level=info msg="Memory available for map entries (0.003% of 67421630464B): 168554076B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.190312ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="73.081µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.52264ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="84.542µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=111.383968ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="20.74µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="29.49µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="142.782µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="122.603µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="206.414µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="937.477µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="4.951µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.272464ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.306796ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="39.881µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="36.811µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="158.013µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="101.332µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="92.942µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=48.199356ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="169.993µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="18.97µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="3.87µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.72.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.62564ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="5.961µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.862458ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="6.09µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=101.075582ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="5.09µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="3.51µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="9.311µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="4.22µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.37µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="55.021µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="15.301µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="46.111µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="343.247µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.89µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="14.79µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="308.007µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="970.949µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.64337ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="5.6µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="25.4µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.72 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.72 ipAddr.ipv6="" k8sNodeIP=199.204.45.72 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.72" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.103" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.72" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.72} {CiliumInternalIP 10.0.0.103}] 10.0.0.0/24 [] [] 10.0.0.169 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:35793" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.464316221s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="22.27µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="9.47µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="50.231µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="5.28µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2788 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2788 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2788 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.452536672s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.188 53960dee-f1c8-41fb-8a74-c98e31f5159d default }" containerID=4222dea8214d50fe0ea937bf0783c81fede3d11f6e24d9367cc96e3f16a14b18 datapathConfiguration="&{false false false false false }" interface=lxc394464b8c853 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jrntb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4222dea821 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1990 ipv4=10.0.0.188 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jrntb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4222dea821 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1990 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=e1535a67-226e-4b3b-bd17-0817b5b2974e,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=e1535a67-226e-4b3b-bd17-0817b5b2974e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.188 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jrntb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.116 a9276c8a-cfc7-4e6e-952e-6fa7519b102d default }" containerID=3871db8ad15dd62be43bf1747f6a1370441ed6feb3d7e7a3f43b9d87d5c8e66f datapathConfiguration="&{false false false false false }" interface=lxc94563aa40b73 k8sPodName=kube-system/coredns-7c96b6546b-fz4z7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3871db8ad1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 ipv4=10.0.0.116 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fz4z7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3871db8ad1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.116 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fz4z7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3871db8ad1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.116 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fz4z7 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=4222dea821 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1990 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.188 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jrntb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=e1535a67-226e-4b3b-bd17-0817b5b2974e;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=e1535a67-226e-4b3b-bd17-0817b5b2974e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4222dea821 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1990 identity=11782 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=e1535a67-226e-4b3b-bd17-0817b5b2974e,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=e1535a67-226e-4b3b-bd17-0817b5b2974e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.188 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jrntb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4222dea821 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1990 identity=11782 ipv4=10.0.0.188 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jrntb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3871db8ad1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 identity=44372 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.116 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fz4z7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3871db8ad1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 identity=44372 ipv4=10.0.0.116 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fz4z7 subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=339.101847ms file-path=/var/run/cilium/state/templates/05729b1a3dd117d618a0b2658faa1685ab64a322569de78cc0c5a1011b1c409a/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2788 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=779 ipv4=10.0.0.169 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=779 identityLabels="reserved:health" ipv4=10.0.0.169 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=779 identity=4 identityLabels="reserved:health" ipv4=10.0.0.169 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.149528336s file-path=/var/run/cilium/state/templates/b024a6e3c7e7ef5c03366b8c91c174aa2b316c83134c024e01ae8bf83c2387be/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=3871db8ad1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=599 identity=44372 ipv4=10.0.0.116 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fz4z7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3871db8ad1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=599 identity=44372 ipv4=10.0.0.116 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fz4z7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4222dea821 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1990 identity=11782 ipv4=10.0.0.188 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jrntb subsys=endpoint level=info msg="Successful endpoint creation" containerID=4222dea821 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1990 identity=11782 ipv4=10.0.0.188 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jrntb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=779 identity=4 ipv4=10.0.0.169 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4222dea821 endpointID=1990 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-jrntb subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=e1535a67-226e-4b3b-bd17-0817b5b2974e k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=e1535a67-226e-4b3b-bd17-0817b5b2974e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=4222dea821 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1990 identity=11782 ipv4=10.0.0.188 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jrntb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.233 8c3a0d81-2083-49de-ba53-18e6a55db8be default }" containerID=4d67d4d7462389484aa89c945da897b01fc32c7ab54cab59e74f1da8da8db5c7 datapathConfiguration="&{false false false false false }" interface=lxcceab2dd398c0 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-sxf6d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d67d4d746 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=578 ipv4=10.0.0.233 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-sxf6d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d67d4d746 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=578 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.233 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-sxf6d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4d67d4d746 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=578 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.233 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-sxf6d line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d67d4d746 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=578 identity=10763 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.233 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-sxf6d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d67d4d746 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=578 identity=10763 ipv4=10.0.0.233 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-sxf6d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4d67d4d746 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=578 identity=10763 ipv4=10.0.0.233 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-sxf6d subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d67d4d746 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=578 identity=10763 ipv4=10.0.0.233 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-sxf6d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2788 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02788 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02788 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02788 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02788:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2788 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 4265e4db-fee3-42d9-ab17-116a395924f7 default }" containerID=ddb62880ccfb69981c427265707cc358df18c63905138c3fa8ec82185fd8b729 datapathConfiguration="&{false false false false false }" interface=lxc7c4a7fb4589a k8sPodName=kube-system/coredns-67659f764b-4gk4q labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.210 bb06636c-7e37-4299-bbf8-b4a57b43e5d4 default }" containerID=1d216c005cbfd495ec18700fa8ac50acf2d80bc218b0d64cc6e92cbd66234f86 datapathConfiguration="&{false false false false false }" interface=lxca49d9ff1e7cc k8sPodName=kube-system/coredns-67659f764b-sqqvr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ddb62880cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=948 ipv4=10.0.0.178 ipv6= k8sPodName=kube-system/coredns-67659f764b-4gk4q subsys=endpoint level=info msg="New endpoint" containerID=1d216c005c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1571 ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-67659f764b-sqqvr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ddb62880cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=948 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.178 ipv6= k8sPodName=kube-system/coredns-67659f764b-4gk4q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d216c005c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1571 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-67659f764b-sqqvr subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ddb62880cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=948 identity=44372 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.178 ipv6= k8sPodName=kube-system/coredns-67659f764b-4gk4q oldIdentity="no identity" subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1d216c005c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1571 identity=44372 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-67659f764b-sqqvr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ddb62880cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=948 identity=44372 ipv4=10.0.0.178 ipv6= k8sPodName=kube-system/coredns-67659f764b-4gk4q subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d216c005c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1571 identity=44372 ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-67659f764b-sqqvr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d216c005c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1571 identity=44372 ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-67659f764b-sqqvr subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d216c005c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1571 identity=44372 ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-67659f764b-sqqvr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ddb62880cc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=948 identity=44372 ipv4=10.0.0.178 ipv6= k8sPodName=kube-system/coredns-67659f764b-4gk4q subsys=endpoint level=info msg="Successful endpoint creation" containerID=ddb62880cc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=948 identity=44372 ipv4=10.0.0.178 ipv6= k8sPodName=kube-system/coredns-67659f764b-4gk4q subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.17 ec9ff1ad-3659-4bb1-8fe3-2068c21cc817 default }" containerID=977cbcb07116bb60cea870636c39bfc07863dbe5d2f1a3bca8e61692f9ffcfbb datapathConfiguration="&{false false false false false }" interface=lxcbb80cbd18629 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r5fzd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=977cbcb071 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1561 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r5fzd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=977cbcb071 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1561 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r5fzd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=977cbcb071 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1561 identity=7171 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r5fzd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=977cbcb071 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1561 identity=7171 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r5fzd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=977cbcb071 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1561 identity=7171 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r5fzd subsys=endpoint level=info msg="Successful endpoint creation" containerID=977cbcb071 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1561 identity=7171 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r5fzd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3871db8ad1 endpointID=599 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-fz4z7 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=3871db8ad1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=599 identity=44372 ipv4=10.0.0.116 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fz4z7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.97 421dbfe9-298d-4b02-a471-bee64cc6e38d default }" containerID=447a637ab945718fb6f6add13fe13d182cbaca602a7968d055d084dff5758cb1 datapathConfiguration="&{false false false false false }" interface=lxc69defbc5082a k8sPodName=cert-manager/cert-manager-75c4c745bc-nnwr7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=447a637ab9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 ipv4=10.0.0.97 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nnwr7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.24 62d81828-e072-472b-945f-c271f12bc2f1 default }" containerID=90301e990f93fd7f1891cdc0f5cd88b21156b9c3f91cb4ec8945a7eddee3428c datapathConfiguration="&{false false false false false }" interface=lxc7060a158207c k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-bfzrk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=90301e990f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-bfzrk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 7d87aa07-de2d-4619-8358-65bbc3867acd default }" containerID=8285bc9a8c0388028f7bdc0cf2cbdb47235ddf5b81b4b4fbe920c6b9958b79d9 datapathConfiguration="&{false false false false false }" interface=lxc3ea879d82623 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ftlmz labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=447a637ab9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.97 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nnwr7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=90301e990f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-bfzrk subsys=endpoint level=info msg="New endpoint" containerID=8285bc9a8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2898 ipv4=10.0.0.195 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ftlmz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8285bc9a8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2898 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.195 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ftlmz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=90301e990f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-bfzrk line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=8285bc9a8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2898 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.195 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ftlmz line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=447a637ab9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.97 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nnwr7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=447a637ab9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 identity=29699 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.97 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nnwr7 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=447a637ab9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 identity=29699 ipv4=10.0.0.97 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nnwr7 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=90301e990f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 identity=3822 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-bfzrk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=90301e990f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 identity=3822 ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-bfzrk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8285bc9a8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2898 identity=14047 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.195 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ftlmz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8285bc9a8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2898 identity=14047 ipv4=10.0.0.195 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ftlmz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=447a637ab9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=387 identity=29699 ipv4=10.0.0.97 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nnwr7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=447a637ab9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=387 identity=29699 ipv4=10.0.0.97 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nnwr7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=90301e990f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=174 identity=3822 ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-bfzrk subsys=endpoint level=info msg="Successful endpoint creation" containerID=90301e990f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=174 identity=3822 ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-bfzrk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8285bc9a8c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2898 identity=14047 ipv4=10.0.0.195 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ftlmz subsys=endpoint level=info msg="Successful endpoint creation" containerID=8285bc9a8c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2898 identity=14047 ipv4=10.0.0.195 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ftlmz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.226 7667a611-bdde-4dbc-a880-bf5b60326710 default }" containerID=4f711fcd9a762e63dd76efa2fd2d0a708c9b74f61255deb17595b87ae4dec3e7 datapathConfiguration="&{false false false false false }" interface=lxc5f86d9c618ec k8sPodName=cert-manager/cert-manager-startupapicheck-bhm5t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f711fcd9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3927 ipv4=10.0.0.226 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bhm5t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f711fcd9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3927 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=29721ca3-4bab-4b7e-9b78-78b5a580c250,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=29721ca3-4bab-4b7e-9b78-78b5a580c250,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.226 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bhm5t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=29721ca3-4bab-4b7e-9b78-78b5a580c250;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=29721ca3-4bab-4b7e-9b78-78b5a580c250;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4f711fcd9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3927 identity=4962 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=29721ca3-4bab-4b7e-9b78-78b5a580c250,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=29721ca3-4bab-4b7e-9b78-78b5a580c250,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.226 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bhm5t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4f711fcd9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3927 identity=4962 ipv4=10.0.0.226 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bhm5t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4f711fcd9a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3927 identity=4962 ipv4=10.0.0.226 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bhm5t subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f711fcd9a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3927 identity=4962 ipv4=10.0.0.226 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bhm5t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4f711fcd9a endpointID=3927 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-bhm5t subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=29721ca3-4bab-4b7e-9b78-78b5a580c250 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=29721ca3-4bab-4b7e-9b78-78b5a580c250 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=4f711fcd9a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3927 identity=4962 ipv4=10.0.0.226 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bhm5t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 250f7644-083e-4743-ab4a-b352e5cd8437 default }" containerID=1c1c05f613f4aa84b9cdffb8b36636be278a2c968e6b4f2328d373e1791b4b5d datapathConfiguration="&{false false false false false }" interface=lxc2bec0ae9bf20 k8sPodName=ingress-nginx/ingress-nginx-admission-create-5v6bv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c1c05f613 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3266 ipv4=10.0.0.7 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5v6bv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c1c05f613 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3266 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=048dcca6-fbd8-4010-ae2c-3fa087de3246,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=048dcca6-fbd8-4010-ae2c-3fa087de3246,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.7 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5v6bv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=048dcca6-fbd8-4010-ae2c-3fa087de3246;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=048dcca6-fbd8-4010-ae2c-3fa087de3246;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1c1c05f613 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3266 identity=29788 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=048dcca6-fbd8-4010-ae2c-3fa087de3246,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=048dcca6-fbd8-4010-ae2c-3fa087de3246,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.7 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5v6bv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1c1c05f613 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3266 identity=29788 ipv4=10.0.0.7 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5v6bv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1c1c05f613 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3266 identity=29788 ipv4=10.0.0.7 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5v6bv subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c1c05f613 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3266 identity=29788 ipv4=10.0.0.7 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5v6bv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1c1c05f613 endpointID=3266 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-5v6bv subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=048dcca6-fbd8-4010-ae2c-3fa087de3246 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=048dcca6-fbd8-4010-ae2c-3fa087de3246 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=1c1c05f613 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3266 identity=29788 ipv4=10.0.0.7 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5v6bv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.222 87a26e27-611f-464a-9945-6877fadd7955 default }" containerID=a9301ecedd6043822d96252a70d21bc2a33953b01d8b08a8382043daa221a63c datapathConfiguration="&{false false false false false }" interface=lxcab1092ebd052 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-rkq98 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a9301ecedd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=396 ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-rkq98 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a9301ecedd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=396 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-rkq98 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a9301ecedd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=396 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-rkq98 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a9301ecedd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=396 identity=34062 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-rkq98 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a9301ecedd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=396 identity=34062 ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-rkq98 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a9301ecedd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=396 identity=34062 ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-rkq98 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a9301ecedd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=396 identity=34062 ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-rkq98 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.133 d221fd62-e84c-45e7-b6aa-5b92cb35628e default }" containerID=31c92cfc734d60c28ae3827e40e6c49eb9982b644e26ae83177ba2a114edf919 datapathConfiguration="&{false false false false false }" interface=lxca70d169c41f7 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4tp7k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=31c92cfc73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3475 ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4tp7k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=31c92cfc73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3475 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=0749154e-a65b-4153-81ca-25efdd683d1b,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=0749154e-a65b-4153-81ca-25efdd683d1b,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4tp7k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=0749154e-a65b-4153-81ca-25efdd683d1b;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=0749154e-a65b-4153-81ca-25efdd683d1b;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=31c92cfc73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3475 identity=21402 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=0749154e-a65b-4153-81ca-25efdd683d1b,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=0749154e-a65b-4153-81ca-25efdd683d1b,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4tp7k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=31c92cfc73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3475 identity=21402 ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4tp7k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=31c92cfc73 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3475 identity=21402 ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4tp7k subsys=endpoint level=info msg="Successful endpoint creation" containerID=31c92cfc73 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3475 identity=21402 ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4tp7k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=31c92cfc73 endpointID=3475 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-4tp7k subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=0749154e-a65b-4153-81ca-25efdd683d1b k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=0749154e-a65b-4153-81ca-25efdd683d1b k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=31c92cfc73 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3475 identity=21402 ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4tp7k subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=fca1eb62-bc7e-4d24-a5df-4973d8270a2b] Description:}]" policyAddRequest=5bc1d233-c10f-45a4-8492-a047b7d11ee9 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=5bc1d233-c10f-45a4-8492-a047b7d11ee9 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=a4ff5106-86cd-490b-9b7f-edf0569c64a1] Description:}]" policyAddRequest=d98fd8bd-9565-46ae-a332-f8913ae63c54 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=d98fd8bd-9565-46ae-a332-f8913ae63c54 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.28 d782960b-4929-4983-a72a-0e68d4173e45 default }" containerID=70a6e07c555f3581724cbe1b34839028c298889d6fc536801bbf72c4cfb78449 datapathConfiguration="&{false false false false false }" interface=lxc213fef05a06f k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-mwxkg labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.18 d3efceef-8ceb-4d01-838b-cb122449dd24 default }" containerID=32176534d6a1bc143fd64369624f2b2643b6894d318fd2a0714de868b6ed3866 datapathConfiguration="&{false false false false false }" interface=lxcb37ee381aaff k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4w7mn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=70a6e07c55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-mwxkg subsys=endpoint level=info msg="New endpoint" containerID=32176534d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3123 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4w7mn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=32176534d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3123 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4w7mn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=70a6e07c55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-mwxkg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=32176534d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3123 identity=11653 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4w7mn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=32176534d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3123 identity=11653 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4w7mn subsys=endpoint level=info msg="Invalid state transition skipped" containerID=70a6e07c55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-mwxkg line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=70a6e07c55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identity=855 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-mwxkg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=70a6e07c55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identity=855 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-mwxkg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=32176534d6 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3123 identity=11653 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4w7mn subsys=endpoint level=info msg="Successful endpoint creation" containerID=32176534d6 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3123 identity=11653 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4w7mn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=70a6e07c55 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=14 identity=855 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-mwxkg subsys=endpoint level=info msg="Successful endpoint creation" containerID=70a6e07c55 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=14 identity=855 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-mwxkg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.199 5bfd211f-4a4b-4f51-84c9-dc32788b9648 default }" containerID=7fd3a2448cdf8013937089c69bf8e3d5f1be41a1b5d594c224b588d426e13de7 datapathConfiguration="&{false false false false false }" interface=lxcfd00b52d82ae k8sPodName=openstack/pxc-operator-69cb5bbdb9-l92nd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7fd3a2448c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1942 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-l92nd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7fd3a2448c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1942 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-l92nd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7fd3a2448c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1942 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.199 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-l92nd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7fd3a2448c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1942 identity=50250 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-l92nd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7fd3a2448c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1942 identity=50250 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-l92nd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7fd3a2448c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1942 identity=50250 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-l92nd subsys=endpoint level=info msg="Successful endpoint creation" containerID=7fd3a2448c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1942 identity=50250 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-l92nd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.166 74d26d45-a47c-4c81-8dcf-a82d143bd5d4 default }" containerID=f0a386ff0062df0f08ede77c894cfba4866d912c0c6d8e291525c1bbe8b09616 datapathConfiguration="&{false false false false false }" interface=lxccbd5f4ff8ef2 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f0a386ff00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3234 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f0a386ff00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3234 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f0a386ff00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3234 identity=51300 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f0a386ff00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3234 identity=51300 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f0a386ff00 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3234 identity=51300 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f0a386ff00 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3234 identity=51300 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.252 69600bd5-21ae-40dc-a7dc-25ad3d3986e8 default }" containerID=fbe82bd1f14caea9b08b8fb4e5514eb8de74c420a620d497f22fc5b9a9ace44d datapathConfiguration="&{false false false false false }" interface=lxc0a4f23a6a56d k8sPodName=local-path-storage/helper-pod-create-pvc-f1ac1760-9464-4eb9-a879-757d0c374be5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fbe82bd1f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1572 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f1ac1760-9464-4eb9-a879-757d0c374be5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fbe82bd1f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1572 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f1ac1760-9464-4eb9-a879-757d0c374be5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fbe82bd1f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1572 identity=1077 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f1ac1760-9464-4eb9-a879-757d0c374be5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fbe82bd1f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1572 identity=1077 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f1ac1760-9464-4eb9-a879-757d0c374be5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fbe82bd1f1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1572 identity=1077 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f1ac1760-9464-4eb9-a879-757d0c374be5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fbe82bd1f1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1572 identity=1077 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f1ac1760-9464-4eb9-a879-757d0c374be5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fbe82bd1f1 endpointID=1572 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f1ac1760-9464-4eb9-a879-757d0c374be5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=fbe82bd1f1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1572 identity=1077 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f1ac1760-9464-4eb9-a879-757d0c374be5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 1bd3a3cb-cd64-4a56-b70a-b6f42f9e6135 default }" containerID=7e13dcf178b8b273057380c7bc8e5991bd44508df64bfdbdead426b6581edd3a datapathConfiguration="&{false false false false false }" interface=lxcd4cf83fac1e8 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e13dcf178 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e13dcf178 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7e13dcf178 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 identity=18777 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7e13dcf178 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 identity=18777 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7e13dcf178 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1405 identity=18777 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e13dcf178 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1405 identity=18777 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=775f85d4-b9e2-4a58-8b67-c46333b5cd5e] Description:}]" policyAddRequest=7ddfafdd-ec0f-4976-b60b-a72583e16464 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=7ddfafdd-ec0f-4976-b60b-a72583e16464 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.198 ce770d9e-998e-4f06-8618-f6bb66b7a11b default }" containerID=c85d03d0842572bd3650a8e7cd5f8e48ff8ff06c1a497c37bd368bdc2c794f05 datapathConfiguration="&{false false false false false }" interface=lxcde0a41136000 k8sPodName=local-path-storage/helper-pod-create-pvc-9025dfbe-0672-4a08-ade8-5acd1d8536ac labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c85d03d084 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=175 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9025dfbe-0672-4a08-ade8-5acd1d8536ac subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c85d03d084 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=175 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9025dfbe-0672-4a08-ade8-5acd1d8536ac subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c85d03d084 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=175 identity=1077 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9025dfbe-0672-4a08-ade8-5acd1d8536ac oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c85d03d084 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=175 identity=1077 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9025dfbe-0672-4a08-ade8-5acd1d8536ac subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c85d03d084 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=175 identity=1077 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9025dfbe-0672-4a08-ade8-5acd1d8536ac subsys=endpoint level=info msg="Successful endpoint creation" containerID=c85d03d084 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=175 identity=1077 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9025dfbe-0672-4a08-ade8-5acd1d8536ac subsys=daemon level=info msg="Delete endpoint request" containerID=c85d03d084 endpointID=175 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-9025dfbe-0672-4a08-ade8-5acd1d8536ac subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c85d03d084 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=175 identity=1077 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9025dfbe-0672-4a08-ade8-5acd1d8536ac subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 a9d24a86-029a-4175-a178-b30e2079e92f default }" containerID=fd492c28f974f90a274792399d8175e0f523cf63bd45f138c9311758842f8c3c datapathConfiguration="&{false false false false false }" interface=lxcf30147263e82 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd492c28f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2498 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd492c28f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2498 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=fd492c28f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2498 identity=25817 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fd492c28f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2498 identity=25817 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fd492c28f9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2498 identity=25817 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd492c28f9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2498 identity=25817 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=7c334c39-69ae-462b-800e-1836422404d2] Description:}]" policyAddRequest=1fecf7ce-d847-413e-8727-09c0209c61dd subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=1fecf7ce-d847-413e-8727-09c0209c61dd policyRevision=5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.64 4bd597d9-287d-46e6-abaf-e1ff1f600ecf default }" containerID=4a0fedf79a468925a9be51868b8c41f8c2d4e64e75d40af13ba3bd7cc80daff0 datapathConfiguration="&{false false false false false }" interface=lxc71601d285fb7 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a0fedf79a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 ipv4=10.0.0.64 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a0fedf79a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.64 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a0fedf79a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 identity=43588 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.64 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4a0fedf79a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 identity=43588 ipv4=10.0.0.64 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4a0fedf79a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=242 identity=43588 ipv4=10.0.0.64 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a0fedf79a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=242 identity=43588 ipv4=10.0.0.64 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.010307465472696039 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.230 06b90f3d-7ccf-4411-aa45-ed459360d549 default }" containerID=12cd151e6ee187925b58cfa233d1894f0b3875db2ca91f714ea1e3c1405a7e75 datapathConfiguration="&{false false false false false }" interface=lxc7a0a29202ce8 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7xf5h labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.168 7b7d59f1-7838-41d6-bbd3-3e502b62abd4 default }" containerID=6772819bfaf86a6fc2cdfd1ff4bb86dc3b2a0d5d4c251e3e46594e8ddebe0944 datapathConfiguration="&{false false false false false }" interface=lxcd562ebfe31e6 k8sPodName=monitoring/node-feature-discovery-worker-662qc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=12cd151e6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3072 ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7xf5h subsys=endpoint level=info msg="New endpoint" containerID=6772819bfa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=347 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-662qc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=12cd151e6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3072 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7xf5h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=6772819bfa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=347 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-662qc subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=12cd151e6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3072 identity=32084 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7xf5h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=12cd151e6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3072 identity=32084 ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7xf5h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6772819bfa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=347 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-662qc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6772819bfa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=347 identity=35026 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-662qc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6772819bfa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=347 identity=35026 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-662qc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6772819bfa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=347 identity=35026 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-662qc subsys=endpoint level=info msg="Successful endpoint creation" containerID=6772819bfa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=347 identity=35026 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-662qc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.21 51247f1b-2ffd-477a-bbaf-d65f8672cea3 default }" containerID=e01c2e8b4a7413d8fe105319f90ada17f1a8ae5978c1ccea43ccf393952cea4b datapathConfiguration="&{false false false false false }" interface=lxcb378ec6fcdd2 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kskx8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e01c2e8b4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kskx8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e01c2e8b4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kskx8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e01c2e8b4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 identity=6182 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kskx8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e01c2e8b4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 identity=6182 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kskx8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=12cd151e6e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3072 identity=32084 ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7xf5h subsys=endpoint level=info msg="Successful endpoint creation" containerID=12cd151e6e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3072 identity=32084 ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7xf5h subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e01c2e8b4a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=330 identity=6182 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kskx8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e01c2e8b4a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=330 identity=6182 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kskx8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.134 50acac10-4aab-415d-87fc-303fea439edb default }" containerID=b6bf773ee5bab879a5f40118d73172647415d9c82e1dfe2e589b8981a5be8267 datapathConfiguration="&{false false false false false }" interface=lxc2a002e525583 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-dpwtq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b6bf773ee5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1353 ipv4=10.0.0.134 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-dpwtq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b6bf773ee5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1353 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.134 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-dpwtq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b6bf773ee5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1353 identity=510 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.134 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-dpwtq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b6bf773ee5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1353 identity=510 ipv4=10.0.0.134 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-dpwtq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b6bf773ee5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1353 identity=510 ipv4=10.0.0.134 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-dpwtq subsys=endpoint level=info msg="Successful endpoint creation" containerID=b6bf773ee5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1353 identity=510 ipv4=10.0.0.134 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-dpwtq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2788 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-179-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02788 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02788 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02788 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02788:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2788 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 262aa5ff-db63-40d5-a775-86acf9fa2c7d default }" containerID=3784b63b72c8561ed182418bec940ed8fe892e4909b71285a801af7bc7438fca datapathConfiguration="&{false false false false false }" interface=lxc05f02afb844f k8sPodName=monitoring/kube-prometheus-stack-admission-create-l8lzl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3784b63b72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-l8lzl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3784b63b72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=4bcc3a56-0bb0-459c-be87-87903a108a6b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=4bcc3a56-0bb0-459c-be87-87903a108a6b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-l8lzl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=4bcc3a56-0bb0-459c-be87-87903a108a6b;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=4bcc3a56-0bb0-459c-be87-87903a108a6b;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=3784b63b72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-l8lzl line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3784b63b72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 identity=4113 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=4bcc3a56-0bb0-459c-be87-87903a108a6b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=4bcc3a56-0bb0-459c-be87-87903a108a6b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-l8lzl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3784b63b72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 identity=4113 ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-l8lzl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3784b63b72 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1472 identity=4113 ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-l8lzl subsys=endpoint level=info msg="Successful endpoint creation" containerID=3784b63b72 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1472 identity=4113 ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-l8lzl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3784b63b72 endpointID=1472 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-l8lzl subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=4bcc3a56-0bb0-459c-be87-87903a108a6b k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=4bcc3a56-0bb0-459c-be87-87903a108a6b k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=3784b63b72 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1472 identity=4113 ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-l8lzl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 bb13fbf7-4aff-461a-a600-74bfa9d85237 default }" containerID=d2c4c33cc8a9726dfa5de8e77a7a1a6978892d8f8a90b2e6b518972c72e3ed32 datapathConfiguration="&{false false false false false }" interface=lxc2e525ba4dc07 k8sPodName=monitoring/kube-prometheus-stack-grafana-f85794c7b-8cpv7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2c4c33cc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1381 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-f85794c7b-8cpv7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2c4c33cc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1381 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-f85794c7b-8cpv7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=d2c4c33cc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1381 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-f85794c7b-8cpv7 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d2c4c33cc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1381 identity=42220 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-f85794c7b-8cpv7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d2c4c33cc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1381 identity=42220 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-f85794c7b-8cpv7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 4cbda4df-5708-4ffd-8f36-37f642d57ab2 default }" containerID=28a0256067b41e3b8f956c5ab46b60b5d897da865bdabbcf07f73f49e4dcb791 datapathConfiguration="&{false false false false false }" interface=lxc28db4fca3f44 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-tlbh7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=28a0256067 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=300 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-tlbh7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=28a0256067 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=300 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-tlbh7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=28a0256067 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=300 identity=56918 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-tlbh7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=28a0256067 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=300 identity=56918 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-tlbh7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.55 670f8708-805c-4a54-a819-ce7bea354911 default }" containerID=2c1d9493e4a99c77001650b4e3b18505c1ecb4347c14321df634b982324f38a3 datapathConfiguration="&{false false false false false }" interface=lxc1b54462af638 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-bxm2n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c1d9493e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1233 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-bxm2n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c1d9493e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1233 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-bxm2n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c1d9493e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1233 identity=1839 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-bxm2n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c1d9493e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1233 identity=1839 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-bxm2n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=28a0256067 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=300 identity=56918 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-tlbh7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=28a0256067 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=300 identity=56918 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-tlbh7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d2c4c33cc8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1381 identity=42220 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-f85794c7b-8cpv7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2c4c33cc8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1381 identity=42220 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-f85794c7b-8cpv7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2c1d9493e4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1233 identity=1839 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-bxm2n subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c1d9493e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1233 identity=1839 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-bxm2n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.65 c739a501-aa23-4ebf-916d-337024286df1 default }" containerID=bf9d77e96744fae306182265aa17605221da0a07b8547fd085fd864209aa0bef datapathConfiguration="&{false false false false false }" interface=lxc6ef1a8c4c9c2 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-6bvsf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf9d77e967 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3104 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-6bvsf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf9d77e967 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3104 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=c5cd39bf-4c8e-46a3-af8e-1d7421508de9,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c5cd39bf-4c8e-46a3-af8e-1d7421508de9,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-6bvsf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=c5cd39bf-4c8e-46a3-af8e-1d7421508de9;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=c5cd39bf-4c8e-46a3-af8e-1d7421508de9;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf9d77e967 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3104 identity=52911 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=c5cd39bf-4c8e-46a3-af8e-1d7421508de9,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c5cd39bf-4c8e-46a3-af8e-1d7421508de9,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-6bvsf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf9d77e967 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3104 identity=52911 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-6bvsf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bf9d77e967 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3104 identity=52911 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-6bvsf subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf9d77e967 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3104 identity=52911 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-6bvsf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.30 ebea547d-0788-4bd9-8fd5-c30c0e838eff default }" containerID=3e391456ee2a93804bb59efc3ce7206b57398a85637ac978d951fdf6293939db datapathConfiguration="&{false false false false false }" interface=lxc2c3cd9df7b6a k8sPodName=local-path-storage/helper-pod-create-pvc-0bc86972-4a95-420f-8519-2966e4c77814 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e391456ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2260 ipv4=10.0.0.30 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0bc86972-4a95-420f-8519-2966e4c77814 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e391456ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2260 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.30 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0bc86972-4a95-420f-8519-2966e4c77814 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e391456ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2260 identity=1077 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.30 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0bc86972-4a95-420f-8519-2966e4c77814 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e391456ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2260 identity=1077 ipv4=10.0.0.30 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0bc86972-4a95-420f-8519-2966e4c77814 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3e391456ee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2260 identity=1077 ipv4=10.0.0.30 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0bc86972-4a95-420f-8519-2966e4c77814 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e391456ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2260 identity=1077 ipv4=10.0.0.30 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0bc86972-4a95-420f-8519-2966e4c77814 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.253 d4c5f891-5fc5-43fe-9c72-825239dc3b6e default }" containerID=368fcc0ba3708f1f3064e27e95ee382c106b4c711db97eaef44ab7f650afeb25 datapathConfiguration="&{false false false false false }" interface=lxc13f59b10b6da k8sPodName=local-path-storage/helper-pod-create-pvc-0c250371-07a1-432f-a1c7-83e21381ce29 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=368fcc0ba3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1047 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0c250371-07a1-432f-a1c7-83e21381ce29 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=368fcc0ba3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1047 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0c250371-07a1-432f-a1c7-83e21381ce29 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=368fcc0ba3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1047 identity=1077 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0c250371-07a1-432f-a1c7-83e21381ce29 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=368fcc0ba3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1047 identity=1077 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0c250371-07a1-432f-a1c7-83e21381ce29 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=368fcc0ba3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1047 identity=1077 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0c250371-07a1-432f-a1c7-83e21381ce29 subsys=endpoint level=info msg="Successful endpoint creation" containerID=368fcc0ba3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1047 identity=1077 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0c250371-07a1-432f-a1c7-83e21381ce29 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bf9d77e967 endpointID=3104 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-6bvsf subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=c5cd39bf-4c8e-46a3-af8e-1d7421508de9 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=c5cd39bf-4c8e-46a3-af8e-1d7421508de9 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=bf9d77e967 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3104 identity=52911 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-6bvsf subsys=endpoint level=info msg="Delete endpoint request" containerID=3e391456ee endpointID=2260 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0bc86972-4a95-420f-8519-2966e4c77814 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3e391456ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2260 identity=1077 ipv4=10.0.0.30 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0bc86972-4a95-420f-8519-2966e4c77814 subsys=endpoint level=info msg="Delete endpoint request" containerID=368fcc0ba3 endpointID=1047 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0c250371-07a1-432f-a1c7-83e21381ce29 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=368fcc0ba3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1047 identity=1077 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0c250371-07a1-432f-a1c7-83e21381ce29 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.250 5c309e1c-6c3a-4f9a-bc74-e1fa8ab0a9ca default }" containerID=3cf69c63578987933ce5a2f734165f7de13bc5720c4bfe2f629ed2e13137510b datapathConfiguration="&{false false false false false }" interface=lxcf888522a63f4 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3cf69c6357 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=398 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3cf69c6357 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=398 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=3cf69c6357 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=398 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3cf69c6357 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=398 identity=54670 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3cf69c6357 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=398 identity=54670 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3cf69c6357 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=398 identity=54670 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3cf69c6357 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=398 identity=54670 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.14 3172fb7a-f7cf-4640-bb5c-5f4c2e9420a3 default }" containerID=5a84202d0f524214e5c3e891552c037d37025f9f17219215da5302ad2a74d4af datapathConfiguration="&{false false false false false }" interface=lxc0250f4d3e86b k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a84202d0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1727 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a84202d0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1727 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a84202d0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1727 identity=48146 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a84202d0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1727 identity=48146 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5a84202d0f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1727 identity=48146 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a84202d0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1727 identity=48146 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.67 fa579628-4c95-49c6-96ca-2ce0ed67a542 default }" containerID=8296d980df7ed03865cd1ef53c2890ce84bb4f0d0aac10d7e95875b7e2d32e61 datapathConfiguration="&{false false false false false }" interface=lxc4b49fa0f9d27 k8sPodName=monitoring/loki-gateway-cf54cb88c-c7n4w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8296d980df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1087 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-c7n4w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8296d980df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1087 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-c7n4w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8296d980df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1087 identity=4158 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-c7n4w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8296d980df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1087 identity=4158 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-c7n4w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8296d980df datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1087 identity=4158 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-c7n4w subsys=endpoint level=info msg="Successful endpoint creation" containerID=8296d980df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1087 identity=4158 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-c7n4w subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.13 7a19d4f5-a54d-4d99-abf9-a7560cc1540b default }" containerID=f30fb2c33b5fc008e464f0049e1ac83a301b7251e947077a9e2cc62dc1eed26b datapathConfiguration="&{false false false false false }" interface=lxc3918e1570460 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f30fb2c33b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2584 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f30fb2c33b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2584 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f30fb2c33b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2584 identity=50443 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f30fb2c33b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2584 identity=50443 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 931934c9-c6d3-4b3b-a9e0-3cf3fd24c293 default }" containerID=05fa03b17614f619cbc8efa6275f4590128e30504067356a85ecfc69d6e60078 datapathConfiguration="&{false false false false false }" interface=lxca0185287bd5a k8sPodName=local-path-storage/helper-pod-create-pvc-e6d70c0e-786d-4355-a5c6-a09abaf78a64 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=05fa03b176 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2210 ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e6d70c0e-786d-4355-a5c6-a09abaf78a64 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=05fa03b176 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2210 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e6d70c0e-786d-4355-a5c6-a09abaf78a64 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=05fa03b176 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2210 identity=1077 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e6d70c0e-786d-4355-a5c6-a09abaf78a64 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=05fa03b176 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2210 identity=1077 ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e6d70c0e-786d-4355-a5c6-a09abaf78a64 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 b028c65b-0187-4069-840e-56f3b24a37e0 default }" containerID=3a1d5ba85809da0fcc152f9c26e5d8194573cfe4814a028d4876677700001f81 datapathConfiguration="&{false false false false false }" interface=lxc07724a2470aa k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3a1d5ba858 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=957 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a1d5ba858 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=957 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a1d5ba858 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=957 identity=419 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a1d5ba858 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=957 identity=419 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f30fb2c33b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2584 identity=50443 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f30fb2c33b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2584 identity=50443 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=05fa03b176 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2210 identity=1077 ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e6d70c0e-786d-4355-a5c6-a09abaf78a64 subsys=endpoint level=info msg="Successful endpoint creation" containerID=05fa03b176 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2210 identity=1077 ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e6d70c0e-786d-4355-a5c6-a09abaf78a64 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3a1d5ba858 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=957 identity=419 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a1d5ba858 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=957 identity=419 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.235 8c3f656d-9f45-4480-a649-d6b7e5636e49 default }" containerID=136378645261a226a51a0ebb1b4768d1872352924aadf24051be9dfe3d95bbcf datapathConfiguration="&{false false false false false }" interface=lxcc8b08eeb24ed k8sPodName=monitoring/vector-s4qvq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1363786452 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2446 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/vector-s4qvq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1363786452 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2446 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/vector-s4qvq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1363786452 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2446 identity=29724 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/vector-s4qvq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1363786452 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2446 identity=29724 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/vector-s4qvq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1363786452 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2446 identity=29724 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/vector-s4qvq subsys=endpoint level=info msg="Successful endpoint creation" containerID=1363786452 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2446 identity=29724 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/vector-s4qvq subsys=daemon level=info msg="Delete endpoint request" containerID=05fa03b176 endpointID=2210 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e6d70c0e-786d-4355-a5c6-a09abaf78a64 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=05fa03b176 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2210 identity=1077 ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e6d70c0e-786d-4355-a5c6-a09abaf78a64 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.104 d1c9d6a5-3b05-4501-bdeb-3359c2f5e7f1 default }" containerID=ec938d0fb66c67109e3c9e235ecd42ad8d606ce51878ae660350d091f856ce48 datapathConfiguration="&{false false false false false }" interface=lxcc675c56b29d0 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec938d0fb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1873 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec938d0fb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1873 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=ec938d0fb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1873 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ec938d0fb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1873 identity=18841 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec938d0fb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1873 identity=18841 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ec938d0fb6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1873 identity=18841 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec938d0fb6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1873 identity=18841 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.184 e735962b-347b-412c-9979-c89944c71732 default }" containerID=a754193fbe73f75b5c997f59ed7a23b3ace7c5ecb910e9461e30bfcc8dc15f96 datapathConfiguration="&{false false false false false }" interface=lxc597848e9fade k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-584zd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a754193fbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=901 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-584zd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a754193fbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=901 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-584zd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a754193fbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=901 identity=24080 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-584zd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a754193fbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=901 identity=24080 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-584zd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a754193fbe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=901 identity=24080 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-584zd subsys=endpoint level=info msg="Successful endpoint creation" containerID=a754193fbe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=901 identity=24080 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-584zd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.252 8efb4f66-f7f9-4c54-9f74-99ac0a8456ac default }" containerID=cb146a506fbe90f8532c38f73e07f88bf1d7b461f4d4b7d95d0bfc5506278c81 datapathConfiguration="&{false false false false false }" interface=lxcf03dec7beb4a k8sPodName=openstack/memcached-memcached-cf56b6468-vkhjm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb146a506f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4007 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-vkhjm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cb146a506f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4007 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-vkhjm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cb146a506f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4007 identity=33632 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-vkhjm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=cb146a506f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4007 identity=33632 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-vkhjm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cb146a506f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4007 identity=33632 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-vkhjm subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb146a506f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4007 identity=33632 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-vkhjm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.179 d06ffa04-89c1-46aa-8daf-720d17b61dd2 default }" containerID=79402b0e5194ebaf6779a7358f558001313417d28525da85c6f9bd1509476f2c datapathConfiguration="&{false false false false false }" interface=lxc8c0821138235 k8sPodName=local-path-storage/helper-pod-create-pvc-ba8aba8f-c004-4411-bab9-c44ead44df88 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79402b0e51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1836 ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ba8aba8f-c004-4411-bab9-c44ead44df88 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79402b0e51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1836 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ba8aba8f-c004-4411-bab9-c44ead44df88 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=79402b0e51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1836 identity=1077 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ba8aba8f-c004-4411-bab9-c44ead44df88 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=79402b0e51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1836 identity=1077 ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ba8aba8f-c004-4411-bab9-c44ead44df88 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=79402b0e51 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1836 identity=1077 ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ba8aba8f-c004-4411-bab9-c44ead44df88 subsys=endpoint level=info msg="Successful endpoint creation" containerID=79402b0e51 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1836 identity=1077 ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ba8aba8f-c004-4411-bab9-c44ead44df88 subsys=daemon level=info msg="Delete endpoint request" containerID=79402b0e51 endpointID=1836 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ba8aba8f-c004-4411-bab9-c44ead44df88 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=79402b0e51 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1836 identity=1077 ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ba8aba8f-c004-4411-bab9-c44ead44df88 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 64b7b751-4b74-4fb5-8e1b-53cf6fcff4fe default }" containerID=e5c0113da37e9a7a261fc42a7e0ecc6e05d6fcbe6a94ff8766054c244b87ad0d datapathConfiguration="&{false false false false false }" interface=lxc1cfe78c7c3ae k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e5c0113da3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3116 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e5c0113da3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3116 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e5c0113da3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3116 identity=64217 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e5c0113da3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3116 identity=64217 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e5c0113da3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3116 identity=64217 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e5c0113da3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3116 identity=64217 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.84 934322a8-6f2d-4ea3-9cc7-c874cbed5e5d default }" containerID=b4bc43ebc039033427b5922a5a7a4e5ce57bbc8da929ce7c86732ca86a3b8633 datapathConfiguration="&{false false false false false }" interface=lxc86ab2678f479 k8sPodName=openstack/keystone-api-648b569b6c-457wc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4bc43ebc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-api-648b569b6c-457wc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4bc43ebc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-api-648b569b6c-457wc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b4bc43ebc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 identity=1730 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-api-648b569b6c-457wc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b4bc43ebc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 identity=1730 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-api-648b569b6c-457wc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.120 86544b42-f3f0-4b7d-af3d-bbd3b0dc4c42 default }" containerID=65c0fd41c8d2eb2c9945adc2996a6678a5ecf58c1a2ac8ea3da4c53d154c5b40 datapathConfiguration="&{false false false false false }" interface=lxc5695d022c685 k8sPodName=openstack/keystone-credential-setup-jq557 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65c0fd41c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-credential-setup-jq557 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65c0fd41c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=200fc721-6102-4b0c-b144-4060f051b5b4,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=200fc721-6102-4b0c-b144-4060f051b5b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-credential-setup-jq557 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=200fc721-6102-4b0c-b144-4060f051b5b4;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=200fc721-6102-4b0c-b144-4060f051b5b4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=65c0fd41c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 identity=3513 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=200fc721-6102-4b0c-b144-4060f051b5b4,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=200fc721-6102-4b0c-b144-4060f051b5b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-credential-setup-jq557 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=65c0fd41c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 identity=3513 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-credential-setup-jq557 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b4bc43ebc0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=904 identity=1730 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-api-648b569b6c-457wc subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4bc43ebc0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=904 identity=1730 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-api-648b569b6c-457wc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=65c0fd41c8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=608 identity=3513 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-credential-setup-jq557 subsys=endpoint level=info msg="Successful endpoint creation" containerID=65c0fd41c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=608 identity=3513 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-credential-setup-jq557 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=65c0fd41c8 endpointID=608 k8sNamespace=openstack k8sPodName=keystone-credential-setup-jq557 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=200fc721-6102-4b0c-b144-4060f051b5b4 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=200fc721-6102-4b0c-b144-4060f051b5b4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=65c0fd41c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=608 identity=3513 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-credential-setup-jq557 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 d58e7f65-c3a2-4a71-922a-2a69a0601e28 default }" containerID=2c5f2c7d16f1b7b394161f03f98ebfe2dc2326a8f51da660ad4125e203528337 datapathConfiguration="&{false false false false false }" interface=lxcfea29a07d28a k8sPodName=openstack/keystone-db-init-n6bct labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c5f2c7d16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1514 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-db-init-n6bct subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c5f2c7d16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1514 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=93529157-a6da-42d7-9996-02ab1a5b2dd2,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=93529157-a6da-42d7-9996-02ab1a5b2dd2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-db-init-n6bct subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=93529157-a6da-42d7-9996-02ab1a5b2dd2;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=93529157-a6da-42d7-9996-02ab1a5b2dd2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=2c5f2c7d16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1514 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-db-init-n6bct line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2c5f2c7d16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1514 identity=12764 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=93529157-a6da-42d7-9996-02ab1a5b2dd2,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=93529157-a6da-42d7-9996-02ab1a5b2dd2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-db-init-n6bct oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c5f2c7d16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1514 identity=12764 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-db-init-n6bct subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2c5f2c7d16 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1514 identity=12764 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-db-init-n6bct subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c5f2c7d16 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1514 identity=12764 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-db-init-n6bct subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2c5f2c7d16 endpointID=1514 k8sNamespace=openstack k8sPodName=keystone-db-init-n6bct subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=93529157-a6da-42d7-9996-02ab1a5b2dd2 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=93529157-a6da-42d7-9996-02ab1a5b2dd2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2c5f2c7d16 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1514 identity=12764 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-db-init-n6bct subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 80a3ad38-ad07-4d03-9383-c5041ac203e8 default }" containerID=17cebe700491503e654b5e325130e7a3ec97b940e18622cfd830e714834c0ed0 datapathConfiguration="&{false false false false false }" interface=lxc1ec30f6887aa k8sPodName=openstack/keystone-fernet-setup-ht7b4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=17cebe7004 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1132 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-fernet-setup-ht7b4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=17cebe7004 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1132 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=74f32f90-00af-4f78-a0d7-fa2231a3d014,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=74f32f90-00af-4f78-a0d7-fa2231a3d014,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-fernet-setup-ht7b4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=74f32f90-00af-4f78-a0d7-fa2231a3d014;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=74f32f90-00af-4f78-a0d7-fa2231a3d014;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=17cebe7004 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1132 identity=15500 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=74f32f90-00af-4f78-a0d7-fa2231a3d014,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=74f32f90-00af-4f78-a0d7-fa2231a3d014,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-fernet-setup-ht7b4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=17cebe7004 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1132 identity=15500 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-fernet-setup-ht7b4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=17cebe7004 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1132 identity=15500 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-fernet-setup-ht7b4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=17cebe7004 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1132 identity=15500 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-fernet-setup-ht7b4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=17cebe7004 endpointID=1132 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-ht7b4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=74f32f90-00af-4f78-a0d7-fa2231a3d014 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=74f32f90-00af-4f78-a0d7-fa2231a3d014 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=17cebe7004 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1132 identity=15500 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-fernet-setup-ht7b4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.206 32752b4d-44e9-4111-b9f4-d7cef6003dce default }" containerID=cdbd6f547968cfaed96c80953d9d98a38095cae7220aa041f82bb1292a500d1f datapathConfiguration="&{false false false false false }" interface=lxc90e5d328ae8c k8sPodName=openstack/keystone-db-sync-fr5nk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cdbd6f5479 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3100 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-db-sync-fr5nk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cdbd6f5479 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3100 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=139991f6-b072-479e-a014-e6c5c3837ba5,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=139991f6-b072-479e-a014-e6c5c3837ba5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-db-sync-fr5nk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=139991f6-b072-479e-a014-e6c5c3837ba5;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=139991f6-b072-479e-a014-e6c5c3837ba5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cdbd6f5479 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3100 identity=51684 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=139991f6-b072-479e-a014-e6c5c3837ba5,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=139991f6-b072-479e-a014-e6c5c3837ba5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-db-sync-fr5nk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cdbd6f5479 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3100 identity=51684 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-db-sync-fr5nk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cdbd6f5479 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3100 identity=51684 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-db-sync-fr5nk subsys=endpoint level=info msg="Successful endpoint creation" containerID=cdbd6f5479 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3100 identity=51684 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-db-sync-fr5nk subsys=daemon level=info msg="Delete endpoint request" containerID=cdbd6f5479 endpointID=3100 k8sNamespace=openstack k8sPodName=keystone-db-sync-fr5nk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=139991f6-b072-479e-a014-e6c5c3837ba5 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=139991f6-b072-479e-a014-e6c5c3837ba5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=cdbd6f5479 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3100 identity=51684 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-db-sync-fr5nk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 a8eee6aa-519c-4946-b74a-df77a8bc247d default }" containerID=0deb965fc85c5d084ad4ee575c8e3469196d76cf88a7060ea5f4688174669b24 datapathConfiguration="&{false false false false false }" interface=lxcae181fd0fda7 k8sPodName=openstack/keystone-rabbit-init-m8wxr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0deb965fc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-rabbit-init-m8wxr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0deb965fc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=304140f4-21ce-4680-94f2-e578b0a86e67,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=304140f4-21ce-4680-94f2-e578b0a86e67,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-rabbit-init-m8wxr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=304140f4-21ce-4680-94f2-e578b0a86e67;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=304140f4-21ce-4680-94f2-e578b0a86e67;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0deb965fc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 identity=5202 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=304140f4-21ce-4680-94f2-e578b0a86e67,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=304140f4-21ce-4680-94f2-e578b0a86e67,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-rabbit-init-m8wxr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0deb965fc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 identity=5202 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-rabbit-init-m8wxr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0deb965fc8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=243 identity=5202 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-rabbit-init-m8wxr subsys=endpoint level=info msg="Successful endpoint creation" containerID=0deb965fc8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=243 identity=5202 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-rabbit-init-m8wxr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0deb965fc8 endpointID=243 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-m8wxr subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=304140f4-21ce-4680-94f2-e578b0a86e67 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=304140f4-21ce-4680-94f2-e578b0a86e67 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0deb965fc8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=243 identity=5202 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-rabbit-init-m8wxr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 2308c07f-d5eb-4990-bff7-eee0e1dd0a52 default }" containerID=9061ed957808dad503e862293d55524aa9cb33560d25202a3f57753e77060156 datapathConfiguration="&{false false false false false }" interface=lxca235de58db0c k8sPodName=openstack/keystone-domain-manage-pnzlh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9061ed9578 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1384 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-domain-manage-pnzlh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9061ed9578 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1384 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c18ba9ce-133a-4919-8e5a-d11dde7b5130,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=c18ba9ce-133a-4919-8e5a-d11dde7b5130,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-domain-manage-pnzlh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c18ba9ce-133a-4919-8e5a-d11dde7b5130;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=c18ba9ce-133a-4919-8e5a-d11dde7b5130;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9061ed9578 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1384 identity=21579 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c18ba9ce-133a-4919-8e5a-d11dde7b5130,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=c18ba9ce-133a-4919-8e5a-d11dde7b5130,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-domain-manage-pnzlh oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9061ed9578 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1384 identity=21579 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-domain-manage-pnzlh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9061ed9578 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1384 identity=21579 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-domain-manage-pnzlh subsys=endpoint level=info msg="Successful endpoint creation" containerID=9061ed9578 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1384 identity=21579 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-domain-manage-pnzlh subsys=daemon level=info msg="Delete endpoint request" containerID=9061ed9578 endpointID=1384 k8sNamespace=openstack k8sPodName=keystone-domain-manage-pnzlh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c18ba9ce-133a-4919-8e5a-d11dde7b5130 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=c18ba9ce-133a-4919-8e5a-d11dde7b5130 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9061ed9578 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1384 identity=21579 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-domain-manage-pnzlh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 54c0f5b8-1799-4a9a-91a8-a700fc9f3776 default }" containerID=c9c37a84356b708cdf385d80653e98611351ea02ed9abb20c1c389b7a26514e8 datapathConfiguration="&{false false false false false }" interface=lxc8b7619fb0402 k8sPodName=openstack/keystone-bootstrap-zqtlg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c9c37a8435 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-bootstrap-zqtlg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9c37a8435 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=429711d4-51dc-497c-a042-e2d8495be452,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=429711d4-51dc-497c-a042-e2d8495be452,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-bootstrap-zqtlg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c9c37a8435 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-bootstrap-zqtlg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=429711d4-51dc-497c-a042-e2d8495be452;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=429711d4-51dc-497c-a042-e2d8495be452;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c9c37a8435 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 identity=52529 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=429711d4-51dc-497c-a042-e2d8495be452,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=429711d4-51dc-497c-a042-e2d8495be452,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-bootstrap-zqtlg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c9c37a8435 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 identity=52529 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-bootstrap-zqtlg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c9c37a8435 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2215 identity=52529 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-bootstrap-zqtlg subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9c37a8435 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2215 identity=52529 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-bootstrap-zqtlg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c9c37a8435 endpointID=2215 k8sNamespace=openstack k8sPodName=keystone-bootstrap-zqtlg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=429711d4-51dc-497c-a042-e2d8495be452 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=429711d4-51dc-497c-a042-e2d8495be452 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c9c37a8435 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2215 identity=52529 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-bootstrap-zqtlg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 8c1892f1-c555-457c-9f73-d4594f60354e default }" containerID=442a060f735e8b6199d2d7720bb81edd2e03c2e883d0faf11b3ee96fb839fd32 datapathConfiguration="&{false false false false false }" interface=lxcfd7c2653e5be k8sPodName=local-path-storage/helper-pod-create-pvc-f07cc84c-e04b-4baa-932c-005ad4bfc27c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=442a060f73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3018 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f07cc84c-e04b-4baa-932c-005ad4bfc27c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=442a060f73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3018 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f07cc84c-e04b-4baa-932c-005ad4bfc27c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=442a060f73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3018 identity=1077 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f07cc84c-e04b-4baa-932c-005ad4bfc27c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=442a060f73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3018 identity=1077 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f07cc84c-e04b-4baa-932c-005ad4bfc27c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=442a060f73 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3018 identity=1077 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f07cc84c-e04b-4baa-932c-005ad4bfc27c subsys=endpoint level=info msg="Successful endpoint creation" containerID=442a060f73 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3018 identity=1077 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f07cc84c-e04b-4baa-932c-005ad4bfc27c subsys=daemon level=info msg="Delete endpoint request" containerID=442a060f73 endpointID=3018 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f07cc84c-e04b-4baa-932c-005ad4bfc27c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=442a060f73 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3018 identity=1077 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f07cc84c-e04b-4baa-932c-005ad4bfc27c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 725c98df-63c7-4a30-897e-0746076f7021 default }" containerID=089dcc99ac8da78b9d30ae88e831467963a6e72ec67a37ce804ed3f15fcd2eef datapathConfiguration="&{false false false false false }" interface=lxc2826531cda43 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=089dcc99ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=089dcc99ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=089dcc99ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 identity=4675 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=089dcc99ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 identity=4675 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=089dcc99ac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=655 identity=4675 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=089dcc99ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=655 identity=4675 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.181 7195778d-5bac-448d-a792-611b04838472 default }" containerID=4c009b54a86be2e382af25e36cff06079ee35a642796ebc79e5f6ce3f7efb7cc datapathConfiguration="&{false false false false false }" interface=lxc00100fb8d3bb k8sPodName=openstack/barbican-db-init-5d7z7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c009b54a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1813 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-db-init-5d7z7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c009b54a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1813 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9544b64f-308a-4dee-999d-7e08151a9f22,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=9544b64f-308a-4dee-999d-7e08151a9f22,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-db-init-5d7z7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9544b64f-308a-4dee-999d-7e08151a9f22;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=9544b64f-308a-4dee-999d-7e08151a9f22;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4c009b54a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1813 identity=9000 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9544b64f-308a-4dee-999d-7e08151a9f22,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=9544b64f-308a-4dee-999d-7e08151a9f22,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-db-init-5d7z7 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4c009b54a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1813 identity=9000 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-db-init-5d7z7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4c009b54a8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1813 identity=9000 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-db-init-5d7z7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c009b54a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1813 identity=9000 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-db-init-5d7z7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.119 e0556054-99a1-48f9-9d0b-412c3c0181da default }" containerID=a423216c7aa9c9889f6ed99136d5c644446f0720f58a45531a8beb66a0ef29f3 datapathConfiguration="&{false false false false false }" interface=lxc2f1e715cee71 k8sPodName=openstack/barbican-api-66df4d5664-jwjht labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a423216c7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=625 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/barbican-api-66df4d5664-jwjht subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a423216c7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=625 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/barbican-api-66df4d5664-jwjht subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a423216c7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=625 identity=6128 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/barbican-api-66df4d5664-jwjht oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a423216c7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=625 identity=6128 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/barbican-api-66df4d5664-jwjht subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a423216c7a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=625 identity=6128 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/barbican-api-66df4d5664-jwjht subsys=endpoint level=info msg="Successful endpoint creation" containerID=a423216c7a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=625 identity=6128 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/barbican-api-66df4d5664-jwjht subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4c009b54a8 endpointID=1813 k8sNamespace=openstack k8sPodName=barbican-db-init-5d7z7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9544b64f-308a-4dee-999d-7e08151a9f22 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=9544b64f-308a-4dee-999d-7e08151a9f22 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=4c009b54a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1813 identity=9000 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-db-init-5d7z7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 618882da-7f2e-4dfd-9297-0e12544d545d default }" containerID=9ccaa97478da7931919f47d67b84a86338ca44b0dc7259809abccd4afdfaec80 datapathConfiguration="&{false false false false false }" interface=lxc68a461574bf3 k8sPodName=openstack/barbican-db-sync-8lrlh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ccaa97478 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=432 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-db-sync-8lrlh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ccaa97478 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=432 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4c76ea67-1bb5-4c82-b7b0-a84e71499781,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=4c76ea67-1bb5-4c82-b7b0-a84e71499781,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-db-sync-8lrlh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9ccaa97478 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=432 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-db-sync-8lrlh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=4c76ea67-1bb5-4c82-b7b0-a84e71499781;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=4c76ea67-1bb5-4c82-b7b0-a84e71499781;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9ccaa97478 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=432 identity=51279 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4c76ea67-1bb5-4c82-b7b0-a84e71499781,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=4c76ea67-1bb5-4c82-b7b0-a84e71499781,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-db-sync-8lrlh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ccaa97478 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=432 identity=51279 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-db-sync-8lrlh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9ccaa97478 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=432 identity=51279 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-db-sync-8lrlh subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ccaa97478 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=432 identity=51279 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-db-sync-8lrlh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9ccaa97478 endpointID=432 k8sNamespace=openstack k8sPodName=barbican-db-sync-8lrlh subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=4c76ea67-1bb5-4c82-b7b0-a84e71499781 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=4c76ea67-1bb5-4c82-b7b0-a84e71499781 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=9ccaa97478 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=432 identity=51279 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-db-sync-8lrlh subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.036350048020344396 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.242 6f5e7a85-c475-4a29-9bef-8677b4da9ffd default }" containerID=ef368ebce6ee030a6f7e4949655e1da3bf915df2e1ca7b1d1768fb8a1e801c8c datapathConfiguration="&{false false false false false }" interface=lxc71bddbcda6a4 k8sPodName=openstack/barbican-rabbit-init-485gd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef368ebce6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-rabbit-init-485gd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef368ebce6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e5e3cacf-a3cf-40dc-8645-36061fe43a4c,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e5e3cacf-a3cf-40dc-8645-36061fe43a4c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-rabbit-init-485gd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e5e3cacf-a3cf-40dc-8645-36061fe43a4c;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=e5e3cacf-a3cf-40dc-8645-36061fe43a4c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ef368ebce6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 identity=928 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e5e3cacf-a3cf-40dc-8645-36061fe43a4c,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e5e3cacf-a3cf-40dc-8645-36061fe43a4c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-rabbit-init-485gd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef368ebce6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 identity=928 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-rabbit-init-485gd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ef368ebce6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1092 identity=928 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-rabbit-init-485gd subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef368ebce6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1092 identity=928 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-rabbit-init-485gd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ef368ebce6 endpointID=1092 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-485gd subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e5e3cacf-a3cf-40dc-8645-36061fe43a4c k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=e5e3cacf-a3cf-40dc-8645-36061fe43a4c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ef368ebce6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1092 identity=928 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-rabbit-init-485gd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 2268d6d7-6251-4466-a060-382048f3f746 default }" containerID=046c53be776e64d1407cc2c8ae1eab42716f97e712ff2a3c17f39d2b12b3967c datapathConfiguration="&{false false false false false }" interface=lxce1832334f1d9 k8sPodName=openstack/barbican-ks-service-c7s6k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=046c53be77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-service-c7s6k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=046c53be77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3e3922da-8d10-42e8-9e4d-1d689b09be10,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=3e3922da-8d10-42e8-9e4d-1d689b09be10,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-service-c7s6k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3e3922da-8d10-42e8-9e4d-1d689b09be10;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=3e3922da-8d10-42e8-9e4d-1d689b09be10;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=046c53be77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 identity=1016 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3e3922da-8d10-42e8-9e4d-1d689b09be10,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=3e3922da-8d10-42e8-9e4d-1d689b09be10,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-service-c7s6k oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=046c53be77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 identity=1016 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-service-c7s6k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=046c53be77 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1553 identity=1016 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-service-c7s6k subsys=endpoint level=info msg="Successful endpoint creation" containerID=046c53be77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1553 identity=1016 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-service-c7s6k subsys=daemon level=info msg="Delete endpoint request" containerID=046c53be77 endpointID=1553 k8sNamespace=openstack k8sPodName=barbican-ks-service-c7s6k subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3e3922da-8d10-42e8-9e4d-1d689b09be10 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=3e3922da-8d10-42e8-9e4d-1d689b09be10 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=046c53be77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1553 identity=1016 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-service-c7s6k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.82 4b6618c2-c7e5-4f6d-8763-605725f28ee3 default }" containerID=aa7e55191e3242a05dfc9593d223d297ca114bd20c03c4523664086fb03f6461 datapathConfiguration="&{false false false false false }" interface=lxce6af03570227 k8sPodName=openstack/barbican-ks-endpoints-66f76 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa7e55191e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/barbican-ks-endpoints-66f76 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa7e55191e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=29c07696-0e70-45a0-9c69-f87ff715d00d,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=29c07696-0e70-45a0-9c69-f87ff715d00d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/barbican-ks-endpoints-66f76 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=29c07696-0e70-45a0-9c69-f87ff715d00d;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=29c07696-0e70-45a0-9c69-f87ff715d00d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=aa7e55191e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.82 ipv6= k8sPodName=openstack/barbican-ks-endpoints-66f76 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=aa7e55191e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 identity=8412 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=29c07696-0e70-45a0-9c69-f87ff715d00d,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=29c07696-0e70-45a0-9c69-f87ff715d00d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/barbican-ks-endpoints-66f76 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa7e55191e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 identity=8412 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/barbican-ks-endpoints-66f76 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aa7e55191e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=309 identity=8412 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/barbican-ks-endpoints-66f76 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa7e55191e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=309 identity=8412 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/barbican-ks-endpoints-66f76 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aa7e55191e endpointID=309 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-66f76 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=29c07696-0e70-45a0-9c69-f87ff715d00d k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=29c07696-0e70-45a0-9c69-f87ff715d00d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=aa7e55191e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=309 identity=8412 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/barbican-ks-endpoints-66f76 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 7d99f80e-cab7-48cf-bf66-a2e142570a1d default }" containerID=2c5fb1e0ef966a5ad74e3996de6a0317cd97d22cd3e060922af992aea22ccbb1 datapathConfiguration="&{false false false false false }" interface=lxcd7038787cc1b k8sPodName=openstack/barbican-ks-user-6dpjl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c5fb1e0ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2150 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/barbican-ks-user-6dpjl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c5fb1e0ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2150 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0f4abc93-433f-4a01-b6bf-34dd6f04426b,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=0f4abc93-433f-4a01-b6bf-34dd6f04426b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/barbican-ks-user-6dpjl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=0f4abc93-433f-4a01-b6bf-34dd6f04426b;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=0f4abc93-433f-4a01-b6bf-34dd6f04426b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c5fb1e0ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2150 identity=52567 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0f4abc93-433f-4a01-b6bf-34dd6f04426b,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=0f4abc93-433f-4a01-b6bf-34dd6f04426b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/barbican-ks-user-6dpjl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c5fb1e0ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2150 identity=52567 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/barbican-ks-user-6dpjl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2c5fb1e0ef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2150 identity=52567 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/barbican-ks-user-6dpjl subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c5fb1e0ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2150 identity=52567 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/barbican-ks-user-6dpjl subsys=daemon level=info msg="Delete endpoint request" containerID=2c5fb1e0ef endpointID=2150 k8sNamespace=openstack k8sPodName=barbican-ks-user-6dpjl subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=0f4abc93-433f-4a01-b6bf-34dd6f04426b k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=0f4abc93-433f-4a01-b6bf-34dd6f04426b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2c5fb1e0ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2150 identity=52567 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/barbican-ks-user-6dpjl subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.206 5289d4e8-e8f1-41e9-841e-69a3ae039510 default }" containerID=381554152f19f546facd7071c641552c759866791e00d141b272ee552a2ce775 datapathConfiguration="&{false false false false false }" interface=lxc51e179ca58b3 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zssj7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=381554152f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1618 ipv4=10.0.0.206 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zssj7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=381554152f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1618 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.206 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zssj7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=381554152f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1618 identity=2301 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.206 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zssj7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=381554152f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1618 identity=2301 ipv4=10.0.0.206 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zssj7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=381554152f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1618 identity=2301 ipv4=10.0.0.206 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zssj7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=381554152f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1618 identity=2301 ipv4=10.0.0.206 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zssj7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.48 95a4ec0b-1b85-47c3-92a5-0acd8f3786d1 default }" containerID=cc4d5ceaf1cbaf343c5571ad96d541997b3569283d7059e47a3b04b1c36a50b5 datapathConfiguration="&{false false false false false }" interface=lxc4a467b9e2645 k8sPodName=openstack/rook-ceph-detect-version-vdb8z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc4d5ceaf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3810 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vdb8z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc4d5ceaf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3810 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=50f2c637-e83e-4f64-a71b-a1cb24015d5b,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=50f2c637-e83e-4f64-a71b-a1cb24015d5b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vdb8z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=50f2c637-e83e-4f64-a71b-a1cb24015d5b;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=50f2c637-e83e-4f64-a71b-a1cb24015d5b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc4d5ceaf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3810 identity=7521 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=50f2c637-e83e-4f64-a71b-a1cb24015d5b,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=50f2c637-e83e-4f64-a71b-a1cb24015d5b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vdb8z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc4d5ceaf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3810 identity=7521 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vdb8z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cc4d5ceaf1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3810 identity=7521 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vdb8z subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc4d5ceaf1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3810 identity=7521 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vdb8z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cc4d5ceaf1 endpointID=3810 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-vdb8z subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=50f2c637-e83e-4f64-a71b-a1cb24015d5b k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=50f2c637-e83e-4f64-a71b-a1cb24015d5b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=cc4d5ceaf1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3810 identity=7521 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vdb8z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.147 edec3c53-10c1-4ed2-8107-d2f8fe9ee600 default }" containerID=44c21e7223eac7cad9a3deb12b2045fe13e854f813eba560e9a68bd5ce200bb0 datapathConfiguration="&{false false false false false }" interface=lxcc5b8b05d5032 k8sPodName=openstack/ceph-object-controller-detect-version-6rwlf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44c21e7223 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6rwlf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44c21e7223 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=8ff267d0-e5fa-4848-b4bb-22513e5a56b2,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=8ff267d0-e5fa-4848-b4bb-22513e5a56b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6rwlf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=44c21e7223 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.147 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6rwlf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=8ff267d0-e5fa-4848-b4bb-22513e5a56b2;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=8ff267d0-e5fa-4848-b4bb-22513e5a56b2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44c21e7223 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identity=40551 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=8ff267d0-e5fa-4848-b4bb-22513e5a56b2,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=8ff267d0-e5fa-4848-b4bb-22513e5a56b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6rwlf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=44c21e7223 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identity=40551 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6rwlf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=44c21e7223 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=829 identity=40551 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6rwlf subsys=endpoint level=info msg="Successful endpoint creation" containerID=44c21e7223 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=829 identity=40551 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6rwlf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=44c21e7223 endpointID=829 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-6rwlf subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=8ff267d0-e5fa-4848-b4bb-22513e5a56b2 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=8ff267d0-e5fa-4848-b4bb-22513e5a56b2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=44c21e7223 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=829 identity=40551 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6rwlf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 44e3ec8d-11cf-427b-9a52-d308c998c234 default }" containerID=8ce51e7f3e70888907db1a5ce87fdf5e50b070051304b9029d681f1b7949e100 datapathConfiguration="&{false false false false false }" interface=lxce6d1dc955628 k8sPodName=local-path-storage/helper-pod-create-pvc-d91471be-f8ab-4373-bf28-31d3b10a6024 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ce51e7f3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=114 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d91471be-f8ab-4373-bf28-31d3b10a6024 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ce51e7f3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=114 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d91471be-f8ab-4373-bf28-31d3b10a6024 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ce51e7f3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=114 identity=1077 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d91471be-f8ab-4373-bf28-31d3b10a6024 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ce51e7f3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=114 identity=1077 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d91471be-f8ab-4373-bf28-31d3b10a6024 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8ce51e7f3e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=114 identity=1077 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d91471be-f8ab-4373-bf28-31d3b10a6024 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ce51e7f3e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=114 identity=1077 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d91471be-f8ab-4373-bf28-31d3b10a6024 subsys=daemon level=info msg="Delete endpoint request" containerID=8ce51e7f3e endpointID=114 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d91471be-f8ab-4373-bf28-31d3b10a6024 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8ce51e7f3e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=114 identity=1077 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d91471be-f8ab-4373-bf28-31d3b10a6024 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.98 08c8149c-b1b2-4e21-93d1-d46b9d7a77ec default }" containerID=e28d836e91cc96c3bff7eeb304b2d16d3f54681effbb23aa737355674d2036f5 datapathConfiguration="&{false false false false false }" interface=lxc18ec4b7386b0 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e28d836e91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1358 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e28d836e91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1358 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e28d836e91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1358 identity=2244 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e28d836e91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1358 identity=2244 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e28d836e91 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1358 identity=2244 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e28d836e91 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1358 identity=2244 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.69 c2e8f84d-38ef-4b8c-ab9e-3165ea0a7686 default }" containerID=57ce4ec3f1d65bf582052994ed647b77b6ed5822cc27a52b2cc0fc7d56c08ae4 datapathConfiguration="&{false false false false false }" interface=lxc2b731c987e67 k8sPodName=openstack/glance-db-init-xj42b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57ce4ec3f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1034 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/glance-db-init-xj42b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57ce4ec3f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1034 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=800ba0ab-1fc3-4001-8b22-80ef61d824dc,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=800ba0ab-1fc3-4001-8b22-80ef61d824dc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/glance-db-init-xj42b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=800ba0ab-1fc3-4001-8b22-80ef61d824dc;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=800ba0ab-1fc3-4001-8b22-80ef61d824dc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=57ce4ec3f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1034 identity=28347 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=800ba0ab-1fc3-4001-8b22-80ef61d824dc,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=800ba0ab-1fc3-4001-8b22-80ef61d824dc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/glance-db-init-xj42b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=57ce4ec3f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1034 identity=28347 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/glance-db-init-xj42b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=57ce4ec3f1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1034 identity=28347 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/glance-db-init-xj42b subsys=endpoint level=info msg="Successful endpoint creation" containerID=57ce4ec3f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1034 identity=28347 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/glance-db-init-xj42b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=57ce4ec3f1 endpointID=1034 k8sNamespace=openstack k8sPodName=glance-db-init-xj42b subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=800ba0ab-1fc3-4001-8b22-80ef61d824dc k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=800ba0ab-1fc3-4001-8b22-80ef61d824dc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=57ce4ec3f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1034 identity=28347 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/glance-db-init-xj42b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 f78dda4e-d469-4fc3-876c-6e0754ad1de4 default }" containerID=dbd6ed5eb82df21fe412ea321daa9e574400e2be6ede4379ae2520981935691a datapathConfiguration="&{false false false false false }" interface=lxca15913a06706 k8sPodName=openstack/glance-db-sync-dz7tl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dbd6ed5eb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=196 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/glance-db-sync-dz7tl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dbd6ed5eb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=196 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=75a2e14d-5545-46bb-837a-1e8af02390fa,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=75a2e14d-5545-46bb-837a-1e8af02390fa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/glance-db-sync-dz7tl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dbd6ed5eb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=196 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.251 ipv6= k8sPodName=openstack/glance-db-sync-dz7tl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=75a2e14d-5545-46bb-837a-1e8af02390fa;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=75a2e14d-5545-46bb-837a-1e8af02390fa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dbd6ed5eb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=196 identity=12562 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=75a2e14d-5545-46bb-837a-1e8af02390fa,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=75a2e14d-5545-46bb-837a-1e8af02390fa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/glance-db-sync-dz7tl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dbd6ed5eb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=196 identity=12562 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/glance-db-sync-dz7tl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dbd6ed5eb8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=196 identity=12562 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/glance-db-sync-dz7tl subsys=endpoint level=info msg="Successful endpoint creation" containerID=dbd6ed5eb8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=196 identity=12562 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/glance-db-sync-dz7tl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.172 b69a852a-4ec4-4e40-a55c-2dbe68648d19 default }" containerID=fc04002f0e535b79ab27e5d35d661662f2b12ad03d1f850662bda7929df92fe3 datapathConfiguration="&{false false false false false }" interface=lxcd5580633d539 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xflfz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc04002f0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2935 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xflfz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc04002f0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2935 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xflfz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=fc04002f0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2935 identity=11290 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xflfz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc04002f0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2935 identity=11290 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xflfz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 4d4a94cf-203d-4ccf-8dd9-f008ab48f9b9 default }" containerID=7ba482d1aebebc5e90efdaafdefa127b5d5eb4df378dd8d40d560c333ddfaf68 datapathConfiguration="&{false false false false false }" interface=lxc9d5a46804578 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-mqnjt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ba482d1ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2561 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-mqnjt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ba482d1ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2561 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-mqnjt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ba482d1ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2561 identity=55418 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-mqnjt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ba482d1ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2561 identity=55418 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-mqnjt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fc04002f0e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2935 identity=11290 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xflfz subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc04002f0e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2935 identity=11290 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xflfz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7ba482d1ae datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2561 identity=55418 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-mqnjt subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ba482d1ae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2561 identity=55418 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-mqnjt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dbd6ed5eb8 endpointID=196 k8sNamespace=openstack k8sPodName=glance-db-sync-dz7tl subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=75a2e14d-5545-46bb-837a-1e8af02390fa k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=75a2e14d-5545-46bb-837a-1e8af02390fa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=dbd6ed5eb8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=196 identity=12562 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/glance-db-sync-dz7tl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.239 8cffcd34-5198-4464-ae65-1e3fefc7accb default }" containerID=43cab69543232641d76b7849289b4fd4a098ea888f228571ca7411c4f73e1395 datapathConfiguration="&{false false false false false }" interface=lxc1fc3fb01f36f k8sPodName=openstack/glance-rabbit-init-sm4bs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=43cab69543 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=450 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-rabbit-init-sm4bs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43cab69543 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=450 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8a6d44be-1cce-46a7-9b39-935232cc4598,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8a6d44be-1cce-46a7-9b39-935232cc4598,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-rabbit-init-sm4bs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8a6d44be-1cce-46a7-9b39-935232cc4598;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=8a6d44be-1cce-46a7-9b39-935232cc4598;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=43cab69543 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=450 identity=20352 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8a6d44be-1cce-46a7-9b39-935232cc4598,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8a6d44be-1cce-46a7-9b39-935232cc4598,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-rabbit-init-sm4bs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=43cab69543 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=450 identity=20352 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-rabbit-init-sm4bs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=43cab69543 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=450 identity=20352 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-rabbit-init-sm4bs subsys=endpoint level=info msg="Successful endpoint creation" containerID=43cab69543 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=450 identity=20352 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-rabbit-init-sm4bs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=43cab69543 endpointID=450 k8sNamespace=openstack k8sPodName=glance-rabbit-init-sm4bs subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8a6d44be-1cce-46a7-9b39-935232cc4598 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=8a6d44be-1cce-46a7-9b39-935232cc4598 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=43cab69543 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=450 identity=20352 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-rabbit-init-sm4bs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 a5c5c3b9-c4d7-4fe3-beb5-38d7aa5358cc default }" containerID=aa4b163e0f5f46aee23635294ea2e9c07c6617d0eb69388f73aadfa688625e5c datapathConfiguration="&{false false false false false }" interface=lxc7c26adb9c92a k8sPodName=openstack/glance-ks-service-482mr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa4b163e0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3855 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-service-482mr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa4b163e0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3855 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cb71e7a6-a49c-475b-ab22-52c8af5399ac,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=cb71e7a6-a49c-475b-ab22-52c8af5399ac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-service-482mr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=aa4b163e0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3855 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-service-482mr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=cb71e7a6-a49c-475b-ab22-52c8af5399ac;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=cb71e7a6-a49c-475b-ab22-52c8af5399ac;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa4b163e0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3855 identity=24003 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cb71e7a6-a49c-475b-ab22-52c8af5399ac,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=cb71e7a6-a49c-475b-ab22-52c8af5399ac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-service-482mr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa4b163e0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3855 identity=24003 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-service-482mr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aa4b163e0f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3855 identity=24003 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-service-482mr subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa4b163e0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3855 identity=24003 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-service-482mr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aa4b163e0f endpointID=3855 k8sNamespace=openstack k8sPodName=glance-ks-service-482mr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=cb71e7a6-a49c-475b-ab22-52c8af5399ac k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=cb71e7a6-a49c-475b-ab22-52c8af5399ac k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=aa4b163e0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3855 identity=24003 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-service-482mr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 a5edafd7-2c64-41e5-8d4e-12384e309df6 default }" containerID=a92253f0435961016c39ebc58e25a5a80b7b6c0aaf843f213e0c697d8b975d83 datapathConfiguration="&{false false false false false }" interface=lxc29cbfeafd8a0 k8sPodName=openstack/glance-ks-endpoints-nmv4l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a92253f043 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2785 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-endpoints-nmv4l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a92253f043 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2785 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=872b37a6-c3b4-4f83-b5c2-fc9174e52606,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=872b37a6-c3b4-4f83-b5c2-fc9174e52606,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-endpoints-nmv4l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=872b37a6-c3b4-4f83-b5c2-fc9174e52606;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=872b37a6-c3b4-4f83-b5c2-fc9174e52606;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a92253f043 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2785 identity=65258 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=872b37a6-c3b4-4f83-b5c2-fc9174e52606,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=872b37a6-c3b4-4f83-b5c2-fc9174e52606,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-endpoints-nmv4l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a92253f043 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2785 identity=65258 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-endpoints-nmv4l subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a92253f043 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2785 identity=65258 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-endpoints-nmv4l subsys=endpoint level=info msg="Successful endpoint creation" containerID=a92253f043 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2785 identity=65258 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-endpoints-nmv4l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a92253f043 endpointID=2785 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-nmv4l subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=872b37a6-c3b4-4f83-b5c2-fc9174e52606 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=872b37a6-c3b4-4f83-b5c2-fc9174e52606 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a92253f043 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2785 identity=65258 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-endpoints-nmv4l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.161 9aa7f3c0-57f9-4b3d-8afd-8c561332111d default }" containerID=3ec91c8ef71970367ad40e6feb48df78f83387b110921dc94419cebc80519aa3 datapathConfiguration="&{false false false false false }" interface=lxce1e7da632305 k8sPodName=openstack/glance-ks-user-d4m9h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ec91c8ef7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2698 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-ks-user-d4m9h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ec91c8ef7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2698 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=43633e74-7d7b-4539-bf2d-cf39f785c8e1,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=43633e74-7d7b-4539-bf2d-cf39f785c8e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-ks-user-d4m9h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=43633e74-7d7b-4539-bf2d-cf39f785c8e1;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=43633e74-7d7b-4539-bf2d-cf39f785c8e1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ec91c8ef7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2698 identity=29974 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=43633e74-7d7b-4539-bf2d-cf39f785c8e1,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=43633e74-7d7b-4539-bf2d-cf39f785c8e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-ks-user-d4m9h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ec91c8ef7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2698 identity=29974 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-ks-user-d4m9h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3ec91c8ef7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2698 identity=29974 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-ks-user-d4m9h subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ec91c8ef7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2698 identity=29974 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-ks-user-d4m9h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3ec91c8ef7 endpointID=2698 k8sNamespace=openstack k8sPodName=glance-ks-user-d4m9h subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=43633e74-7d7b-4539-bf2d-cf39f785c8e1 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=43633e74-7d7b-4539-bf2d-cf39f785c8e1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3ec91c8ef7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2698 identity=29974 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-ks-user-d4m9h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 7e53194a-8b77-45dc-8d3f-a093f08cfff5 default }" containerID=a59be9979d797c12afb31a6a2f853dc2b35d33074cac996fbfbaed26c049dbc3 datapathConfiguration="&{false false false false false }" interface=lxc8a43fc56fca2 k8sPodName=openstack/glance-metadefs-load-np5mv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a59be9979d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1126 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-metadefs-load-np5mv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a59be9979d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1126 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fa902193-0eac-4007-9d8d-ebc8c8b3bc33,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=fa902193-0eac-4007-9d8d-ebc8c8b3bc33,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-metadefs-load-np5mv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=fa902193-0eac-4007-9d8d-ebc8c8b3bc33;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=fa902193-0eac-4007-9d8d-ebc8c8b3bc33;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a59be9979d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1126 identity=36436 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fa902193-0eac-4007-9d8d-ebc8c8b3bc33,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=fa902193-0eac-4007-9d8d-ebc8c8b3bc33,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-metadefs-load-np5mv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a59be9979d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1126 identity=36436 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-metadefs-load-np5mv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a59be9979d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1126 identity=36436 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-metadefs-load-np5mv subsys=endpoint level=info msg="Successful endpoint creation" containerID=a59be9979d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1126 identity=36436 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-metadefs-load-np5mv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a59be9979d endpointID=1126 k8sNamespace=openstack k8sPodName=glance-metadefs-load-np5mv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=fa902193-0eac-4007-9d8d-ebc8c8b3bc33 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=fa902193-0eac-4007-9d8d-ebc8c8b3bc33 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a59be9979d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1126 identity=36436 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-metadefs-load-np5mv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 474e5118-0a62-435f-bf80-7e55b0599d8a default }" containerID=60bbc3ccd9b45b3a33199ff26fc27fc26472442500bd712b8555ee52fe3c1deb datapathConfiguration="&{false false false false false }" interface=lxc81d47e787b0e k8sPodName=openstack/glance-storage-init-ttf88 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60bbc3ccd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/glance-storage-init-ttf88 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60bbc3ccd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a1c5b428-8440-487e-ad1c-03bb14c23ced,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=a1c5b428-8440-487e-ad1c-03bb14c23ced,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/glance-storage-init-ttf88 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a1c5b428-8440-487e-ad1c-03bb14c23ced;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=a1c5b428-8440-487e-ad1c-03bb14c23ced;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60bbc3ccd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 identity=53828 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a1c5b428-8440-487e-ad1c-03bb14c23ced,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=a1c5b428-8440-487e-ad1c-03bb14c23ced,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/glance-storage-init-ttf88 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60bbc3ccd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 identity=53828 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/glance-storage-init-ttf88 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=60bbc3ccd9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=293 identity=53828 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/glance-storage-init-ttf88 subsys=endpoint level=info msg="Successful endpoint creation" containerID=60bbc3ccd9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=293 identity=53828 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/glance-storage-init-ttf88 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=60bbc3ccd9 endpointID=293 k8sNamespace=openstack k8sPodName=glance-storage-init-ttf88 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a1c5b428-8440-487e-ad1c-03bb14c23ced k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=a1c5b428-8440-487e-ad1c-03bb14c23ced k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=60bbc3ccd9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=293 identity=53828 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/glance-storage-init-ttf88 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.193 7637bdb0-b86e-4d4d-b55c-476687753b8a default }" containerID=2ed754c01d2e856c0d12d5c7347af2441a6766e02f1ae8fb5fccf6ecaacb30bd datapathConfiguration="&{false false false false false }" interface=lxc1ff99de1fe93 k8sPodName=openstack/glance-api-7cd865ff94-mp7kf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ed754c01d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/glance-api-7cd865ff94-mp7kf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ed754c01d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/glance-api-7cd865ff94-mp7kf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2ed754c01d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 identity=46430 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/glance-api-7cd865ff94-mp7kf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ed754c01d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 identity=46430 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/glance-api-7cd865ff94-mp7kf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2ed754c01d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=525 identity=46430 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/glance-api-7cd865ff94-mp7kf subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ed754c01d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=525 identity=46430 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/glance-api-7cd865ff94-mp7kf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.249 074efefd-ae85-41a1-8835-2247ae2e41fb default }" containerID=78c7da7224528deedf3dc21c3d0ac6f2e4badf193bcbe505306f678c13c19799 datapathConfiguration="&{false false false false false }" interface=lxc03e713ca84eb k8sPodName=openstack/staffeln-conductor-69d4b96ff6-4hlwb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=78c7da7224 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3686 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/staffeln-conductor-69d4b96ff6-4hlwb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=78c7da7224 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3686 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/staffeln-conductor-69d4b96ff6-4hlwb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=78c7da7224 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3686 identity=52243 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/staffeln-conductor-69d4b96ff6-4hlwb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=78c7da7224 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3686 identity=52243 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/staffeln-conductor-69d4b96ff6-4hlwb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.8 8b4c7da2-1166-463a-a528-b118cd8b2e24 default }" containerID=10e69c4e8e6572daebca212b22d0ad929aad19cec44a7b835ff3523e8d712dc0 datapathConfiguration="&{false false false false false }" interface=lxc874119ea957f k8sPodName=openstack/staffeln-api-5f969b8f8f-sd5h5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=10e69c4e8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2078 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/staffeln-api-5f969b8f8f-sd5h5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=10e69c4e8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2078 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/staffeln-api-5f969b8f8f-sd5h5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=10e69c4e8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2078 identity=43803 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/staffeln-api-5f969b8f8f-sd5h5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=10e69c4e8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2078 identity=43803 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/staffeln-api-5f969b8f8f-sd5h5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 285f913e-9ed7-4ef2-ab3d-35c10e48c3a9 default }" containerID=bae2446461588ed8222db2c2c0915b473902a3a0f8469546ea48005720dfdc83 datapathConfiguration="&{false false false false false }" interface=lxcae159d2ca746 k8sPodName=openstack/staffeln-db-init-nb6x2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bae2446461 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1975 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/staffeln-db-init-nb6x2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bae2446461 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1975 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=1eca8197-c7c1-498c-ac3c-5b9aa44ac0ad,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=1eca8197-c7c1-498c-ac3c-5b9aa44ac0ad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/staffeln-db-init-nb6x2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=1eca8197-c7c1-498c-ac3c-5b9aa44ac0ad;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=1eca8197-c7c1-498c-ac3c-5b9aa44ac0ad;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bae2446461 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1975 identity=30695 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=1eca8197-c7c1-498c-ac3c-5b9aa44ac0ad,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=1eca8197-c7c1-498c-ac3c-5b9aa44ac0ad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/staffeln-db-init-nb6x2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bae2446461 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1975 identity=30695 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/staffeln-db-init-nb6x2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=78c7da7224 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3686 identity=52243 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/staffeln-conductor-69d4b96ff6-4hlwb subsys=endpoint level=info msg="Successful endpoint creation" containerID=78c7da7224 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3686 identity=52243 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/staffeln-conductor-69d4b96ff6-4hlwb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=10e69c4e8e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2078 identity=43803 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/staffeln-api-5f969b8f8f-sd5h5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=10e69c4e8e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2078 identity=43803 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/staffeln-api-5f969b8f8f-sd5h5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bae2446461 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1975 identity=30695 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/staffeln-db-init-nb6x2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bae2446461 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1975 identity=30695 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/staffeln-db-init-nb6x2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bae2446461 endpointID=1975 k8sNamespace=openstack k8sPodName=staffeln-db-init-nb6x2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=1eca8197-c7c1-498c-ac3c-5b9aa44ac0ad k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=1eca8197-c7c1-498c-ac3c-5b9aa44ac0ad k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=bae2446461 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1975 identity=30695 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/staffeln-db-init-nb6x2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 3345560c-aa07-4654-9bce-173e16ede9b8 default }" containerID=aba6fe65b785a9ccc27e1c8ca9e364b5b55a87aae8872f60aa2cf7fa776434f6 datapathConfiguration="&{false false false false false }" interface=lxc4b2fbee75a6e k8sPodName=openstack/staffeln-db-sync-7l65w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aba6fe65b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/staffeln-db-sync-7l65w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aba6fe65b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=cb540dba-3c57-4ace-8fb8-f3cb398c5a3f,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=cb540dba-3c57-4ace-8fb8-f3cb398c5a3f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/staffeln-db-sync-7l65w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=cb540dba-3c57-4ace-8fb8-f3cb398c5a3f;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=cb540dba-3c57-4ace-8fb8-f3cb398c5a3f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aba6fe65b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 identity=14876 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=cb540dba-3c57-4ace-8fb8-f3cb398c5a3f,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=cb540dba-3c57-4ace-8fb8-f3cb398c5a3f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/staffeln-db-sync-7l65w oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=aba6fe65b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 identity=14876 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/staffeln-db-sync-7l65w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aba6fe65b7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1109 identity=14876 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/staffeln-db-sync-7l65w subsys=endpoint level=info msg="Successful endpoint creation" containerID=aba6fe65b7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1109 identity=14876 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/staffeln-db-sync-7l65w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aba6fe65b7 endpointID=1109 k8sNamespace=openstack k8sPodName=staffeln-db-sync-7l65w subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=cb540dba-3c57-4ace-8fb8-f3cb398c5a3f k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=cb540dba-3c57-4ace-8fb8-f3cb398c5a3f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=aba6fe65b7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1109 identity=14876 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/staffeln-db-sync-7l65w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 d45dbfeb-5351-4068-b1c5-e82f4fa75cd4 default }" containerID=977eb04a6c063c90fe0e6aa42476a8937ac164a16efa741aae8728968ee5e694 datapathConfiguration="&{false false false false false }" interface=lxcec91f49ca6b6 k8sPodName=local-path-storage/helper-pod-create-pvc-539b5a5c-2ddc-4f32-81f9-9303b66fbfb7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=977eb04a6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3513 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-539b5a5c-2ddc-4f32-81f9-9303b66fbfb7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=977eb04a6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3513 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-539b5a5c-2ddc-4f32-81f9-9303b66fbfb7 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=977eb04a6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3513 identity=1077 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-539b5a5c-2ddc-4f32-81f9-9303b66fbfb7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=977eb04a6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3513 identity=1077 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-539b5a5c-2ddc-4f32-81f9-9303b66fbfb7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=977eb04a6c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3513 identity=1077 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-539b5a5c-2ddc-4f32-81f9-9303b66fbfb7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=977eb04a6c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3513 identity=1077 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-539b5a5c-2ddc-4f32-81f9-9303b66fbfb7 subsys=daemon level=info msg="Delete endpoint request" containerID=977eb04a6c endpointID=3513 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-539b5a5c-2ddc-4f32-81f9-9303b66fbfb7 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=977eb04a6c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3513 identity=1077 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-539b5a5c-2ddc-4f32-81f9-9303b66fbfb7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 53d8e1e5-0666-4070-a90c-196454bc7deb default }" containerID=7a78b629a4633cf6b45dad2a7785bb7e83c8434c78585c572a494ea0aa8c2803 datapathConfiguration="&{false false false false false }" interface=lxc6e47de1fb05f k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a78b629a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1719 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a78b629a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1719 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a78b629a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1719 identity=17076 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a78b629a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1719 identity=17076 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7a78b629a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1719 identity=17076 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a78b629a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1719 identity=17076 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.163 a0628f57-46ad-41c4-83af-6e71a3c55fe3 default }" containerID=704866f2b0af31b4161dfaed85176e0e9bc1801db72b358c26c1ccc897a72d1a datapathConfiguration="&{false false false false false }" interface=lxcd5f3d0310ec6 k8sPodName=openstack/cinder-scheduler-797867d7fd-7h6t6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=704866f2b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/cinder-scheduler-797867d7fd-7h6t6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=704866f2b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/cinder-scheduler-797867d7fd-7h6t6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=704866f2b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 identity=17950 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/cinder-scheduler-797867d7fd-7h6t6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=704866f2b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 identity=17950 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/cinder-scheduler-797867d7fd-7h6t6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.135 2ef00484-50a2-43f3-a89a-7ab01badcbc9 default }" containerID=3b111d31a08da31ca99b8883f9d740e033d54c04d39145e0a433a8eb8d834a44 datapathConfiguration="&{false false false false false }" interface=lxc468ebd1ff1b3 k8sPodName=openstack/cinder-api-6cdff889f8-jqr74 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b111d31a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=626 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/cinder-api-6cdff889f8-jqr74 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b111d31a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=626 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/cinder-api-6cdff889f8-jqr74 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b111d31a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=626 identity=21805 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/cinder-api-6cdff889f8-jqr74 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b111d31a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=626 identity=21805 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/cinder-api-6cdff889f8-jqr74 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 08a9f6a5-055b-483d-b997-581f3498d6cc default }" containerID=f6824868e227c5d615c74e855f936350fe33421b42e34a7c7d0638664c27ac0d datapathConfiguration="&{false false false false false }" interface=lxcb3a054ccd1b3 k8sPodName=openstack/cinder-db-init-mfchh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f6824868e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=421 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/cinder-db-init-mfchh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f6824868e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=421 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ee4bf6ab-583f-4867-82ce-ae4963b10a31,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=ee4bf6ab-583f-4867-82ce-ae4963b10a31,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/cinder-db-init-mfchh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=ee4bf6ab-583f-4867-82ce-ae4963b10a31;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=ee4bf6ab-583f-4867-82ce-ae4963b10a31;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f6824868e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=421 identity=30067 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ee4bf6ab-583f-4867-82ce-ae4963b10a31,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=ee4bf6ab-583f-4867-82ce-ae4963b10a31,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/cinder-db-init-mfchh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f6824868e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=421 identity=30067 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/cinder-db-init-mfchh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=704866f2b0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=254 identity=17950 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/cinder-scheduler-797867d7fd-7h6t6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=704866f2b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=254 identity=17950 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/cinder-scheduler-797867d7fd-7h6t6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3b111d31a0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=626 identity=21805 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/cinder-api-6cdff889f8-jqr74 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b111d31a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=626 identity=21805 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/cinder-api-6cdff889f8-jqr74 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f6824868e2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=421 identity=30067 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/cinder-db-init-mfchh subsys=endpoint level=info msg="Successful endpoint creation" containerID=f6824868e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=421 identity=30067 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/cinder-db-init-mfchh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f6824868e2 endpointID=421 k8sNamespace=openstack k8sPodName=cinder-db-init-mfchh subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=ee4bf6ab-583f-4867-82ce-ae4963b10a31 k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=ee4bf6ab-583f-4867-82ce-ae4963b10a31 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=f6824868e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=421 identity=30067 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/cinder-db-init-mfchh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 de6ba21f-a723-48e0-be46-5823c60ba3f9 default }" containerID=2574263721c4d5fde68dc1cc52ebc0b2fd239143261f8c6dadfb565d776c58c8 datapathConfiguration="&{false false false false false }" interface=lxcb6bdb2d3fa29 k8sPodName=openstack/cinder-db-sync-fv6vk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2574263721 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/cinder-db-sync-fv6vk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2574263721 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=d6d1ea6f-a095-45c8-9025-b730cbfbb5ed,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=d6d1ea6f-a095-45c8-9025-b730cbfbb5ed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/cinder-db-sync-fv6vk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=d6d1ea6f-a095-45c8-9025-b730cbfbb5ed;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=d6d1ea6f-a095-45c8-9025-b730cbfbb5ed;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2574263721 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 identity=10695 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=d6d1ea6f-a095-45c8-9025-b730cbfbb5ed,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=d6d1ea6f-a095-45c8-9025-b730cbfbb5ed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/cinder-db-sync-fv6vk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2574263721 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 identity=10695 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/cinder-db-sync-fv6vk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2574263721 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=785 identity=10695 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/cinder-db-sync-fv6vk subsys=endpoint level=info msg="Successful endpoint creation" containerID=2574263721 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=785 identity=10695 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/cinder-db-sync-fv6vk subsys=daemon level=info msg="Delete endpoint request" containerID=2574263721 endpointID=785 k8sNamespace=openstack k8sPodName=cinder-db-sync-fv6vk subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=d6d1ea6f-a095-45c8-9025-b730cbfbb5ed k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=d6d1ea6f-a095-45c8-9025-b730cbfbb5ed k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=2574263721 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=785 identity=10695 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/cinder-db-sync-fv6vk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 fd6150f8-32bf-4327-acbd-6ce21a6bac3f default }" containerID=aedbd0a71aa408715b658c646e0344fedc564e1864872c408fd32654fd95638f datapathConfiguration="&{false false false false false }" interface=lxca6b3404b72f0 k8sPodName=openstack/cinder-rabbit-init-ljg9f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aedbd0a71a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2843 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-rabbit-init-ljg9f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aedbd0a71a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2843 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=5dd52f50-b5f3-41fc-aa93-a38eb00fe107,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=5dd52f50-b5f3-41fc-aa93-a38eb00fe107,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-rabbit-init-ljg9f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=5dd52f50-b5f3-41fc-aa93-a38eb00fe107;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=5dd52f50-b5f3-41fc-aa93-a38eb00fe107;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aedbd0a71a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2843 identity=7821 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=5dd52f50-b5f3-41fc-aa93-a38eb00fe107,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=5dd52f50-b5f3-41fc-aa93-a38eb00fe107,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-rabbit-init-ljg9f oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=aedbd0a71a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2843 identity=7821 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-rabbit-init-ljg9f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aedbd0a71a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2843 identity=7821 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-rabbit-init-ljg9f subsys=endpoint level=info msg="Successful endpoint creation" containerID=aedbd0a71a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2843 identity=7821 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-rabbit-init-ljg9f subsys=daemon level=info msg="Delete endpoint request" containerID=aedbd0a71a endpointID=2843 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-ljg9f subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=5dd52f50-b5f3-41fc-aa93-a38eb00fe107 k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=5dd52f50-b5f3-41fc-aa93-a38eb00fe107 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=aedbd0a71a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2843 identity=7821 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-rabbit-init-ljg9f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.236 75626cd9-2af2-4e7a-b5f9-7a99c538b04e default }" containerID=c6f600d81f95b2c7ec9136825f9ee55489a76047959c79d374c435f21dcc2850 datapathConfiguration="&{false false false false false }" interface=lxc736a022814cd k8sPodName=openstack/cinder-ks-service-vn4rq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c6f600d81f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2896 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/cinder-ks-service-vn4rq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c6f600d81f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2896 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=86154d6e-2d76-43af-8214-dc77b0e85646,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=86154d6e-2d76-43af-8214-dc77b0e85646,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/cinder-ks-service-vn4rq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c6f600d81f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2896 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.236 ipv6= k8sPodName=openstack/cinder-ks-service-vn4rq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=86154d6e-2d76-43af-8214-dc77b0e85646;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=86154d6e-2d76-43af-8214-dc77b0e85646;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c6f600d81f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2896 identity=21994 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=86154d6e-2d76-43af-8214-dc77b0e85646,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=86154d6e-2d76-43af-8214-dc77b0e85646,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/cinder-ks-service-vn4rq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c6f600d81f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2896 identity=21994 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/cinder-ks-service-vn4rq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c6f600d81f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2896 identity=21994 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/cinder-ks-service-vn4rq subsys=endpoint level=info msg="Successful endpoint creation" containerID=c6f600d81f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2896 identity=21994 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/cinder-ks-service-vn4rq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c6f600d81f endpointID=2896 k8sNamespace=openstack k8sPodName=cinder-ks-service-vn4rq subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=86154d6e-2d76-43af-8214-dc77b0e85646 k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=86154d6e-2d76-43af-8214-dc77b0e85646 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=c6f600d81f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2896 identity=21994 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/cinder-ks-service-vn4rq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 e7543373-1792-48fc-bbca-60ec2c6b56fb default }" containerID=4365192034a206be146233d7a231d2b161a071964b5772f7940db48c6a7a5f7a datapathConfiguration="&{false false false false false }" interface=lxc66db6aa7d81a k8sPodName=openstack/cinder-ks-endpoints-bfcbl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4365192034 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2771 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-ks-endpoints-bfcbl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4365192034 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2771 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=8acfbe60-d382-49be-bd9d-6195f8e7fd0a,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=8acfbe60-d382-49be-bd9d-6195f8e7fd0a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-ks-endpoints-bfcbl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=8acfbe60-d382-49be-bd9d-6195f8e7fd0a;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=8acfbe60-d382-49be-bd9d-6195f8e7fd0a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4365192034 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2771 identity=2699 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=8acfbe60-d382-49be-bd9d-6195f8e7fd0a,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=8acfbe60-d382-49be-bd9d-6195f8e7fd0a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-ks-endpoints-bfcbl oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4365192034 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2771 identity=2699 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-ks-endpoints-bfcbl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4365192034 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2771 identity=2699 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-ks-endpoints-bfcbl subsys=endpoint level=info msg="Successful endpoint creation" containerID=4365192034 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2771 identity=2699 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-ks-endpoints-bfcbl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4365192034 endpointID=2771 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-bfcbl subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=8acfbe60-d382-49be-bd9d-6195f8e7fd0a k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=8acfbe60-d382-49be-bd9d-6195f8e7fd0a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=4365192034 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2771 identity=2699 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-ks-endpoints-bfcbl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.212 dd22b29b-6112-4056-9680-3e3a725c0b49 default }" containerID=772598528b1a47c4a839f3582411747503b1dfb8ab19000f2433d6538fbd5e55 datapathConfiguration="&{false false false false false }" interface=lxc78292a60414a k8sPodName=openstack/cinder-ks-user-gq2j4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=772598528b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1048 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/cinder-ks-user-gq2j4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=772598528b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1048 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c83f3dc1-063c-45b2-ac64-224e0ecf2a6a,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=c83f3dc1-063c-45b2-ac64-224e0ecf2a6a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/cinder-ks-user-gq2j4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=c83f3dc1-063c-45b2-ac64-224e0ecf2a6a;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=c83f3dc1-063c-45b2-ac64-224e0ecf2a6a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=772598528b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1048 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.212 ipv6= k8sPodName=openstack/cinder-ks-user-gq2j4 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=772598528b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1048 identity=20681 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c83f3dc1-063c-45b2-ac64-224e0ecf2a6a,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=c83f3dc1-063c-45b2-ac64-224e0ecf2a6a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/cinder-ks-user-gq2j4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=772598528b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1048 identity=20681 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/cinder-ks-user-gq2j4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=772598528b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1048 identity=20681 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/cinder-ks-user-gq2j4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=772598528b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1048 identity=20681 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/cinder-ks-user-gq2j4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=772598528b endpointID=1048 k8sNamespace=openstack k8sPodName=cinder-ks-user-gq2j4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=c83f3dc1-063c-45b2-ac64-224e0ecf2a6a k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=c83f3dc1-063c-45b2-ac64-224e0ecf2a6a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=772598528b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1048 identity=20681 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/cinder-ks-user-gq2j4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 78ed9245-db6c-4f77-b35b-78ff9a9ef440 default }" containerID=4cf1e3ad3895b581af21615b78f74f23cef3bd0e71f9cd684feedd12e008cea1 datapathConfiguration="&{false false false false false }" interface=lxc333894cf72d7 k8sPodName=openstack/cinder-backup-storage-init-wfk6c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4cf1e3ad38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1508 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/cinder-backup-storage-init-wfk6c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4cf1e3ad38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1508 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1a4dc6f5-9c4c-44be-8109-86ff3742893c,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=1a4dc6f5-9c4c-44be-8109-86ff3742893c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/cinder-backup-storage-init-wfk6c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=1a4dc6f5-9c4c-44be-8109-86ff3742893c;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=1a4dc6f5-9c4c-44be-8109-86ff3742893c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4cf1e3ad38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1508 identity=19157 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1a4dc6f5-9c4c-44be-8109-86ff3742893c,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=1a4dc6f5-9c4c-44be-8109-86ff3742893c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/cinder-backup-storage-init-wfk6c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4cf1e3ad38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1508 identity=19157 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/cinder-backup-storage-init-wfk6c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4cf1e3ad38 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1508 identity=19157 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/cinder-backup-storage-init-wfk6c subsys=endpoint level=info msg="Successful endpoint creation" containerID=4cf1e3ad38 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1508 identity=19157 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/cinder-backup-storage-init-wfk6c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4cf1e3ad38 endpointID=1508 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-wfk6c subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=1a4dc6f5-9c4c-44be-8109-86ff3742893c k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=1a4dc6f5-9c4c-44be-8109-86ff3742893c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=4cf1e3ad38 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1508 identity=19157 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/cinder-backup-storage-init-wfk6c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 862c8881-e137-4fea-b7ed-cd17065b4f45 default }" containerID=6754bce7a8d97f098a3b1678a382f4f5c6d7e8a70d5c9cf7e00a2223df4ba5ce datapathConfiguration="&{false false false false false }" interface=lxc47f9a9586847 k8sPodName=openstack/cinder-create-internal-tenant-jmhzv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6754bce7a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1910 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-jmhzv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6754bce7a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1910 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=04c0110c-bbd5-4e11-96ab-66d28cf8e97b,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=04c0110c-bbd5-4e11-96ab-66d28cf8e97b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-jmhzv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=04c0110c-bbd5-4e11-96ab-66d28cf8e97b;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=04c0110c-bbd5-4e11-96ab-66d28cf8e97b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6754bce7a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1910 identity=51964 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=04c0110c-bbd5-4e11-96ab-66d28cf8e97b,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=04c0110c-bbd5-4e11-96ab-66d28cf8e97b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-jmhzv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6754bce7a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1910 identity=51964 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-jmhzv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6754bce7a8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1910 identity=51964 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-jmhzv subsys=endpoint level=info msg="Successful endpoint creation" containerID=6754bce7a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1910 identity=51964 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-jmhzv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6754bce7a8 endpointID=1910 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-jmhzv subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=04c0110c-bbd5-4e11-96ab-66d28cf8e97b k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=04c0110c-bbd5-4e11-96ab-66d28cf8e97b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=6754bce7a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1910 identity=51964 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-jmhzv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 464d1ec8-9c83-42b7-ae84-5cfef1918670 default }" containerID=95d3fdebb537308d083e06230e33a39c4c4a97cca07d68e51b0d9ad20a53aab1 datapathConfiguration="&{false false false false false }" interface=lxced11f8644423 k8sPodName=openstack/cinder-storage-init-hrbdc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=95d3fdebb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/cinder-storage-init-hrbdc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=95d3fdebb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=cbe1f0ac-97c1-4c65-9832-0434d287c5a2,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=cbe1f0ac-97c1-4c65-9832-0434d287c5a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/cinder-storage-init-hrbdc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=cbe1f0ac-97c1-4c65-9832-0434d287c5a2;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=cbe1f0ac-97c1-4c65-9832-0434d287c5a2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=95d3fdebb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identity=47760 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=cbe1f0ac-97c1-4c65-9832-0434d287c5a2,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=cbe1f0ac-97c1-4c65-9832-0434d287c5a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/cinder-storage-init-hrbdc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=95d3fdebb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identity=47760 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/cinder-storage-init-hrbdc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=95d3fdebb5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=46 identity=47760 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/cinder-storage-init-hrbdc subsys=endpoint level=info msg="Successful endpoint creation" containerID=95d3fdebb5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=46 identity=47760 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/cinder-storage-init-hrbdc subsys=daemon level=info msg="Delete endpoint request" containerID=95d3fdebb5 endpointID=46 k8sNamespace=openstack k8sPodName=cinder-storage-init-hrbdc subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=cbe1f0ac-97c1-4c65-9832-0434d287c5a2 k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=cbe1f0ac-97c1-4c65-9832-0434d287c5a2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=95d3fdebb5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=46 identity=47760 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/cinder-storage-init-hrbdc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 a783c27f-974a-4392-9627-83a4c4586ad7 default }" containerID=0f7a2309a453eb9520c95ad55df21f8cf64b88ae951bae2ba6125b542ea037d1 datapathConfiguration="&{false false false false false }" interface=lxcea80d1d77f15 k8sPodName=openstack/cinder-bootstrap-ndcwp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f7a2309a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/cinder-bootstrap-ndcwp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f7a2309a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e0f8fa8e-9063-4a70-971b-32ebc0995f32,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=e0f8fa8e-9063-4a70-971b-32ebc0995f32,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/cinder-bootstrap-ndcwp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=e0f8fa8e-9063-4a70-971b-32ebc0995f32;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=e0f8fa8e-9063-4a70-971b-32ebc0995f32;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f7a2309a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 identity=20649 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e0f8fa8e-9063-4a70-971b-32ebc0995f32,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=e0f8fa8e-9063-4a70-971b-32ebc0995f32,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/cinder-bootstrap-ndcwp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f7a2309a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 identity=20649 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/cinder-bootstrap-ndcwp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0f7a2309a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=293 identity=20649 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/cinder-bootstrap-ndcwp subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f7a2309a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=293 identity=20649 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/cinder-bootstrap-ndcwp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.105 35334edf-af02-492e-b893-89343a9e3f99 default }" containerID=8dbae7d1e97f135b01a594303aad2321fa896ea43118450ad390c95f2cdc2be1 datapathConfiguration="&{false false false false false }" interface=lxc30f7378d0d24 k8sPodName=openstack/cinder-volume-56dbbd96c8-qvhsq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8dbae7d1e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2414 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/cinder-volume-56dbbd96c8-qvhsq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8dbae7d1e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2414 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/cinder-volume-56dbbd96c8-qvhsq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8dbae7d1e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2414 identity=14953 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/cinder-volume-56dbbd96c8-qvhsq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8dbae7d1e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2414 identity=14953 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/cinder-volume-56dbbd96c8-qvhsq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.197 93636160-9359-4fa4-b1bc-5d144a93d445 default }" containerID=c76665ac35da96b47135c619936170dd60d7f75da50e589b91d877c262b0935f datapathConfiguration="&{false false false false false }" interface=lxc06c234d17c58 k8sPodName=openstack/cinder-backup-74bcfccd54-8nglf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c76665ac35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=80 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/cinder-backup-74bcfccd54-8nglf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c76665ac35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=80 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/cinder-backup-74bcfccd54-8nglf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c76665ac35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=80 identity=23521 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/cinder-backup-74bcfccd54-8nglf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c76665ac35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=80 identity=23521 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/cinder-backup-74bcfccd54-8nglf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8dbae7d1e9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2414 identity=14953 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/cinder-volume-56dbbd96c8-qvhsq subsys=endpoint level=info msg="Successful endpoint creation" containerID=8dbae7d1e9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2414 identity=14953 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/cinder-volume-56dbbd96c8-qvhsq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c76665ac35 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=80 identity=23521 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/cinder-backup-74bcfccd54-8nglf subsys=endpoint level=info msg="Successful endpoint creation" containerID=c76665ac35 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=80 identity=23521 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/cinder-backup-74bcfccd54-8nglf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0f7a2309a4 endpointID=293 k8sNamespace=openstack k8sPodName=cinder-bootstrap-ndcwp subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=e0f8fa8e-9063-4a70-971b-32ebc0995f32 k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=e0f8fa8e-9063-4a70-971b-32ebc0995f32 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=0f7a2309a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=293 identity=20649 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/cinder-bootstrap-ndcwp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.125 bd1ecbc5-0d30-4c5b-bf47-d828dad83c8d default }" containerID=e7c6afdc9ae26a0e667588db1293db8d7068f49310fe3fc854486deebb5c8786 datapathConfiguration="&{false false false false false }" interface=lxc99417e3735ee k8sPodName=openstack/placement-api-f9845f697-5wnqt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7c6afdc9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/placement-api-f9845f697-5wnqt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7c6afdc9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/placement-api-f9845f697-5wnqt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e7c6afdc9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.125 ipv6= k8sPodName=openstack/placement-api-f9845f697-5wnqt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e7c6afdc9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 identity=9647 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/placement-api-f9845f697-5wnqt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e7c6afdc9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 identity=9647 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/placement-api-f9845f697-5wnqt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.211 ab2897c6-2545-4998-a8bc-580b214ee49a default }" containerID=1289e5bd6b603bd93d74e6e16822391e1fecef1a6242efabd80ddde81a085ea8 datapathConfiguration="&{false false false false false }" interface=lxc0d692332862d k8sPodName=openstack/placement-db-init-kg7tm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1289e5bd6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2349 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/placement-db-init-kg7tm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1289e5bd6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2349 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=c38049b0-4efc-4a1e-b261-738e08b77142,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=c38049b0-4efc-4a1e-b261-738e08b77142,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/placement-db-init-kg7tm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=c38049b0-4efc-4a1e-b261-738e08b77142;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=c38049b0-4efc-4a1e-b261-738e08b77142;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1289e5bd6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2349 identity=15205 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=c38049b0-4efc-4a1e-b261-738e08b77142,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=c38049b0-4efc-4a1e-b261-738e08b77142,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/placement-db-init-kg7tm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1289e5bd6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2349 identity=15205 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/placement-db-init-kg7tm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e7c6afdc9a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=972 identity=9647 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/placement-api-f9845f697-5wnqt subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7c6afdc9a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=972 identity=9647 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/placement-api-f9845f697-5wnqt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1289e5bd6b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2349 identity=15205 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/placement-db-init-kg7tm subsys=endpoint level=info msg="Successful endpoint creation" containerID=1289e5bd6b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2349 identity=15205 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/placement-db-init-kg7tm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1289e5bd6b endpointID=2349 k8sNamespace=openstack k8sPodName=placement-db-init-kg7tm subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=c38049b0-4efc-4a1e-b261-738e08b77142 k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=c38049b0-4efc-4a1e-b261-738e08b77142 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=1289e5bd6b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2349 identity=15205 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/placement-db-init-kg7tm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 97e5475d-0356-448e-b40a-27f26c423c5b default }" containerID=896b5aada7e981d1ba03c17652393dd2b398ab451071c59720872d10229f4526 datapathConfiguration="&{false false false false false }" interface=lxc733f3eae0bfd k8sPodName=openstack/placement-db-sync-84d77 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=896b5aada7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3052 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/placement-db-sync-84d77 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=896b5aada7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3052 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=d4ec275d-2f43-42aa-b58c-e251d7961f79,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=d4ec275d-2f43-42aa-b58c-e251d7961f79,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/placement-db-sync-84d77 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=d4ec275d-2f43-42aa-b58c-e251d7961f79;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=d4ec275d-2f43-42aa-b58c-e251d7961f79;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=896b5aada7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3052 identity=49843 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=d4ec275d-2f43-42aa-b58c-e251d7961f79,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=d4ec275d-2f43-42aa-b58c-e251d7961f79,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/placement-db-sync-84d77 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=896b5aada7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3052 identity=49843 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/placement-db-sync-84d77 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=896b5aada7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3052 identity=49843 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/placement-db-sync-84d77 subsys=endpoint level=info msg="Successful endpoint creation" containerID=896b5aada7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3052 identity=49843 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/placement-db-sync-84d77 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=896b5aada7 endpointID=3052 k8sNamespace=openstack k8sPodName=placement-db-sync-84d77 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=d4ec275d-2f43-42aa-b58c-e251d7961f79 k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=d4ec275d-2f43-42aa-b58c-e251d7961f79 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=896b5aada7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3052 identity=49843 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/placement-db-sync-84d77 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 bff8bde8-194e-44f5-9bc5-b3b68c475a25 default }" containerID=fe1c026232a26e3af868a344c7338fbe999918079bc33d8339c5f3faa8c0297f datapathConfiguration="&{false false false false false }" interface=lxc80fdb3d99554 k8sPodName=openstack/placement-ks-service-55qgf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe1c026232 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3433 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/placement-ks-service-55qgf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe1c026232 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3433 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=998def70-0991-4f11-9c71-44adc5cc4c93,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=998def70-0991-4f11-9c71-44adc5cc4c93,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/placement-ks-service-55qgf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=998def70-0991-4f11-9c71-44adc5cc4c93;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=998def70-0991-4f11-9c71-44adc5cc4c93;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fe1c026232 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3433 identity=12617 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=998def70-0991-4f11-9c71-44adc5cc4c93,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=998def70-0991-4f11-9c71-44adc5cc4c93,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/placement-ks-service-55qgf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe1c026232 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3433 identity=12617 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/placement-ks-service-55qgf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fe1c026232 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3433 identity=12617 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/placement-ks-service-55qgf subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe1c026232 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3433 identity=12617 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/placement-ks-service-55qgf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fe1c026232 endpointID=3433 k8sNamespace=openstack k8sPodName=placement-ks-service-55qgf subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=998def70-0991-4f11-9c71-44adc5cc4c93 k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=998def70-0991-4f11-9c71-44adc5cc4c93 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=fe1c026232 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3433 identity=12617 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/placement-ks-service-55qgf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 ff6d6566-c504-4ef6-994f-0045bb57919d default }" containerID=6ba3e72852550eb2ad849930a3699e52e6743cd869e00a3d58a1ccda1433891e datapathConfiguration="&{false false false false false }" interface=lxcc1d55728b62c k8sPodName=openstack/placement-ks-user-6b98q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ba3e72852 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/placement-ks-user-6b98q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ba3e72852 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=b11ea740-e8aa-495b-afb0-635710052213,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=b11ea740-e8aa-495b-afb0-635710052213,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/placement-ks-user-6b98q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6ba3e72852 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.175 ipv6= k8sPodName=openstack/placement-ks-user-6b98q line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=b11ea740-e8aa-495b-afb0-635710052213;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=b11ea740-e8aa-495b-afb0-635710052213;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ba3e72852 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 identity=41683 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=b11ea740-e8aa-495b-afb0-635710052213,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=b11ea740-e8aa-495b-afb0-635710052213,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/placement-ks-user-6b98q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ba3e72852 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 identity=41683 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/placement-ks-user-6b98q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6ba3e72852 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1671 identity=41683 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/placement-ks-user-6b98q subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ba3e72852 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1671 identity=41683 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/placement-ks-user-6b98q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6ba3e72852 endpointID=1671 k8sNamespace=openstack k8sPodName=placement-ks-user-6b98q subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=b11ea740-e8aa-495b-afb0-635710052213 k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=b11ea740-e8aa-495b-afb0-635710052213 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=6ba3e72852 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1671 identity=41683 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/placement-ks-user-6b98q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 6e19afd3-00ab-4a50-a69d-9ec3e37e0095 default }" containerID=a77cd192341856dcc61b6817d3155020042f312d6c10f4ed88d8a53f81490f09 datapathConfiguration="&{false false false false false }" interface=lxcf4a68da8b1b4 k8sPodName=openstack/placement-ks-endpoints-5t2gc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a77cd19234 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/placement-ks-endpoints-5t2gc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a77cd19234 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=6d95709f-4b7f-4dc3-a2e1-5f75ca087f4d,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=6d95709f-4b7f-4dc3-a2e1-5f75ca087f4d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/placement-ks-endpoints-5t2gc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a77cd19234 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.109 ipv6= k8sPodName=openstack/placement-ks-endpoints-5t2gc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=6d95709f-4b7f-4dc3-a2e1-5f75ca087f4d;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=6d95709f-4b7f-4dc3-a2e1-5f75ca087f4d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a77cd19234 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 identity=8706 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=6d95709f-4b7f-4dc3-a2e1-5f75ca087f4d,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=6d95709f-4b7f-4dc3-a2e1-5f75ca087f4d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/placement-ks-endpoints-5t2gc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a77cd19234 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 identity=8706 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/placement-ks-endpoints-5t2gc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a77cd19234 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=153 identity=8706 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/placement-ks-endpoints-5t2gc subsys=endpoint level=info msg="Successful endpoint creation" containerID=a77cd19234 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=153 identity=8706 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/placement-ks-endpoints-5t2gc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a77cd19234 endpointID=153 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-5t2gc subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=6d95709f-4b7f-4dc3-a2e1-5f75ca087f4d k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=6d95709f-4b7f-4dc3-a2e1-5f75ca087f4d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=a77cd19234 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=153 identity=8706 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/placement-ks-endpoints-5t2gc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 bee63c70-f33b-4016-823e-4fd3de369fda default }" containerID=29d84375f812c40d12fe959b30d1b962dea94d6983e4e9df78ee892b1bd59cb2 datapathConfiguration="&{false false false false false }" interface=lxc83dbe7a8f6e9 k8sPodName=openstack/neutron-coredns-7dd4958666-llwfh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=29d84375f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2606 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-llwfh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=29d84375f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2606 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-llwfh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=neutron-coredns;k8s:app.kubernetes.io/name=coredns;k8s:application=neutron;k8s:component=coredns;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=29d84375f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2606 identity=12370 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-llwfh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=29d84375f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2606 identity=12370 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-llwfh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=29d84375f8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2606 identity=12370 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-llwfh subsys=endpoint level=info msg="Successful endpoint creation" containerID=29d84375f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2606 identity=12370 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-llwfh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.141 d820302b-eb3c-4eaf-8973-f5fa0a2a7420 default }" containerID=345e61e5ac713753568b6164bf880c5c364120451a44502bac45eecec2bdff61 datapathConfiguration="&{false false false false false }" interface=lxc45066a492733 k8sPodName=local-path-storage/helper-pod-create-pvc-a3891b07-7188-4c4b-a529-e09b6704cff2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=345e61e5ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2254 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3891b07-7188-4c4b-a529-e09b6704cff2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=345e61e5ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2254 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3891b07-7188-4c4b-a529-e09b6704cff2 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=345e61e5ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2254 identity=1077 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3891b07-7188-4c4b-a529-e09b6704cff2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=345e61e5ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2254 identity=1077 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3891b07-7188-4c4b-a529-e09b6704cff2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=345e61e5ac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2254 identity=1077 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3891b07-7188-4c4b-a529-e09b6704cff2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=345e61e5ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2254 identity=1077 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3891b07-7188-4c4b-a529-e09b6704cff2 subsys=daemon level=info msg="Delete endpoint request" containerID=345e61e5ac endpointID=2254 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a3891b07-7188-4c4b-a529-e09b6704cff2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=345e61e5ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2254 identity=1077 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3891b07-7188-4c4b-a529-e09b6704cff2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 778dee38-abbe-43c9-b968-41467efe2996 default }" containerID=842ea818c79f404e54bf23e6a403c880f3679bf07be8fc2bbcce34966b738129 datapathConfiguration="&{false false false false false }" interface=lxc5555e08c9366 k8sPodName=openstack/rabbitmq-nova-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=842ea818c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3438 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=842ea818c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3438 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-nova;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=842ea818c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3438 identity=15078 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=842ea818c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3438 identity=15078 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=842ea818c7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3438 identity=15078 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=842ea818c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3438 identity=15078 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.245 9aaa0bd9-6667-4109-9808-a50846a613de default }" containerID=0d268c612470e5072eec68bc0d37da83d4337b7cf3c6fed2b0c1e2359d847c1b datapathConfiguration="&{false false false false false }" interface=lxc6b6de22eb98e k8sPodName=openstack/nova-scheduler-77d88d86dc-vc6ps labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d268c6124 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3142 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/nova-scheduler-77d88d86dc-vc6ps subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d268c6124 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3142 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/nova-scheduler-77d88d86dc-vc6ps subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d268c6124 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3142 identity=16641 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/nova-scheduler-77d88d86dc-vc6ps oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d268c6124 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3142 identity=16641 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/nova-scheduler-77d88d86dc-vc6ps subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.139 c95e558f-ab28-4f67-8e3c-1a4ed30f4523 default }" containerID=86b4b12c0a91ab3ea2705dbfd8da6ff82e2f386f341d2aeeb0e351e6ec904e5f datapathConfiguration="&{false false false false false }" interface=lxc70afd83ee2e9 k8sPodName=openstack/nova-conductor-b4dc76567-zvz22 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=86b4b12c0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2785 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/nova-conductor-b4dc76567-zvz22 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=86b4b12c0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2785 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/nova-conductor-b4dc76567-zvz22 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=86b4b12c0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2785 identity=25045 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/nova-conductor-b4dc76567-zvz22 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=86b4b12c0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2785 identity=25045 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/nova-conductor-b4dc76567-zvz22 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 df77e139-c202-4ac4-83bd-b078a90840a2 default }" containerID=d84190764ad11104e88b927639230fc0b16051a7fe4d1c744e0c8452dae69c12 datapathConfiguration="&{false false false false false }" interface=lxc817c94c782c7 k8sPodName=openstack/nova-bootstrap-5n8wq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d84190764a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/nova-bootstrap-5n8wq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d84190764a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=d884fc4f-f0a7-40a5-b067-b4b813487a8b,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=d884fc4f-f0a7-40a5-b067-b4b813487a8b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/nova-bootstrap-5n8wq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=d884fc4f-f0a7-40a5-b067-b4b813487a8b;k8s:batch.kubernetes.io/job-name=nova-bootstrap;k8s:component=bootstrap;k8s:controller-uid=d884fc4f-f0a7-40a5-b067-b4b813487a8b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-bootstrap;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d84190764a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identity=54309 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=d884fc4f-f0a7-40a5-b067-b4b813487a8b,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=d884fc4f-f0a7-40a5-b067-b4b813487a8b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/nova-bootstrap-5n8wq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d84190764a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identity=54309 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/nova-bootstrap-5n8wq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0d268c6124 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3142 identity=16641 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/nova-scheduler-77d88d86dc-vc6ps subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d268c6124 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3142 identity=16641 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/nova-scheduler-77d88d86dc-vc6ps subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.231 f8bf26e9-99c8-48c2-83e6-634b219eb044 default }" containerID=e0a7ad425f13783495e2b8629841a61832a9ec170bf32fd8c51dc1fe62cff0e6 datapathConfiguration="&{false false false false false }" interface=lxc2b5295b0edf2 k8sPodName=openstack/nova-api-metadata-7b94f9c7fb-qrtfm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e0a7ad425f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/nova-api-metadata-7b94f9c7fb-qrtfm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e0a7ad425f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/nova-api-metadata-7b94f9c7fb-qrtfm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.208 b8ee3308-76a7-40ba-9db6-f4579222d3c2 default }" containerID=06e6ebfae5fd282ec06bff258801efbf6a3d758e35d1a352ff09bea91cd08397 datapathConfiguration="&{false false false false false }" interface=lxcb08af847dc1a k8sPodName=openstack/nova-api-osapi-b985585d9-4vqz2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=06e6ebfae5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=944 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/nova-api-osapi-b985585d9-4vqz2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=06e6ebfae5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=944 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/nova-api-osapi-b985585d9-4vqz2 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=metadata;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e0a7ad425f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 identity=57281 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/nova-api-metadata-7b94f9c7fb-qrtfm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e0a7ad425f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 identity=57281 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/nova-api-metadata-7b94f9c7fb-qrtfm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=os-api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=06e6ebfae5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=944 identity=457 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/nova-api-osapi-b985585d9-4vqz2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=06e6ebfae5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=944 identity=457 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/nova-api-osapi-b985585d9-4vqz2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=86b4b12c0a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2785 identity=25045 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/nova-conductor-b4dc76567-zvz22 subsys=endpoint level=info msg="Successful endpoint creation" containerID=86b4b12c0a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2785 identity=25045 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/nova-conductor-b4dc76567-zvz22 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.187 fceb386f-334d-480c-b892-34b44ff734ea default }" containerID=14968b2322aec07e938b94ba7adfd1c4c755c6070dbd9c9b3cfa7be813ca968e datapathConfiguration="&{false false false false false }" interface=lxc03285ac3cdbe k8sPodName=openstack/nova-cell-setup-mps2t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=14968b2322 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=306 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/nova-cell-setup-mps2t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=14968b2322 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=306 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=7a740702-2201-4787-9de3-cdb607a94cf5,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=7a740702-2201-4787-9de3-cdb607a94cf5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/nova-cell-setup-mps2t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.223 9d81af34-ccfe-4c5c-8934-8a4d85e4c9af default }" containerID=a437218e01c29e3339c0219bcda347c6b278d9287b29f6a1c72a9018f7080353 datapathConfiguration="&{false false false false false }" interface=lxca23d8477bb15 k8sPodName=openstack/nova-db-init-7nkkr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a437218e01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3538 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/nova-db-init-7nkkr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a437218e01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3538 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=e55daee7-09e9-4be0-982f-bb927ff526c6,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=e55daee7-09e9-4be0-982f-bb927ff526c6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/nova-db-init-7nkkr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d84190764a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=46 identity=54309 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/nova-bootstrap-5n8wq subsys=endpoint level=info msg="Successful endpoint creation" containerID=d84190764a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=46 identity=54309 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/nova-bootstrap-5n8wq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e0a7ad425f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=74 identity=57281 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/nova-api-metadata-7b94f9c7fb-qrtfm subsys=endpoint level=info msg="Successful endpoint creation" containerID=e0a7ad425f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=74 identity=57281 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/nova-api-metadata-7b94f9c7fb-qrtfm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=06e6ebfae5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=944 identity=457 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/nova-api-osapi-b985585d9-4vqz2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=06e6ebfae5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=944 identity=457 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/nova-api-osapi-b985585d9-4vqz2 subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=7a740702-2201-4787-9de3-cdb607a94cf5;k8s:batch.kubernetes.io/job-name=nova-cell-setup;k8s:component=cell-setup;k8s:controller-uid=7a740702-2201-4787-9de3-cdb607a94cf5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=14968b2322 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=306 identity=1853 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=7a740702-2201-4787-9de3-cdb607a94cf5,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=7a740702-2201-4787-9de3-cdb607a94cf5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/nova-cell-setup-mps2t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=14968b2322 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=306 identity=1853 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/nova-cell-setup-mps2t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a437218e01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3538 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.223 ipv6= k8sPodName=openstack/nova-db-init-7nkkr line=611 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=14968b2322 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=306 identity=1853 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/nova-cell-setup-mps2t subsys=endpoint level=info msg="Successful endpoint creation" containerID=14968b2322 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=306 identity=1853 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/nova-cell-setup-mps2t subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=e55daee7-09e9-4be0-982f-bb927ff526c6;k8s:batch.kubernetes.io/job-name=nova-db-init;k8s:component=db-init;k8s:controller-uid=e55daee7-09e9-4be0-982f-bb927ff526c6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a437218e01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3538 identity=14580 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=e55daee7-09e9-4be0-982f-bb927ff526c6,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=e55daee7-09e9-4be0-982f-bb927ff526c6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/nova-db-init-7nkkr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a437218e01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3538 identity=14580 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/nova-db-init-7nkkr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a437218e01 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3538 identity=14580 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/nova-db-init-7nkkr subsys=endpoint level=info msg="Successful endpoint creation" containerID=a437218e01 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3538 identity=14580 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/nova-db-init-7nkkr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.57 01338206-ad26-47a5-b4dd-5f2d482aee74 default }" containerID=adb65bbd3b7dd28822a64b56c2f64f270affec89009cbcadb03978561fcd2ba6 datapathConfiguration="&{false false false false false }" interface=lxc89f4bcaf13d7 k8sPodName=openstack/nova-novncproxy-644ddf546d-hwpmb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=adb65bbd3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/nova-novncproxy-644ddf546d-hwpmb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=adb65bbd3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/nova-novncproxy-644ddf546d-hwpmb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=novnc-proxy;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=adb65bbd3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 identity=58759 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/nova-novncproxy-644ddf546d-hwpmb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=adb65bbd3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 identity=58759 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/nova-novncproxy-644ddf546d-hwpmb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=adb65bbd3b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2482 identity=58759 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/nova-novncproxy-644ddf546d-hwpmb subsys=endpoint level=info msg="Successful endpoint creation" containerID=adb65bbd3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2482 identity=58759 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/nova-novncproxy-644ddf546d-hwpmb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a437218e01 endpointID=3538 k8sNamespace=openstack k8sPodName=nova-db-init-7nkkr subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=e55daee7-09e9-4be0-982f-bb927ff526c6 k8s:batch.kubernetes.io/job-name=nova-db-init k8s:component=db-init k8s:controller-uid=e55daee7-09e9-4be0-982f-bb927ff526c6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=a437218e01 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3538 identity=14580 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/nova-db-init-7nkkr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 e6830e41-0c0a-4525-8a80-50f2baf12709 default }" containerID=e47daae621a4ffbff9896b55e869c9e046d203ed41ae9fb1a825026d8cfa94fc datapathConfiguration="&{false false false false false }" interface=lxc66f7f1415791 k8sPodName=openstack/nova-db-sync-m57lg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e47daae621 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1502 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/nova-db-sync-m57lg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e47daae621 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1502 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=d42520b4-dcf6-4b3d-af96-b34fdb13131d,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=d42520b4-dcf6-4b3d-af96-b34fdb13131d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/nova-db-sync-m57lg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=d42520b4-dcf6-4b3d-af96-b34fdb13131d;k8s:batch.kubernetes.io/job-name=nova-db-sync;k8s:component=db-sync;k8s:controller-uid=d42520b4-dcf6-4b3d-af96-b34fdb13131d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-sync;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e47daae621 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1502 identity=54890 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=d42520b4-dcf6-4b3d-af96-b34fdb13131d,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=d42520b4-dcf6-4b3d-af96-b34fdb13131d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/nova-db-sync-m57lg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e47daae621 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1502 identity=54890 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/nova-db-sync-m57lg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e47daae621 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1502 identity=54890 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/nova-db-sync-m57lg subsys=endpoint level=info msg="Successful endpoint creation" containerID=e47daae621 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1502 identity=54890 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/nova-db-sync-m57lg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e47daae621 endpointID=1502 k8sNamespace=openstack k8sPodName=nova-db-sync-m57lg subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=d42520b4-dcf6-4b3d-af96-b34fdb13131d k8s:batch.kubernetes.io/job-name=nova-db-sync k8s:component=db-sync k8s:controller-uid=d42520b4-dcf6-4b3d-af96-b34fdb13131d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-sync k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=e47daae621 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1502 identity=54890 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/nova-db-sync-m57lg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 ded26519-8a2e-4f5c-8186-c9083c9364f7 default }" containerID=03a3276281cc92ea288f98ad9f7d2b3d057b913ff01b82e3e6e2a7fe3b001ff8 datapathConfiguration="&{false false false false false }" interface=lxc53565ee42da5 k8sPodName=openstack/nova-rabbit-init-xpk2h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=03a3276281 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/nova-rabbit-init-xpk2h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=03a3276281 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=7744221f-6d85-4603-af9e-233f7e1735fe,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7744221f-6d85-4603-af9e-233f7e1735fe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/nova-rabbit-init-xpk2h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=7744221f-6d85-4603-af9e-233f7e1735fe;k8s:batch.kubernetes.io/job-name=nova-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=7744221f-6d85-4603-af9e-233f7e1735fe;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-rabbit-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=03a3276281 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identity=30043 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=7744221f-6d85-4603-af9e-233f7e1735fe,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7744221f-6d85-4603-af9e-233f7e1735fe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/nova-rabbit-init-xpk2h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=03a3276281 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identity=30043 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/nova-rabbit-init-xpk2h subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=03a3276281 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=35 identity=30043 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/nova-rabbit-init-xpk2h subsys=endpoint level=info msg="Successful endpoint creation" containerID=03a3276281 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=35 identity=30043 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/nova-rabbit-init-xpk2h subsys=daemon level=info msg="Delete endpoint request" containerID=03a3276281 endpointID=35 k8sNamespace=openstack k8sPodName=nova-rabbit-init-xpk2h subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=7744221f-6d85-4603-af9e-233f7e1735fe k8s:batch.kubernetes.io/job-name=nova-rabbit-init k8s:component=rabbit-init k8s:controller-uid=7744221f-6d85-4603-af9e-233f7e1735fe k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-rabbit-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=03a3276281 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=35 identity=30043 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/nova-rabbit-init-xpk2h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.218 0a497047-b8e7-45dc-b1df-5f310fc71704 default }" containerID=90e94cdc2729322fd55a15bccc2814b6abf61a21b89cd89998ee529e877a1f05 datapathConfiguration="&{false false false false false }" interface=lxc1bcbf8cbaf48 k8sPodName=openstack/nova-ks-service-x5vwc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=90e94cdc27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3068 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/nova-ks-service-x5vwc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=90e94cdc27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3068 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=55f78682-7e4b-411b-bcfe-f3fe175ecf78,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=55f78682-7e4b-411b-bcfe-f3fe175ecf78,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/nova-ks-service-x5vwc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=55f78682-7e4b-411b-bcfe-f3fe175ecf78;k8s:batch.kubernetes.io/job-name=nova-ks-service;k8s:component=ks-service;k8s:controller-uid=55f78682-7e4b-411b-bcfe-f3fe175ecf78;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-service;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=90e94cdc27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3068 identity=39900 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=55f78682-7e4b-411b-bcfe-f3fe175ecf78,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=55f78682-7e4b-411b-bcfe-f3fe175ecf78,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/nova-ks-service-x5vwc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=90e94cdc27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3068 identity=39900 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/nova-ks-service-x5vwc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=90e94cdc27 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3068 identity=39900 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/nova-ks-service-x5vwc subsys=endpoint level=info msg="Successful endpoint creation" containerID=90e94cdc27 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3068 identity=39900 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/nova-ks-service-x5vwc subsys=daemon level=info msg="Delete endpoint request" containerID=90e94cdc27 endpointID=3068 k8sNamespace=openstack k8sPodName=nova-ks-service-x5vwc subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=55f78682-7e4b-411b-bcfe-f3fe175ecf78 k8s:batch.kubernetes.io/job-name=nova-ks-service k8s:component=ks-service k8s:controller-uid=55f78682-7e4b-411b-bcfe-f3fe175ecf78 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-service k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=90e94cdc27 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3068 identity=39900 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/nova-ks-service-x5vwc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.147 78fedf6c-b8b3-43d1-ac68-d5097fb54b51 default }" containerID=3cd5212bd6e5b2fd6b84fbdf7223ca5a9dbca3fc81328211065d24c2c0922b58 datapathConfiguration="&{false false false false false }" interface=lxcedd7e0c2659b k8sPodName=openstack/nova-ks-endpoints-9p7lq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3cd5212bd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/nova-ks-endpoints-9p7lq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3cd5212bd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=6f139382-65bd-4827-b834-06c847c307f5,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=6f139382-65bd-4827-b834-06c847c307f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/nova-ks-endpoints-9p7lq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=6f139382-65bd-4827-b834-06c847c307f5;k8s:batch.kubernetes.io/job-name=nova-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=6f139382-65bd-4827-b834-06c847c307f5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-endpoints;k8s:release_group=nova;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=3cd5212bd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.147 ipv6= k8sPodName=openstack/nova-ks-endpoints-9p7lq line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3cd5212bd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 identity=16246 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=6f139382-65bd-4827-b834-06c847c307f5,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=6f139382-65bd-4827-b834-06c847c307f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/nova-ks-endpoints-9p7lq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3cd5212bd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 identity=16246 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/nova-ks-endpoints-9p7lq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3cd5212bd6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=234 identity=16246 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/nova-ks-endpoints-9p7lq subsys=endpoint level=info msg="Successful endpoint creation" containerID=3cd5212bd6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=234 identity=16246 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/nova-ks-endpoints-9p7lq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3cd5212bd6 endpointID=234 k8sNamespace=openstack k8sPodName=nova-ks-endpoints-9p7lq subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=6f139382-65bd-4827-b834-06c847c307f5 k8s:batch.kubernetes.io/job-name=nova-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=6f139382-65bd-4827-b834-06c847c307f5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-endpoints k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=3cd5212bd6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=234 identity=16246 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/nova-ks-endpoints-9p7lq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 c0e83c93-f39a-4db3-94ea-b5bfa8daf98b default }" containerID=ee913a660415dd43ff00527281f9758801a1cb1bd767fef181f0bf25670340fc datapathConfiguration="&{false false false false false }" interface=lxcc625bc13827c k8sPodName=openstack/nova-ks-user-dm5qv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee913a6604 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1025 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/nova-ks-user-dm5qv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee913a6604 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1025 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=dc79db76-2b19-492a-a174-4be38e7a7280,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=dc79db76-2b19-492a-a174-4be38e7a7280,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/nova-ks-user-dm5qv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=dc79db76-2b19-492a-a174-4be38e7a7280;k8s:batch.kubernetes.io/job-name=nova-ks-user;k8s:component=ks-user;k8s:controller-uid=dc79db76-2b19-492a-a174-4be38e7a7280;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-user;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee913a6604 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1025 identity=49005 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=dc79db76-2b19-492a-a174-4be38e7a7280,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=dc79db76-2b19-492a-a174-4be38e7a7280,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/nova-ks-user-dm5qv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee913a6604 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1025 identity=49005 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/nova-ks-user-dm5qv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ee913a6604 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1025 identity=49005 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/nova-ks-user-dm5qv subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee913a6604 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1025 identity=49005 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/nova-ks-user-dm5qv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ee913a6604 endpointID=1025 k8sNamespace=openstack k8sPodName=nova-ks-user-dm5qv subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=dc79db76-2b19-492a-a174-4be38e7a7280 k8s:batch.kubernetes.io/job-name=nova-ks-user k8s:component=ks-user k8s:controller-uid=dc79db76-2b19-492a-a174-4be38e7a7280 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-user k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=ee913a6604 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1025 identity=49005 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/nova-ks-user-dm5qv subsys=endpoint level=info msg="Delete endpoint request" containerID=d84190764a endpointID=46 k8sNamespace=openstack k8sPodName=nova-bootstrap-5n8wq subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=d884fc4f-f0a7-40a5-b067-b4b813487a8b k8s:batch.kubernetes.io/job-name=nova-bootstrap k8s:component=bootstrap k8s:controller-uid=d884fc4f-f0a7-40a5-b067-b4b813487a8b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-bootstrap k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=d84190764a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=46 identity=54309 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/nova-bootstrap-5n8wq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.81 c5f20d34-eebc-4013-b795-f0f9b9843e49 default }" containerID=1d711c23417daee3bead573e3f188782175e6c7538ad86af1d400095c49ec0a9 datapathConfiguration="&{false false false false false }" interface=lxc0488a3d00f04 k8sPodName=local-path-storage/helper-pod-create-pvc-270de098-c2a8-4e73-9c00-c180d9982444 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d711c2341 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1786 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-270de098-c2a8-4e73-9c00-c180d9982444 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d711c2341 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1786 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-270de098-c2a8-4e73-9c00-c180d9982444 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d711c2341 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1786 identity=1077 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-270de098-c2a8-4e73-9c00-c180d9982444 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d711c2341 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1786 identity=1077 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-270de098-c2a8-4e73-9c00-c180d9982444 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d711c2341 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1786 identity=1077 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-270de098-c2a8-4e73-9c00-c180d9982444 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d711c2341 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1786 identity=1077 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-270de098-c2a8-4e73-9c00-c180d9982444 subsys=daemon level=info msg="Delete endpoint request" containerID=1d711c2341 endpointID=1786 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-270de098-c2a8-4e73-9c00-c180d9982444 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1d711c2341 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1786 identity=1077 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-270de098-c2a8-4e73-9c00-c180d9982444 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 defa2c86-b72d-47ee-ab7c-87302db2aeed default }" containerID=d01125b032a7b2efca67d53333b3399bd45e12901ae092e0a0d4bebef2653392 datapathConfiguration="&{false false false false false }" interface=lxcdd5a0853e6b2 k8sPodName=openstack/rabbitmq-neutron-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d01125b032 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1015 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d01125b032 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1015 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-neutron;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d01125b032 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1015 identity=20437 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d01125b032 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1015 identity=20437 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d01125b032 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1015 identity=20437 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d01125b032 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1015 identity=20437 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.174 98da20ac-9fce-4a51-95f5-9ccdb3c6c82b default }" containerID=bad27ac8851dae9a595b3e36008596b882273210446375a2a32da8505563ce74 datapathConfiguration="&{false false false false false }" interface=lxc7c1b1e5625cd k8sPodName=openstack/neutron-server-5db77bc57d-tchcr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bad27ac885 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=179 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/neutron-server-5db77bc57d-tchcr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bad27ac885 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=179 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/neutron-server-5db77bc57d-tchcr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bad27ac885 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=179 identity=9281 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/neutron-server-5db77bc57d-tchcr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=bad27ac885 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=179 identity=9281 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/neutron-server-5db77bc57d-tchcr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 a944e953-dd88-4ae8-b5ca-5005b19d614a default }" containerID=0f8893ae23d6e7a230e5523c83fa8feb32ad23f0a0f134e1972471e9621bc486 datapathConfiguration="&{false false false false false }" interface=lxc14983a705d12 k8sPodName=openstack/neutron-rpc-server-6c79c574b-fbs78 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f8893ae23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1575 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/neutron-rpc-server-6c79c574b-fbs78 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f8893ae23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1575 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/neutron-rpc-server-6c79c574b-fbs78 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=rpc_server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f8893ae23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1575 identity=43332 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/neutron-rpc-server-6c79c574b-fbs78 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f8893ae23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1575 identity=43332 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/neutron-rpc-server-6c79c574b-fbs78 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 d7033b6f-295e-4193-a94b-90744abc1069 default }" containerID=5cdf9b01e01eb8fc5a1322d2708b07a2b3cfcb6fb2cd85ff6c428d3d1fcd8062 datapathConfiguration="&{false false false false false }" interface=lxc36b095d5f88a k8sPodName=openstack/neutron-db-init-wgbpr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5cdf9b01e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=919 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/neutron-db-init-wgbpr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5cdf9b01e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=919 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=342735bd-3ff9-47c4-a5b1-efda306803b4,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=342735bd-3ff9-47c4-a5b1-efda306803b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/neutron-db-init-wgbpr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=342735bd-3ff9-47c4-a5b1-efda306803b4;k8s:batch.kubernetes.io/job-name=neutron-db-init;k8s:component=db-init;k8s:controller-uid=342735bd-3ff9-47c4-a5b1-efda306803b4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5cdf9b01e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=919 identity=14900 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=342735bd-3ff9-47c4-a5b1-efda306803b4,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=342735bd-3ff9-47c4-a5b1-efda306803b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/neutron-db-init-wgbpr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5cdf9b01e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=919 identity=14900 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/neutron-db-init-wgbpr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bad27ac885 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=179 identity=9281 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/neutron-server-5db77bc57d-tchcr subsys=endpoint level=info msg="Successful endpoint creation" containerID=bad27ac885 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=179 identity=9281 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/neutron-server-5db77bc57d-tchcr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0f8893ae23 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1575 identity=43332 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/neutron-rpc-server-6c79c574b-fbs78 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f8893ae23 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1575 identity=43332 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/neutron-rpc-server-6c79c574b-fbs78 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5cdf9b01e0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=919 identity=14900 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/neutron-db-init-wgbpr subsys=endpoint level=info msg="Successful endpoint creation" containerID=5cdf9b01e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=919 identity=14900 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/neutron-db-init-wgbpr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5cdf9b01e0 endpointID=919 k8sNamespace=openstack k8sPodName=neutron-db-init-wgbpr subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=342735bd-3ff9-47c4-a5b1-efda306803b4 k8s:batch.kubernetes.io/job-name=neutron-db-init k8s:component=db-init k8s:controller-uid=342735bd-3ff9-47c4-a5b1-efda306803b4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=5cdf9b01e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=919 identity=14900 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/neutron-db-init-wgbpr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 908fe722-7ca0-4510-9622-3a0c35f18639 default }" containerID=ceddace5c093699606492e48e516170a5da2c9bb6a2e5cbb9bc50f2ff3e16f13 datapathConfiguration="&{false false false false false }" interface=lxc14b3380cb3c6 k8sPodName=openstack/neutron-db-sync-xrxxk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ceddace5c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/neutron-db-sync-xrxxk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ceddace5c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=17d651c6-dbe7-4107-947d-19e122b927b4,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=17d651c6-dbe7-4107-947d-19e122b927b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/neutron-db-sync-xrxxk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ceddace5c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.50 ipv6= k8sPodName=openstack/neutron-db-sync-xrxxk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=17d651c6-dbe7-4107-947d-19e122b927b4;k8s:batch.kubernetes.io/job-name=neutron-db-sync;k8s:component=db-sync;k8s:controller-uid=17d651c6-dbe7-4107-947d-19e122b927b4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-sync;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ceddace5c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identity=8382 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=17d651c6-dbe7-4107-947d-19e122b927b4,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=17d651c6-dbe7-4107-947d-19e122b927b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/neutron-db-sync-xrxxk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ceddace5c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identity=8382 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/neutron-db-sync-xrxxk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ceddace5c0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=535 identity=8382 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/neutron-db-sync-xrxxk subsys=endpoint level=info msg="Successful endpoint creation" containerID=ceddace5c0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=535 identity=8382 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/neutron-db-sync-xrxxk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ceddace5c0 endpointID=535 k8sNamespace=openstack k8sPodName=neutron-db-sync-xrxxk subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=17d651c6-dbe7-4107-947d-19e122b927b4 k8s:batch.kubernetes.io/job-name=neutron-db-sync k8s:component=db-sync k8s:controller-uid=17d651c6-dbe7-4107-947d-19e122b927b4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-sync k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=ceddace5c0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=535 identity=8382 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/neutron-db-sync-xrxxk subsys=endpoint