101b33,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-ks-service-hrszc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=bcf2c329af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=67 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-ks-service-hrszc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5ce61364-9bc7-4326-9154-1f9715101b33;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=5ce61364-9bc7-4326-9154-1f9715101b33;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bcf2c329af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=67 identity=28220 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5ce61364-9bc7-4326-9154-1f9715101b33,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=5ce61364-9bc7-4326-9154-1f9715101b33,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-ks-service-hrszc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bcf2c329af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=67 identity=28220 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-ks-service-hrszc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bcf2c329af datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=67 identity=28220 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-ks-service-hrszc subsys=endpoint level=info msg="Successful endpoint creation" containerID=bcf2c329af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=67 identity=28220 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-ks-service-hrszc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bcf2c329af endpointID=67 k8sNamespace=openstack k8sPodName=barbican-ks-service-hrszc subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5ce61364-9bc7-4326-9154-1f9715101b33 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=5ce61364-9bc7-4326-9154-1f9715101b33 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=bcf2c329af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=67 identity=28220 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-ks-service-hrszc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 7e33413e-d8d3-4f38-8137-4804229fe438 default }" containerID=68d7ff590dc71aaac47ac6345cbf1005fd8c7656c2b8cbbf2f50174ded5abc29 datapathConfiguration="&{false false false false false }" interface=lxc46864113c7d0 k8sPodName=openstack/barbican-ks-endpoints-gbgsj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68d7ff590d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=619 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gbgsj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68d7ff590d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=619 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=fe0f9dd1-8b27-4e87-b082-b559e9a86efb,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=fe0f9dd1-8b27-4e87-b082-b559e9a86efb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gbgsj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=fe0f9dd1-8b27-4e87-b082-b559e9a86efb;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=fe0f9dd1-8b27-4e87-b082-b559e9a86efb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68d7ff590d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=619 identity=28986 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=fe0f9dd1-8b27-4e87-b082-b559e9a86efb,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=fe0f9dd1-8b27-4e87-b082-b559e9a86efb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gbgsj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68d7ff590d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=619 identity=28986 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gbgsj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=68d7ff590d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=619 identity=28986 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gbgsj subsys=endpoint level=info msg="Successful endpoint creation" containerID=68d7ff590d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=619 identity=28986 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gbgsj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=68d7ff590d endpointID=619 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-gbgsj subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=fe0f9dd1-8b27-4e87-b082-b559e9a86efb k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=fe0f9dd1-8b27-4e87-b082-b559e9a86efb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=68d7ff590d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=619 identity=28986 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gbgsj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 0549058f-453a-48f2-b3e1-d4d872da14d5 default }" containerID=81b333f35edac9a40c13ed89e70527115981ee63ec0728d388e35b1e71abe62b datapathConfiguration="&{false false false false false }" interface=lxc01c43cb40ad5 k8sPodName=openstack/barbican-ks-user-5zs95 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81b333f35e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3222 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-ks-user-5zs95 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81b333f35e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3222 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=23d89149-de36-4873-b901-d432c721c190,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=23d89149-de36-4873-b901-d432c721c190,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-ks-user-5zs95 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=23d89149-de36-4873-b901-d432c721c190;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=23d89149-de36-4873-b901-d432c721c190;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81b333f35e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3222 identity=49585 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=23d89149-de36-4873-b901-d432c721c190,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=23d89149-de36-4873-b901-d432c721c190,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-ks-user-5zs95 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=81b333f35e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3222 identity=49585 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-ks-user-5zs95 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=81b333f35e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3222 identity=49585 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-ks-user-5zs95 subsys=endpoint level=info msg="Successful endpoint creation" containerID=81b333f35e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3222 identity=49585 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-ks-user-5zs95 subsys=daemon level=info msg="Delete endpoint request" containerID=81b333f35e endpointID=3222 k8sNamespace=openstack k8sPodName=barbican-ks-user-5zs95 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=23d89149-de36-4873-b901-d432c721c190 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=23d89149-de36-4873-b901-d432c721c190 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=81b333f35e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3222 identity=49585 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-ks-user-5zs95 subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.151 575e7f39-b667-4c07-8e9a-33f712287810 default }" containerID=53f687987a24d4e9d9535458a6078cd571ffde377fcd0f846cad480199d139e6 datapathConfiguration="&{false false false false false }" interface=lxcd063ebb06324 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-qc4lh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=53f687987a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3250 ipv4=10.0.0.151 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-qc4lh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=53f687987a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3250 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.151 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-qc4lh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=53f687987a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3250 identity=533 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.151 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-qc4lh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=53f687987a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3250 identity=533 ipv4=10.0.0.151 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-qc4lh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=53f687987a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3250 identity=533 ipv4=10.0.0.151 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-qc4lh subsys=endpoint level=info msg="Successful endpoint creation" containerID=53f687987a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3250 identity=533 ipv4=10.0.0.151 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-qc4lh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.34 e695f880-e3af-4a06-b309-31d2136ff599 default }" containerID=1c0edaaaafaf07449f4f75c40faa595b7c23754fb862eb78dd4f206f132b35e3 datapathConfiguration="&{false false false false false }" interface=lxc686ad3ceaf8a k8sPodName=openstack/rook-ceph-detect-version-jmj4l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c0edaaaaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1124 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jmj4l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c0edaaaaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1124 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=0cd542cf-5a0f-46f5-8514-b0d8bd248caa,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=0cd542cf-5a0f-46f5-8514-b0d8bd248caa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jmj4l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=0cd542cf-5a0f-46f5-8514-b0d8bd248caa;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=0cd542cf-5a0f-46f5-8514-b0d8bd248caa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1c0edaaaaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1124 identity=6325 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=0cd542cf-5a0f-46f5-8514-b0d8bd248caa,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=0cd542cf-5a0f-46f5-8514-b0d8bd248caa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jmj4l oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1c0edaaaaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1124 identity=6325 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jmj4l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1c0edaaaaf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1124 identity=6325 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jmj4l subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c0edaaaaf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1124 identity=6325 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jmj4l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1c0edaaaaf endpointID=1124 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-jmj4l subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=0cd542cf-5a0f-46f5-8514-b0d8bd248caa k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=0cd542cf-5a0f-46f5-8514-b0d8bd248caa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=1c0edaaaaf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1124 identity=6325 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jmj4l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 9246ea2b-55b7-493a-bbe5-605ac7639ba8 default }" containerID=caf5e000075a53fad5f193579d4e971b4f2331887b706ebd1abccb364c2e7c74 datapathConfiguration="&{false false false false false }" interface=lxc60eaa15f46b6 k8sPodName=openstack/ceph-object-controller-detect-version-zzwdl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=caf5e00007 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=312 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zzwdl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=caf5e00007 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=312 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=e55344c5-5075-4a68-85b9-96a849ca186e,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=e55344c5-5075-4a68-85b9-96a849ca186e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zzwdl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=e55344c5-5075-4a68-85b9-96a849ca186e;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=e55344c5-5075-4a68-85b9-96a849ca186e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=caf5e00007 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=312 identity=38080 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=e55344c5-5075-4a68-85b9-96a849ca186e,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=e55344c5-5075-4a68-85b9-96a849ca186e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zzwdl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=caf5e00007 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=312 identity=38080 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zzwdl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=caf5e00007 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=312 identity=38080 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zzwdl subsys=endpoint level=info msg="Successful endpoint creation" containerID=caf5e00007 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=312 identity=38080 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zzwdl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=caf5e00007 endpointID=312 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-zzwdl subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=e55344c5-5075-4a68-85b9-96a849ca186e k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=e55344c5-5075-4a68-85b9-96a849ca186e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=caf5e00007 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=312 identity=38080 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zzwdl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 24674519-810d-4d5b-bbda-0e7eb5b745ec default }" containerID=8ed10315af32ab180dae44969cda4bf3b75f1ce3c9fd0a52a0b91c13c967e4e3 datapathConfiguration="&{false false false false false }" interface=lxc64c88cb09832 k8sPodName=local-path-storage/helper-pod-create-pvc-aa3b61ee-393c-46a6-af14-9a32227dcf55 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ed10315af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2064 ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa3b61ee-393c-46a6-af14-9a32227dcf55 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ed10315af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2064 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa3b61ee-393c-46a6-af14-9a32227dcf55 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ed10315af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2064 identity=5443 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa3b61ee-393c-46a6-af14-9a32227dcf55 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ed10315af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2064 identity=5443 ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa3b61ee-393c-46a6-af14-9a32227dcf55 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8ed10315af datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2064 identity=5443 ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa3b61ee-393c-46a6-af14-9a32227dcf55 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ed10315af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2064 identity=5443 ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa3b61ee-393c-46a6-af14-9a32227dcf55 subsys=daemon level=info msg="Delete endpoint request" containerID=8ed10315af endpointID=2064 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-aa3b61ee-393c-46a6-af14-9a32227dcf55 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8ed10315af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2064 identity=5443 ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa3b61ee-393c-46a6-af14-9a32227dcf55 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 8e749b9a-c9c5-4d96-8adb-7f58acb5bff7 default }" containerID=eb5c0b648396add2b8c0b43cd05477c3105a1b18949f3fb179b84a8e6aebd0e5 datapathConfiguration="&{false false false false false }" interface=lxced0179d455d7 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb5c0b6483 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3741 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb5c0b6483 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3741 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=eb5c0b6483 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3741 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=eb5c0b6483 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3741 identity=29240 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eb5c0b6483 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3741 identity=29240 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eb5c0b6483 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3741 identity=29240 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb5c0b6483 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3741 identity=29240 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.129 0ebc7ae7-7b97-43ef-9553-15f81e0f4c8c default }" containerID=c5323d9dbbc8dd8a79b070234c054af64ce1844c8d4a4e96d4505534bd7a535d datapathConfiguration="&{false false false false false }" interface=lxcc55748d5e5fb k8sPodName=openstack/glance-db-init-k9tch labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c5323d9dbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4057 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/glance-db-init-k9tch subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c5323d9dbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4057 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=10a5f401-d3d1-40c8-b2f1-83a97d488048,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=10a5f401-d3d1-40c8-b2f1-83a97d488048,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/glance-db-init-k9tch subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=10a5f401-d3d1-40c8-b2f1-83a97d488048;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=10a5f401-d3d1-40c8-b2f1-83a97d488048;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c5323d9dbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4057 identity=49093 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=10a5f401-d3d1-40c8-b2f1-83a97d488048,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=10a5f401-d3d1-40c8-b2f1-83a97d488048,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/glance-db-init-k9tch oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c5323d9dbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4057 identity=49093 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/glance-db-init-k9tch subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c5323d9dbb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4057 identity=49093 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/glance-db-init-k9tch subsys=endpoint level=info msg="Successful endpoint creation" containerID=c5323d9dbb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4057 identity=49093 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/glance-db-init-k9tch subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c5323d9dbb endpointID=4057 k8sNamespace=openstack k8sPodName=glance-db-init-k9tch subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=10a5f401-d3d1-40c8-b2f1-83a97d488048 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=10a5f401-d3d1-40c8-b2f1-83a97d488048 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c5323d9dbb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4057 identity=49093 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/glance-db-init-k9tch subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.239 87a5c261-33c9-4f25-80e0-5766dcc19361 default }" containerID=758ea0d3a6bd9e8442159c82eaf608113dec14e38cfdbc9d8fb4ab4efa483f59 datapathConfiguration="&{false false false false false }" interface=lxc3dd1f6c09bcf k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xwwt8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=758ea0d3a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xwwt8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=758ea0d3a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xwwt8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=758ea0d3a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 identity=10798 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xwwt8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=758ea0d3a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 identity=10798 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xwwt8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.227 f9c96179-0621-45ef-a3a6-c4a3fba04e3e default }" containerID=dc4869d70616b4a8b8adda9517dd1735711c3763cada89b01f418683fb81c0af datapathConfiguration="&{false false false false false }" interface=lxc670899c6c4f4 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-mdj8v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc4869d706 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1462 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-mdj8v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc4869d706 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1462 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-mdj8v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc4869d706 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1462 identity=28428 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-mdj8v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc4869d706 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1462 identity=28428 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-mdj8v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=758ea0d3a6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=986 identity=10798 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xwwt8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=758ea0d3a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=986 identity=10798 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xwwt8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=dc4869d706 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1462 identity=28428 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-mdj8v subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc4869d706 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1462 identity=28428 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-mdj8v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.10 cd249221-0b4d-4892-9c7a-a849ca814a79 default }" containerID=241d5ca81520463e4f392f8370e9a12bab1b87ba0ab4b900a0b860c1170ff79b datapathConfiguration="&{false false false false false }" interface=lxc870eb141dd2f k8sPodName=openstack/glance-db-sync-nwn88 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=241d5ca815 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1037 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-db-sync-nwn88 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=241d5ca815 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1037 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9150007b-b3e0-4d35-91fa-2fa74c044bd0,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=9150007b-b3e0-4d35-91fa-2fa74c044bd0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-db-sync-nwn88 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9150007b-b3e0-4d35-91fa-2fa74c044bd0;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=9150007b-b3e0-4d35-91fa-2fa74c044bd0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=241d5ca815 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1037 identity=7907 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9150007b-b3e0-4d35-91fa-2fa74c044bd0,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=9150007b-b3e0-4d35-91fa-2fa74c044bd0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-db-sync-nwn88 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=241d5ca815 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1037 identity=7907 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-db-sync-nwn88 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=241d5ca815 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1037 identity=7907 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-db-sync-nwn88 subsys=endpoint level=info msg="Successful endpoint creation" containerID=241d5ca815 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1037 identity=7907 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-db-sync-nwn88 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=241d5ca815 endpointID=1037 k8sNamespace=openstack k8sPodName=glance-db-sync-nwn88 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9150007b-b3e0-4d35-91fa-2fa74c044bd0 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=9150007b-b3e0-4d35-91fa-2fa74c044bd0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=241d5ca815 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1037 identity=7907 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-db-sync-nwn88 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.231 a4c57185-593c-476b-a271-3cd8079b4d6b default }" containerID=baac7d6b1b172f4537f387fb336d99714eb10d6049f04d973432a84a144f99e6 datapathConfiguration="&{false false false false false }" interface=lxc1cdbb08bcb08 k8sPodName=openstack/glance-rabbit-init-s4lfq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=baac7d6b1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/glance-rabbit-init-s4lfq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=baac7d6b1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=20e50553-308b-488c-94c3-e5c456d95497,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=20e50553-308b-488c-94c3-e5c456d95497,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/glance-rabbit-init-s4lfq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=20e50553-308b-488c-94c3-e5c456d95497;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=20e50553-308b-488c-94c3-e5c456d95497;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=baac7d6b1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 identity=17495 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=20e50553-308b-488c-94c3-e5c456d95497,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=20e50553-308b-488c-94c3-e5c456d95497,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/glance-rabbit-init-s4lfq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=baac7d6b1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 identity=17495 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/glance-rabbit-init-s4lfq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=baac7d6b1b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=32 identity=17495 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/glance-rabbit-init-s4lfq subsys=endpoint level=info msg="Successful endpoint creation" containerID=baac7d6b1b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=32 identity=17495 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/glance-rabbit-init-s4lfq subsys=daemon level=info msg="Delete endpoint request" containerID=baac7d6b1b endpointID=32 k8sNamespace=openstack k8sPodName=glance-rabbit-init-s4lfq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=20e50553-308b-488c-94c3-e5c456d95497 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=20e50553-308b-488c-94c3-e5c456d95497 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=baac7d6b1b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=32 identity=17495 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/glance-rabbit-init-s4lfq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 3b9f7fa2-ea34-4645-99ea-fb0a4d56ae95 default }" containerID=110260bd1c6c70c33e98ffe27781b10ebe740c5ff2b66341a426cb316f84c87a datapathConfiguration="&{false false false false false }" interface=lxca30c0d73c6e8 k8sPodName=openstack/glance-ks-service-kzrk9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=110260bd1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3074 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-ks-service-kzrk9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=110260bd1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3074 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6858d019-a29b-476e-8ae3-65b900cb987c,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=6858d019-a29b-476e-8ae3-65b900cb987c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-ks-service-kzrk9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6858d019-a29b-476e-8ae3-65b900cb987c;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=6858d019-a29b-476e-8ae3-65b900cb987c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=110260bd1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3074 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-ks-service-kzrk9 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=110260bd1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3074 identity=16042 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6858d019-a29b-476e-8ae3-65b900cb987c,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=6858d019-a29b-476e-8ae3-65b900cb987c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-ks-service-kzrk9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=110260bd1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3074 identity=16042 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-ks-service-kzrk9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=110260bd1c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3074 identity=16042 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-ks-service-kzrk9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=110260bd1c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3074 identity=16042 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-ks-service-kzrk9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=110260bd1c endpointID=3074 k8sNamespace=openstack k8sPodName=glance-ks-service-kzrk9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6858d019-a29b-476e-8ae3-65b900cb987c k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=6858d019-a29b-476e-8ae3-65b900cb987c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=110260bd1c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3074 identity=16042 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-ks-service-kzrk9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 cd9aeb13-6e72-43af-aaca-ec9ff4c6fa31 default }" containerID=64e7938c8570cdd8038c8978687333e9d3d2a4921d74ba2b67f02738ddefc97a datapathConfiguration="&{false false false false false }" interface=lxca983b558a62c k8sPodName=openstack/glance-ks-endpoints-5stbw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64e7938c85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2184 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-ks-endpoints-5stbw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64e7938c85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2184 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fed1f319-c3b4-4a0f-ac94-d04a27b8bdab,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=fed1f319-c3b4-4a0f-ac94-d04a27b8bdab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-ks-endpoints-5stbw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=fed1f319-c3b4-4a0f-ac94-d04a27b8bdab;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=fed1f319-c3b4-4a0f-ac94-d04a27b8bdab;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=64e7938c85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2184 identity=48161 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fed1f319-c3b4-4a0f-ac94-d04a27b8bdab,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=fed1f319-c3b4-4a0f-ac94-d04a27b8bdab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-ks-endpoints-5stbw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=64e7938c85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2184 identity=48161 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-ks-endpoints-5stbw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=64e7938c85 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2184 identity=48161 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-ks-endpoints-5stbw subsys=endpoint level=info msg="Successful endpoint creation" containerID=64e7938c85 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2184 identity=48161 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-ks-endpoints-5stbw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=64e7938c85 endpointID=2184 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-5stbw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=fed1f319-c3b4-4a0f-ac94-d04a27b8bdab k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=fed1f319-c3b4-4a0f-ac94-d04a27b8bdab k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=64e7938c85 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2184 identity=48161 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-ks-endpoints-5stbw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 7abbfd4c-8e1a-473c-a755-729f2aa7087c default }" containerID=6896d87d1288ea896f04be62f9e365e9ab38e93d466aa96574791aabd39d5683 datapathConfiguration="&{false false false false false }" interface=lxc859a33c3207e k8sPodName=openstack/glance-ks-user-68t48 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6896d87d12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1657 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-user-68t48 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6896d87d12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1657 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3766da84-f5af-48ed-9cb4-510b286b5a27,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=3766da84-f5af-48ed-9cb4-510b286b5a27,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-user-68t48 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3766da84-f5af-48ed-9cb4-510b286b5a27;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=3766da84-f5af-48ed-9cb4-510b286b5a27;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6896d87d12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1657 identity=18991 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3766da84-f5af-48ed-9cb4-510b286b5a27,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=3766da84-f5af-48ed-9cb4-510b286b5a27,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-user-68t48 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6896d87d12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1657 identity=18991 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-user-68t48 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6896d87d12 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1657 identity=18991 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-user-68t48 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6896d87d12 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1657 identity=18991 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-user-68t48 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6896d87d12 endpointID=1657 k8sNamespace=openstack k8sPodName=glance-ks-user-68t48 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3766da84-f5af-48ed-9cb4-510b286b5a27 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=3766da84-f5af-48ed-9cb4-510b286b5a27 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6896d87d12 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1657 identity=18991 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-user-68t48 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 99e4c4c8-5aa5-432b-8d41-74367cf267ee default }" containerID=0370c4b30c7453bb1df3289cc01a02304b0f846cf607ed228305b104e79f461d datapathConfiguration="&{false false false false false }" interface=lxc7a381dd28b78 k8sPodName=openstack/glance-metadefs-load-txvxb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0370c4b30c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1377 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-metadefs-load-txvxb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0370c4b30c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1377 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=57af603f-2b76-4d27-ad21-7a023cde7e7d,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=57af603f-2b76-4d27-ad21-7a023cde7e7d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-metadefs-load-txvxb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=57af603f-2b76-4d27-ad21-7a023cde7e7d;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=57af603f-2b76-4d27-ad21-7a023cde7e7d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=0370c4b30c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1377 identity=2279 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=57af603f-2b76-4d27-ad21-7a023cde7e7d,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=57af603f-2b76-4d27-ad21-7a023cde7e7d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-metadefs-load-txvxb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0370c4b30c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1377 identity=2279 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-metadefs-load-txvxb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0370c4b30c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1377 identity=2279 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-metadefs-load-txvxb subsys=endpoint level=info msg="Successful endpoint creation" containerID=0370c4b30c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1377 identity=2279 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-metadefs-load-txvxb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0370c4b30c endpointID=1377 k8sNamespace=openstack k8sPodName=glance-metadefs-load-txvxb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=57af603f-2b76-4d27-ad21-7a023cde7e7d k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=57af603f-2b76-4d27-ad21-7a023cde7e7d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0370c4b30c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1377 identity=2279 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-metadefs-load-txvxb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 ec985841-117a-4f08-967f-77d65fe1cc92 default }" containerID=6a72ab65c27c2e611b804c5a17c4202f581f3d8f5e20d4503ea72054916f9e8e datapathConfiguration="&{false false false false false }" interface=lxc85b846f2c7e6 k8sPodName=openstack/glance-storage-init-298jf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a72ab65c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-storage-init-298jf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a72ab65c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=30992795-1a15-436e-a81a-857a47d9bea2,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=30992795-1a15-436e-a81a-857a47d9bea2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-storage-init-298jf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6a72ab65c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-storage-init-298jf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=30992795-1a15-436e-a81a-857a47d9bea2;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=30992795-1a15-436e-a81a-857a47d9bea2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a72ab65c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 identity=45705 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=30992795-1a15-436e-a81a-857a47d9bea2,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=30992795-1a15-436e-a81a-857a47d9bea2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-storage-init-298jf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a72ab65c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 identity=45705 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-storage-init-298jf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6a72ab65c2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1269 identity=45705 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-storage-init-298jf subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a72ab65c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1269 identity=45705 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-storage-init-298jf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6a72ab65c2 endpointID=1269 k8sNamespace=openstack k8sPodName=glance-storage-init-298jf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=30992795-1a15-436e-a81a-857a47d9bea2 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=30992795-1a15-436e-a81a-857a47d9bea2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6a72ab65c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1269 identity=45705 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-storage-init-298jf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.88 f4432f5e-f1c7-4011-a670-1d150ff75489 default }" containerID=9abead996ce1fa9b2397874bacf549b7ca0b8da9ddb6f466531c317a9927928c datapathConfiguration="&{false false false false false }" interface=lxc6b52991e015a k8sPodName=openstack/glance-api-5ff9f855b7-fsjp6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9abead996c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2279 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-api-5ff9f855b7-fsjp6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9abead996c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2279 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-api-5ff9f855b7-fsjp6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9abead996c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2279 identity=57127 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-api-5ff9f855b7-fsjp6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9abead996c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2279 identity=57127 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-api-5ff9f855b7-fsjp6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9abead996c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2279 identity=57127 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-api-5ff9f855b7-fsjp6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9abead996c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2279 identity=57127 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-api-5ff9f855b7-fsjp6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.115 2388618c-ddec-4213-846a-3b9e2afe5072 default }" containerID=acefceabd90411008a880dba028ea7d290deb601bdb1e0b16ed6cd34f7d28dac datapathConfiguration="&{false false false false false }" interface=lxcbe435ef6fb7b k8sPodName=openstack/staffeln-conductor-57556f7666-fdh5x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=acefceabd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2066 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/staffeln-conductor-57556f7666-fdh5x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=acefceabd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2066 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/staffeln-conductor-57556f7666-fdh5x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=acefceabd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2066 identity=22256 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/staffeln-conductor-57556f7666-fdh5x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=acefceabd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2066 identity=22256 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/staffeln-conductor-57556f7666-fdh5x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.240 049d45b9-ffce-4f39-b1e7-a55f5ee907e1 default }" containerID=9acf203985d9146ef83b43ed630b339f690ebb6f8d026009766d42b17d5f5d0b datapathConfiguration="&{false false false false false }" interface=lxc62ddb5897edd k8sPodName=openstack/staffeln-api-79669cf49-gzbkn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9acf203985 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2700 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/staffeln-api-79669cf49-gzbkn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9acf203985 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2700 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/staffeln-api-79669cf49-gzbkn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9acf203985 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2700 identity=27057 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/staffeln-api-79669cf49-gzbkn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9acf203985 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2700 identity=27057 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/staffeln-api-79669cf49-gzbkn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.253 09836d03-3caa-4853-af09-0e873edaca15 default }" containerID=23156128f644cfcaacf3f47a7e40c1b95b8cead856d20bb02c050bdd2ad5b9e9 datapathConfiguration="&{false false false false false }" interface=lxc0d029e276d6e k8sPodName=openstack/staffeln-db-init-qz9kh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23156128f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=422 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/staffeln-db-init-qz9kh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23156128f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=422 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=bfd2d46b-24b1-4665-b1f9-28cef32ee509,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=bfd2d46b-24b1-4665-b1f9-28cef32ee509,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/staffeln-db-init-qz9kh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=bfd2d46b-24b1-4665-b1f9-28cef32ee509;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=bfd2d46b-24b1-4665-b1f9-28cef32ee509;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23156128f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=422 identity=7325 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=bfd2d46b-24b1-4665-b1f9-28cef32ee509,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=bfd2d46b-24b1-4665-b1f9-28cef32ee509,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/staffeln-db-init-qz9kh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23156128f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=422 identity=7325 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/staffeln-db-init-qz9kh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=acefceabd9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2066 identity=22256 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/staffeln-conductor-57556f7666-fdh5x subsys=endpoint level=info msg="Successful endpoint creation" containerID=acefceabd9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2066 identity=22256 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/staffeln-conductor-57556f7666-fdh5x subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9acf203985 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2700 identity=27057 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/staffeln-api-79669cf49-gzbkn subsys=endpoint level=info msg="Successful endpoint creation" containerID=9acf203985 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2700 identity=27057 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/staffeln-api-79669cf49-gzbkn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=23156128f6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=422 identity=7325 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/staffeln-db-init-qz9kh subsys=endpoint level=info msg="Successful endpoint creation" containerID=23156128f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=422 identity=7325 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/staffeln-db-init-qz9kh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=23156128f6 endpointID=422 k8sNamespace=openstack k8sPodName=staffeln-db-init-qz9kh subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=bfd2d46b-24b1-4665-b1f9-28cef32ee509 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=bfd2d46b-24b1-4665-b1f9-28cef32ee509 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=23156128f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=422 identity=7325 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/staffeln-db-init-qz9kh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 4ca765a6-3edf-46ea-99e4-43397e827ba8 default }" containerID=96bba3ac119d0f7082bdf364b9486cf01e235a737a6f12ea7431c1f8e9e2c153 datapathConfiguration="&{false false false false false }" interface=lxc768a907a9363 k8sPodName=openstack/staffeln-db-sync-nprfg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96bba3ac11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2130 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/staffeln-db-sync-nprfg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96bba3ac11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2130 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=3f85dc2e-db53-4d88-8087-a0cd406c02b4,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=3f85dc2e-db53-4d88-8087-a0cd406c02b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/staffeln-db-sync-nprfg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=3f85dc2e-db53-4d88-8087-a0cd406c02b4;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=3f85dc2e-db53-4d88-8087-a0cd406c02b4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=96bba3ac11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2130 identity=26918 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=3f85dc2e-db53-4d88-8087-a0cd406c02b4,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=3f85dc2e-db53-4d88-8087-a0cd406c02b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/staffeln-db-sync-nprfg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96bba3ac11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2130 identity=26918 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/staffeln-db-sync-nprfg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=96bba3ac11 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2130 identity=26918 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/staffeln-db-sync-nprfg subsys=endpoint level=info msg="Successful endpoint creation" containerID=96bba3ac11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2130 identity=26918 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/staffeln-db-sync-nprfg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=96bba3ac11 endpointID=2130 k8sNamespace=openstack k8sPodName=staffeln-db-sync-nprfg subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=3f85dc2e-db53-4d88-8087-a0cd406c02b4 k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=3f85dc2e-db53-4d88-8087-a0cd406c02b4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=96bba3ac11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2130 identity=26918 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/staffeln-db-sync-nprfg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.78 7b04e028-95c3-4471-8c1a-18d4b47ac126 default }" containerID=43730e5417c9e500f6bd1caa8eca7f5900e1997acd8a0ed3579d1be2d7f5c121 datapathConfiguration="&{false false false false false }" interface=lxcf92f4cfcee1b k8sPodName=local-path-storage/helper-pod-create-pvc-512b8c59-8377-482f-b806-1c581738c862 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=43730e5417 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=352 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-512b8c59-8377-482f-b806-1c581738c862 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43730e5417 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=352 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-512b8c59-8377-482f-b806-1c581738c862 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=43730e5417 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=352 identity=5443 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-512b8c59-8377-482f-b806-1c581738c862 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=43730e5417 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=352 identity=5443 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-512b8c59-8377-482f-b806-1c581738c862 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=43730e5417 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=352 identity=5443 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-512b8c59-8377-482f-b806-1c581738c862 subsys=endpoint level=info msg="Successful endpoint creation" containerID=43730e5417 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=352 identity=5443 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-512b8c59-8377-482f-b806-1c581738c862 subsys=daemon level=info msg="Delete endpoint request" containerID=43730e5417 endpointID=352 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-512b8c59-8377-482f-b806-1c581738c862 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=43730e5417 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=352 identity=5443 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-512b8c59-8377-482f-b806-1c581738c862 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 1fd15a31-86bd-4ef0-a61f-7434622a93b9 default }" containerID=3bb8683a1392a6262a589a30adba2c48a56f1be8bff2cebfd50a7603364b2d2e datapathConfiguration="&{false false false false false }" interface=lxc97afbd8bcb25 k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3bb8683a13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2045 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3bb8683a13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2045 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3bb8683a13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2045 identity=51761 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3bb8683a13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2045 identity=51761 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3bb8683a13 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2045 identity=51761 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3bb8683a13 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2045 identity=51761 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.160 de290b62-26fe-4f5c-87d9-15936064a5d3 default }" containerID=6335734c4673126e7bdf462dd52915d6dfa27338d0c36149a21d6366149ac6e2 datapathConfiguration="&{false false false false false }" interface=lxc0ea8fa028b03 k8sPodName=openstack/cinder-scheduler-79b46d64b5-cd4wd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6335734c46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2551 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/cinder-scheduler-79b46d64b5-cd4wd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6335734c46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2551 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/cinder-scheduler-79b46d64b5-cd4wd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6335734c46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2551 identity=18008 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/cinder-scheduler-79b46d64b5-cd4wd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6335734c46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2551 identity=18008 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/cinder-scheduler-79b46d64b5-cd4wd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 aadcf8e7-0482-4565-9779-504702b267c3 default }" containerID=fee61657ed94c6e639a816f6e9458bbd5a9321c9021ead113ef1c84294f4f9b3 datapathConfiguration="&{false false false false false }" interface=lxcce838bab9802 k8sPodName=openstack/cinder-api-675877b6c9-7hg6q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fee61657ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1548 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/cinder-api-675877b6c9-7hg6q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fee61657ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1548 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/cinder-api-675877b6c9-7hg6q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fee61657ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1548 identity=3185 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/cinder-api-675877b6c9-7hg6q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fee61657ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1548 identity=3185 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/cinder-api-675877b6c9-7hg6q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.40 d1b54c0b-1a1a-4fba-baff-45cb8cc83a0e default }" containerID=da41d39b36ddf626521720743e3ad110d2d42ff7b63d2fce66132c0aa33f2e96 datapathConfiguration="&{false false false false false }" interface=lxcda1be5077a43 k8sPodName=openstack/cinder-db-init-bgdw2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da41d39b36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2787 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/cinder-db-init-bgdw2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da41d39b36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2787 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ff3b7bb7-2192-4769-a766-ceb039e31fed,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=ff3b7bb7-2192-4769-a766-ceb039e31fed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/cinder-db-init-bgdw2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=ff3b7bb7-2192-4769-a766-ceb039e31fed;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=ff3b7bb7-2192-4769-a766-ceb039e31fed;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da41d39b36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2787 identity=34328 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ff3b7bb7-2192-4769-a766-ceb039e31fed,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=ff3b7bb7-2192-4769-a766-ceb039e31fed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/cinder-db-init-bgdw2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da41d39b36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2787 identity=34328 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/cinder-db-init-bgdw2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6335734c46 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2551 identity=18008 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/cinder-scheduler-79b46d64b5-cd4wd subsys=endpoint level=info msg="Successful endpoint creation" containerID=6335734c46 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2551 identity=18008 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/cinder-scheduler-79b46d64b5-cd4wd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fee61657ed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1548 identity=3185 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/cinder-api-675877b6c9-7hg6q subsys=endpoint level=info msg="Successful endpoint creation" containerID=fee61657ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1548 identity=3185 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/cinder-api-675877b6c9-7hg6q subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=da41d39b36 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2787 identity=34328 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/cinder-db-init-bgdw2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=da41d39b36 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2787 identity=34328 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/cinder-db-init-bgdw2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=da41d39b36 endpointID=2787 k8sNamespace=openstack k8sPodName=cinder-db-init-bgdw2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=ff3b7bb7-2192-4769-a766-ceb039e31fed k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=ff3b7bb7-2192-4769-a766-ceb039e31fed k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=da41d39b36 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2787 identity=34328 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/cinder-db-init-bgdw2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 681fc554-952a-4614-bbcc-ddd3d9f1d4d7 default }" containerID=cefc55e299f53238276daaa6cbad308354a17026604d989d48dd1ddfe1f07935 datapathConfiguration="&{false false false false false }" interface=lxc548bd7fa8ee6 k8sPodName=openstack/cinder-db-sync-tr8r2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cefc55e299 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1651 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/cinder-db-sync-tr8r2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cefc55e299 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1651 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=edd377d5-2ecb-447b-978a-4d262b3bf39e,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=edd377d5-2ecb-447b-978a-4d262b3bf39e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/cinder-db-sync-tr8r2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=edd377d5-2ecb-447b-978a-4d262b3bf39e;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=edd377d5-2ecb-447b-978a-4d262b3bf39e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cefc55e299 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1651 identity=1000 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=edd377d5-2ecb-447b-978a-4d262b3bf39e,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=edd377d5-2ecb-447b-978a-4d262b3bf39e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/cinder-db-sync-tr8r2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cefc55e299 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1651 identity=1000 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/cinder-db-sync-tr8r2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cefc55e299 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1651 identity=1000 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/cinder-db-sync-tr8r2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cefc55e299 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1651 identity=1000 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/cinder-db-sync-tr8r2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cefc55e299 endpointID=1651 k8sNamespace=openstack k8sPodName=cinder-db-sync-tr8r2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=edd377d5-2ecb-447b-978a-4d262b3bf39e k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=edd377d5-2ecb-447b-978a-4d262b3bf39e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=cefc55e299 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1651 identity=1000 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/cinder-db-sync-tr8r2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 90c095c4-e12e-4093-9ba2-87a2baa92d8b default }" containerID=024ceebbee43d14ca4bd003e3320b2c0380560963ac46cf1adc0a43194cd42e2 datapathConfiguration="&{false false false false false }" interface=lxc52fa5699f4fa k8sPodName=openstack/cinder-rabbit-init-cvtt8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=024ceebbee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=111 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/cinder-rabbit-init-cvtt8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=024ceebbee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=111 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=7649d146-2570-4fb2-9960-38e1ab9fce73,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7649d146-2570-4fb2-9960-38e1ab9fce73,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/cinder-rabbit-init-cvtt8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=7649d146-2570-4fb2-9960-38e1ab9fce73;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=7649d146-2570-4fb2-9960-38e1ab9fce73;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=024ceebbee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=111 identity=1949 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=7649d146-2570-4fb2-9960-38e1ab9fce73,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7649d146-2570-4fb2-9960-38e1ab9fce73,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/cinder-rabbit-init-cvtt8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=024ceebbee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=111 identity=1949 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/cinder-rabbit-init-cvtt8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=024ceebbee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=111 identity=1949 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/cinder-rabbit-init-cvtt8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=024ceebbee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=111 identity=1949 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/cinder-rabbit-init-cvtt8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=024ceebbee endpointID=111 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-cvtt8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=7649d146-2570-4fb2-9960-38e1ab9fce73 k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=7649d146-2570-4fb2-9960-38e1ab9fce73 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=024ceebbee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=111 identity=1949 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/cinder-rabbit-init-cvtt8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 98757226-dd4e-40d3-8f21-4c4eac1e78d7 default }" containerID=4c890f0b77d15e023ff2d37834f73836182e1610ded970dd29b83ccb6ded3e3a datapathConfiguration="&{false false false false false }" interface=lxce07d233fb861 k8sPodName=openstack/cinder-ks-service-8fmnb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c890f0b77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/cinder-ks-service-8fmnb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c890f0b77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1aa00765-0e4b-41a8-b344-52f5ba7c031c,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=1aa00765-0e4b-41a8-b344-52f5ba7c031c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/cinder-ks-service-8fmnb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=1aa00765-0e4b-41a8-b344-52f5ba7c031c;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=1aa00765-0e4b-41a8-b344-52f5ba7c031c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4c890f0b77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 identity=11000 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1aa00765-0e4b-41a8-b344-52f5ba7c031c,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=1aa00765-0e4b-41a8-b344-52f5ba7c031c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/cinder-ks-service-8fmnb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c890f0b77 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=42 identity=11000 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/cinder-ks-service-8fmnb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4c890f0b77 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=42 identity=11000 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/cinder-ks-service-8fmnb subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c890f0b77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=42 identity=11000 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/cinder-ks-service-8fmnb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4c890f0b77 endpointID=42 k8sNamespace=openstack k8sPodName=cinder-ks-service-8fmnb subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=1aa00765-0e4b-41a8-b344-52f5ba7c031c k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=1aa00765-0e4b-41a8-b344-52f5ba7c031c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=4c890f0b77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=42 identity=11000 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/cinder-ks-service-8fmnb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 f655f1d4-0bd3-45ef-8a88-977a7b4ba977 default }" containerID=0aedfeb634c86427122b4f350401937fc1fa452bd859a868f4c379535d77f2a6 datapathConfiguration="&{false false false false false }" interface=lxcc6da05220b72 k8sPodName=openstack/cinder-ks-endpoints-gtvbs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0aedfeb634 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-ks-endpoints-gtvbs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0aedfeb634 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=2c67772d-5f66-420a-9709-51724dd1433d,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=2c67772d-5f66-420a-9709-51724dd1433d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-ks-endpoints-gtvbs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0aedfeb634 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-ks-endpoints-gtvbs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=2c67772d-5f66-420a-9709-51724dd1433d;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=2c67772d-5f66-420a-9709-51724dd1433d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0aedfeb634 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identity=55928 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=2c67772d-5f66-420a-9709-51724dd1433d,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=2c67772d-5f66-420a-9709-51724dd1433d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-ks-endpoints-gtvbs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0aedfeb634 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identity=55928 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-ks-endpoints-gtvbs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0aedfeb634 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1479 identity=55928 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-ks-endpoints-gtvbs subsys=endpoint level=info msg="Successful endpoint creation" containerID=0aedfeb634 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1479 identity=55928 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-ks-endpoints-gtvbs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0aedfeb634 endpointID=1479 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-gtvbs subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=2c67772d-5f66-420a-9709-51724dd1433d k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=2c67772d-5f66-420a-9709-51724dd1433d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=0aedfeb634 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1479 identity=55928 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-ks-endpoints-gtvbs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 4466b317-29db-464b-bac4-22f430f18f6f default }" containerID=12c5dd2cf2884b06038f80f98d512a0320f6329ef63a30b90237f2c3608f6b45 datapathConfiguration="&{false false false false false }" interface=lxcee3a11662208 k8sPodName=openstack/cinder-ks-user-xv6w9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=12c5dd2cf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/cinder-ks-user-xv6w9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=12c5dd2cf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=7a7df0a6-9b25-403c-92bd-aaf5bdfc3087,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=7a7df0a6-9b25-403c-92bd-aaf5bdfc3087,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/cinder-ks-user-xv6w9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=7a7df0a6-9b25-403c-92bd-aaf5bdfc3087;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=7a7df0a6-9b25-403c-92bd-aaf5bdfc3087;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=12c5dd2cf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 identity=13300 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=7a7df0a6-9b25-403c-92bd-aaf5bdfc3087,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=7a7df0a6-9b25-403c-92bd-aaf5bdfc3087,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/cinder-ks-user-xv6w9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=12c5dd2cf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 identity=13300 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/cinder-ks-user-xv6w9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=12c5dd2cf2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=223 identity=13300 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/cinder-ks-user-xv6w9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=12c5dd2cf2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=223 identity=13300 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/cinder-ks-user-xv6w9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=12c5dd2cf2 endpointID=223 k8sNamespace=openstack k8sPodName=cinder-ks-user-xv6w9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=7a7df0a6-9b25-403c-92bd-aaf5bdfc3087 k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=7a7df0a6-9b25-403c-92bd-aaf5bdfc3087 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=12c5dd2cf2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=223 identity=13300 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/cinder-ks-user-xv6w9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 ac4a3955-2239-459a-8e21-ed5f971c8abb default }" containerID=ea723eb3331d4f6aae194cf98432c07e0c94463af4e4402158efee8f11ad38a5 datapathConfiguration="&{false false false false false }" interface=lxcebfba7a4e27c k8sPodName=openstack/cinder-backup-storage-init-5v4dw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea723eb333 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2939 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-backup-storage-init-5v4dw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea723eb333 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2939 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=69eb7386-e221-4638-a55d-e8930adec266,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=69eb7386-e221-4638-a55d-e8930adec266,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-backup-storage-init-5v4dw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=69eb7386-e221-4638-a55d-e8930adec266;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=69eb7386-e221-4638-a55d-e8930adec266;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea723eb333 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2939 identity=9308 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=69eb7386-e221-4638-a55d-e8930adec266,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=69eb7386-e221-4638-a55d-e8930adec266,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-backup-storage-init-5v4dw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea723eb333 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2939 identity=9308 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-backup-storage-init-5v4dw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea723eb333 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2939 identity=9308 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-backup-storage-init-5v4dw subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea723eb333 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2939 identity=9308 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-backup-storage-init-5v4dw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ea723eb333 endpointID=2939 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-5v4dw subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=69eb7386-e221-4638-a55d-e8930adec266 k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=69eb7386-e221-4638-a55d-e8930adec266 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=ea723eb333 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2939 identity=9308 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-backup-storage-init-5v4dw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.231 c21b0a6e-6da5-449d-b23c-5f9572e586e5 default }" containerID=d70a214840458cd1953c3ce0b888fbef2973dcb60ee91f5d513f6134c1c7e923 datapathConfiguration="&{false false false false false }" interface=lxc0b9fb9b73f88 k8sPodName=openstack/cinder-create-internal-tenant-bgstp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d70a214840 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-bgstp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d70a214840 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=8cfaf63a-be60-4589-a3a4-d3bae9094142,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=8cfaf63a-be60-4589-a3a4-d3bae9094142,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-bgstp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=8cfaf63a-be60-4589-a3a4-d3bae9094142;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=8cfaf63a-be60-4589-a3a4-d3bae9094142;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d70a214840 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 identity=19187 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=8cfaf63a-be60-4589-a3a4-d3bae9094142,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=8cfaf63a-be60-4589-a3a4-d3bae9094142,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-bgstp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d70a214840 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 identity=19187 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-bgstp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d70a214840 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2 identity=19187 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-bgstp subsys=endpoint level=info msg="Successful endpoint creation" containerID=d70a214840 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2 identity=19187 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-bgstp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d70a214840 endpointID=2 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-bgstp subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=8cfaf63a-be60-4589-a3a4-d3bae9094142 k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=8cfaf63a-be60-4589-a3a4-d3bae9094142 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=d70a214840 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2 identity=19187 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-bgstp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 5d405bb6-b097-4167-a7d0-f2c338762add default }" containerID=8bb503623424742e370e994cc0a8b281330d6b34a3a177b15217c6e9f9d30f10 datapathConfiguration="&{false false false false false }" interface=lxc699e8061c95f k8sPodName=openstack/cinder-storage-init-v2572 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8bb5036234 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2741 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-storage-init-v2572 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8bb5036234 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2741 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=cd1cb305-ff16-44ef-8c51-e450013cd17c,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=cd1cb305-ff16-44ef-8c51-e450013cd17c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-storage-init-v2572 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8bb5036234 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2741 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-storage-init-v2572 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=cd1cb305-ff16-44ef-8c51-e450013cd17c;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=cd1cb305-ff16-44ef-8c51-e450013cd17c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8bb5036234 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2741 identity=40257 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=cd1cb305-ff16-44ef-8c51-e450013cd17c,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=cd1cb305-ff16-44ef-8c51-e450013cd17c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-storage-init-v2572 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8bb5036234 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2741 identity=40257 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-storage-init-v2572 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8bb5036234 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2741 identity=40257 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-storage-init-v2572 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8bb5036234 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2741 identity=40257 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-storage-init-v2572 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8bb5036234 endpointID=2741 k8sNamespace=openstack k8sPodName=cinder-storage-init-v2572 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=cd1cb305-ff16-44ef-8c51-e450013cd17c k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=cd1cb305-ff16-44ef-8c51-e450013cd17c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=8bb5036234 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2741 identity=40257 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-storage-init-v2572 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.231 b05909b6-907a-4e06-b03d-19364d0068d2 default }" containerID=0fc772a8cd24fa465485d3ed6d34b96f6b2912b8a273bfb2009d5f6685107fd4 datapathConfiguration="&{false false false false false }" interface=lxc8a75366c3ff0 k8sPodName=openstack/cinder-bootstrap-bwpk8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0fc772a8cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1781 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/cinder-bootstrap-bwpk8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0fc772a8cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1781 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=58e0f9ba-141c-48c1-9809-3d559266f902,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=58e0f9ba-141c-48c1-9809-3d559266f902,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/cinder-bootstrap-bwpk8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=58e0f9ba-141c-48c1-9809-3d559266f902;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=58e0f9ba-141c-48c1-9809-3d559266f902;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0fc772a8cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1781 identity=33559 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=58e0f9ba-141c-48c1-9809-3d559266f902,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=58e0f9ba-141c-48c1-9809-3d559266f902,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/cinder-bootstrap-bwpk8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0fc772a8cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1781 identity=33559 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/cinder-bootstrap-bwpk8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0fc772a8cd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1781 identity=33559 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/cinder-bootstrap-bwpk8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0fc772a8cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1781 identity=33559 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/cinder-bootstrap-bwpk8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.138 89157772-b10f-42a8-933f-ffec7d525155 default }" containerID=cf6aa2ff0ed3adcf0c2a19a526b99f9df8374c0098684762f5e5f2cee42ca4c7 datapathConfiguration="&{false false false false false }" interface=lxc173574492a07 k8sPodName=openstack/cinder-backup-9b4778c85-xn9bb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf6aa2ff0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3634 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/cinder-backup-9b4778c85-xn9bb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf6aa2ff0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3634 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/cinder-backup-9b4778c85-xn9bb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cf6aa2ff0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3634 identity=8120 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/cinder-backup-9b4778c85-xn9bb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=cf6aa2ff0e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3634 identity=8120 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/cinder-backup-9b4778c85-xn9bb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 b50b03e1-ab98-4a37-82fc-4c7032d72880 default }" containerID=6f76c88d45e3e2f3f6fd8cfccf83cd3de509399dad9cf255e071d2cbac47d890 datapathConfiguration="&{false false false false false }" interface=lxc61c730f8451b k8sPodName=openstack/cinder-volume-58487754db-79gls labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f76c88d45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3187 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/cinder-volume-58487754db-79gls subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f76c88d45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3187 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/cinder-volume-58487754db-79gls subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f76c88d45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3187 identity=8924 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/cinder-volume-58487754db-79gls oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f76c88d45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3187 identity=8924 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/cinder-volume-58487754db-79gls subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cf6aa2ff0e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3634 identity=8120 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/cinder-backup-9b4778c85-xn9bb subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf6aa2ff0e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3634 identity=8120 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/cinder-backup-9b4778c85-xn9bb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6f76c88d45 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3187 identity=8924 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/cinder-volume-58487754db-79gls subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f76c88d45 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3187 identity=8924 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/cinder-volume-58487754db-79gls subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0fc772a8cd endpointID=1781 k8sNamespace=openstack k8sPodName=cinder-bootstrap-bwpk8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=58e0f9ba-141c-48c1-9809-3d559266f902 k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=58e0f9ba-141c-48c1-9809-3d559266f902 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=0fc772a8cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1781 identity=33559 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/cinder-bootstrap-bwpk8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 bd46a061-b747-4e00-934a-05a54893c12c default }" containerID=283b1907b125347c277c8fc2bc77b8ee713951e51777534b5b1a96f2f7900307 datapathConfiguration="&{false false false false false }" interface=lxc3be08c20abac k8sPodName=openstack/placement-api-5994f75c58-hjvp6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=283b1907b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=394 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/placement-api-5994f75c58-hjvp6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=283b1907b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=394 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/placement-api-5994f75c58-hjvp6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=283b1907b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=394 identity=22640 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/placement-api-5994f75c58-hjvp6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=283b1907b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=394 identity=22640 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/placement-api-5994f75c58-hjvp6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 8ce2a968-d2b7-4e52-9f24-35bfae15fe69 default }" containerID=40e5a73c83d137d902263a48ecc83ac8372006b25735979ac6a037256701a670 datapathConfiguration="&{false false false false false }" interface=lxc8fe2e0815cbd k8sPodName=openstack/placement-db-init-9hgpz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=40e5a73c83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2670 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/placement-db-init-9hgpz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=40e5a73c83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2670 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=109cab08-89b1-4e00-8a92-ed25b272dc82,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=109cab08-89b1-4e00-8a92-ed25b272dc82,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/placement-db-init-9hgpz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=109cab08-89b1-4e00-8a92-ed25b272dc82;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=109cab08-89b1-4e00-8a92-ed25b272dc82;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=40e5a73c83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2670 identity=3310 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=109cab08-89b1-4e00-8a92-ed25b272dc82,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=109cab08-89b1-4e00-8a92-ed25b272dc82,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/placement-db-init-9hgpz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=40e5a73c83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2670 identity=3310 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/placement-db-init-9hgpz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=283b1907b1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=394 identity=22640 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/placement-api-5994f75c58-hjvp6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=283b1907b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=394 identity=22640 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/placement-api-5994f75c58-hjvp6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=40e5a73c83 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2670 identity=3310 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/placement-db-init-9hgpz subsys=endpoint level=info msg="Successful endpoint creation" containerID=40e5a73c83 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2670 identity=3310 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/placement-db-init-9hgpz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=40e5a73c83 endpointID=2670 k8sNamespace=openstack k8sPodName=placement-db-init-9hgpz subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=109cab08-89b1-4e00-8a92-ed25b272dc82 k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=109cab08-89b1-4e00-8a92-ed25b272dc82 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=40e5a73c83 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2670 identity=3310 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/placement-db-init-9hgpz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 fef56e85-fce4-4ce9-a160-5c0ea28cebfb default }" containerID=5f65fa79536585576c707f555a90ed972f044d473c2a2953d7d4eb977fa446f7 datapathConfiguration="&{false false false false false }" interface=lxc48f6d62466c0 k8sPodName=openstack/placement-db-sync-zl2kz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f65fa7953 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2573 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/placement-db-sync-zl2kz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f65fa7953 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2573 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=933bae6a-306d-4b90-82f5-6665ac653874,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=933bae6a-306d-4b90-82f5-6665ac653874,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/placement-db-sync-zl2kz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=933bae6a-306d-4b90-82f5-6665ac653874;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=933bae6a-306d-4b90-82f5-6665ac653874;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5f65fa7953 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2573 identity=22758 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=933bae6a-306d-4b90-82f5-6665ac653874,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=933bae6a-306d-4b90-82f5-6665ac653874,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/placement-db-sync-zl2kz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f65fa7953 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2573 identity=22758 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/placement-db-sync-zl2kz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5f65fa7953 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2573 identity=22758 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/placement-db-sync-zl2kz subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f65fa7953 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2573 identity=22758 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/placement-db-sync-zl2kz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5f65fa7953 endpointID=2573 k8sNamespace=openstack k8sPodName=placement-db-sync-zl2kz subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=933bae6a-306d-4b90-82f5-6665ac653874 k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=933bae6a-306d-4b90-82f5-6665ac653874 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=5f65fa7953 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2573 identity=22758 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/placement-db-sync-zl2kz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 e155f8db-3ab9-4cab-a876-e9dc33978b98 default }" containerID=8dc8d36462760fa093818e3bcbe68e3d689c73a512b6de7ec3e6359d0471c2e9 datapathConfiguration="&{false false false false false }" interface=lxce5aeab9cc52d k8sPodName=openstack/placement-ks-service-pzxwp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8dc8d36462 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1814 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/placement-ks-service-pzxwp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8dc8d36462 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1814 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=61fe2e30-e2ce-4022-825c-97ef357320e4,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=61fe2e30-e2ce-4022-825c-97ef357320e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/placement-ks-service-pzxwp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=61fe2e30-e2ce-4022-825c-97ef357320e4;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=61fe2e30-e2ce-4022-825c-97ef357320e4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=8dc8d36462 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1814 identity=60726 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=61fe2e30-e2ce-4022-825c-97ef357320e4,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=61fe2e30-e2ce-4022-825c-97ef357320e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/placement-ks-service-pzxwp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8dc8d36462 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1814 identity=60726 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/placement-ks-service-pzxwp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8dc8d36462 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1814 identity=60726 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/placement-ks-service-pzxwp subsys=endpoint level=info msg="Successful endpoint creation" containerID=8dc8d36462 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1814 identity=60726 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/placement-ks-service-pzxwp subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8dc8d36462 endpointID=1814 k8sNamespace=openstack k8sPodName=placement-ks-service-pzxwp subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=61fe2e30-e2ce-4022-825c-97ef357320e4 k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=61fe2e30-e2ce-4022-825c-97ef357320e4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=8dc8d36462 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1814 identity=60726 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/placement-ks-service-pzxwp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 4592ee3f-0939-4702-9932-51c4f66e4469 default }" containerID=a777e11869a728007a810f2d7db6f79d453f55c72272bd0b110dd226358b97b3 datapathConfiguration="&{false false false false false }" interface=lxc8a94222a9507 k8sPodName=openstack/placement-ks-user-rcrcx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a777e11869 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/placement-ks-user-rcrcx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a777e11869 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=101dfc64-5967-478c-b90d-ada6a2e0861d,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=101dfc64-5967-478c-b90d-ada6a2e0861d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/placement-ks-user-rcrcx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=101dfc64-5967-478c-b90d-ada6a2e0861d;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=101dfc64-5967-478c-b90d-ada6a2e0861d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a777e11869 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 identity=5434 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=101dfc64-5967-478c-b90d-ada6a2e0861d,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=101dfc64-5967-478c-b90d-ada6a2e0861d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/placement-ks-user-rcrcx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a777e11869 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 identity=5434 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/placement-ks-user-rcrcx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a777e11869 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=561 identity=5434 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/placement-ks-user-rcrcx subsys=endpoint level=info msg="Successful endpoint creation" containerID=a777e11869 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=561 identity=5434 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/placement-ks-user-rcrcx subsys=daemon level=info msg="Delete endpoint request" containerID=a777e11869 endpointID=561 k8sNamespace=openstack k8sPodName=placement-ks-user-rcrcx subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=101dfc64-5967-478c-b90d-ada6a2e0861d k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=101dfc64-5967-478c-b90d-ada6a2e0861d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=a777e11869 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=561 identity=5434 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/placement-ks-user-rcrcx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 4697c133-a5a4-480d-94d6-639971efab58 default }" containerID=ff7844ff240949d6c331738782b863fb17a7d8c3a122ca9d07f03c22bc352656 datapathConfiguration="&{false false false false false }" interface=lxc3a4c073fe35c k8sPodName=openstack/placement-ks-endpoints-hrjkc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff7844ff24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1578 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/placement-ks-endpoints-hrjkc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff7844ff24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1578 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=0a6f53a0-39b4-449a-873c-2b0bb1c724aa,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0a6f53a0-39b4-449a-873c-2b0bb1c724aa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/placement-ks-endpoints-hrjkc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=0a6f53a0-39b4-449a-873c-2b0bb1c724aa;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=0a6f53a0-39b4-449a-873c-2b0bb1c724aa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff7844ff24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1578 identity=20431 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=0a6f53a0-39b4-449a-873c-2b0bb1c724aa,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0a6f53a0-39b4-449a-873c-2b0bb1c724aa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/placement-ks-endpoints-hrjkc oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ff7844ff24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1578 identity=20431 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/placement-ks-endpoints-hrjkc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ff7844ff24 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1578 identity=20431 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/placement-ks-endpoints-hrjkc subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff7844ff24 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1578 identity=20431 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/placement-ks-endpoints-hrjkc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ff7844ff24 endpointID=1578 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-hrjkc subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=0a6f53a0-39b4-449a-873c-2b0bb1c724aa k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=0a6f53a0-39b4-449a-873c-2b0bb1c724aa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=ff7844ff24 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1578 identity=20431 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/placement-ks-endpoints-hrjkc subsys=endpoint