level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.040544ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="57.511µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.190568ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="11.13µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=103.749659ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="16.98µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="19.23µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="83.402µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="81.641µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="85.462µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration=1.365992ms function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="8.39µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=13.559174ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.65596ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="38.401µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="35.251µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="165.503µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="88.222µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="64.652µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=45.478512ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="92.312µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="13.14µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.281µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.240.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.489924ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="13.99µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.60729ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.5µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.703792ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.7µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.55µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="5.02µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.86µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.33µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="22.861µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="10.47µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="63.722µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="362.008µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.241µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="8.04µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="240.905µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration="802.398µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.193158ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.94µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="19.151µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.240 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.240 ipAddr.ipv6="" k8sNodeIP=199.204.45.240 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.240" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.89" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.240" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.240} {CiliumInternalIP 10.0.0.89}] 10.0.0.0/24 [] [] 10.0.0.122 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:46539" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.394009273s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="16.891µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="21.76µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="45.031µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="12.101µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2075 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2075 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2075 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.54993635s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.9 ff0ea0f3-05a3-4b5a-8a9d-71f6cd1ee2ae default }" containerID=a4bf1a141b22ec372dc7e09d19228efc4084682e94639669be811c4024e29eab datapathConfiguration="&{false false false false false }" interface=lxc9cf6ca9bd029 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wqrgl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a4bf1a141b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2793 ipv4=10.0.0.9 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wqrgl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a4bf1a141b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2793 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=17e32a8f-9e57-426f-a59b-825298802a49,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=17e32a8f-9e57-426f-a59b-825298802a49,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.9 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wqrgl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.73 4228dfa3-398a-40c1-ad38-44f435f18e90 default }" containerID=1262bbfd9161e058fb0a60e23ded96a753e81dd435c210aefd02eeb2944c67fa datapathConfiguration="&{false false false false false }" interface=lxceb34a8a874d0 k8sPodName=kube-system/coredns-7c96b6546b-6w4k9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1262bbfd91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=878 ipv4=10.0.0.73 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6w4k9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1262bbfd91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=878 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.73 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6w4k9 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=17e32a8f-9e57-426f-a59b-825298802a49;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=17e32a8f-9e57-426f-a59b-825298802a49;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a4bf1a141b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2793 identity=40624 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=17e32a8f-9e57-426f-a59b-825298802a49,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=17e32a8f-9e57-426f-a59b-825298802a49,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.9 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wqrgl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a4bf1a141b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2793 identity=40624 ipv4=10.0.0.9 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wqrgl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1262bbfd91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=878 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.73 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6w4k9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1262bbfd91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=878 identity=4713 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.73 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6w4k9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1262bbfd91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=878 identity=4713 ipv4=10.0.0.73 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6w4k9 subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=305.972018ms file-path=/var/run/cilium/state/templates/2facf3a32b103217ef5c6a84e7452e012e3b849f732646953e538d1376b27966/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2075 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1381 ipv4=10.0.0.122 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1381 identityLabels="reserved:health" ipv4=10.0.0.122 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1381 identity=4 identityLabels="reserved:health" ipv4=10.0.0.122 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.07734812s file-path=/var/run/cilium/state/templates/6251f25209441db33c866eaae7e16162c478d862ae282d5b8f2a2b0cab570ac5/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=a4bf1a141b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2793 identity=40624 ipv4=10.0.0.9 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wqrgl subsys=endpoint level=info msg="Successful endpoint creation" containerID=a4bf1a141b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2793 identity=40624 ipv4=10.0.0.9 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wqrgl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1262bbfd91 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=878 identity=4713 ipv4=10.0.0.73 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6w4k9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1262bbfd91 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=878 identity=4713 ipv4=10.0.0.73 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6w4k9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1381 identity=4 ipv4=10.0.0.122 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a4bf1a141b endpointID=2793 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-wqrgl subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=17e32a8f-9e57-426f-a59b-825298802a49 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=17e32a8f-9e57-426f-a59b-825298802a49 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=a4bf1a141b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2793 identity=40624 ipv4=10.0.0.9 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wqrgl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 b9c31458-89d8-4bf0-befb-4d91c27eb904 default }" containerID=a297900d0fa56e0d5e29e039705a30da4d1b158e8d6c763c4289c9192b0c158a datapathConfiguration="&{false false false false false }" interface=lxc51bde51559d9 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9hqtt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a297900d0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 ipv4=10.0.0.21 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9hqtt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a297900d0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.21 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9hqtt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a297900d0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.21 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9hqtt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a297900d0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 identity=62320 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.21 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9hqtt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a297900d0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 identity=62320 ipv4=10.0.0.21 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9hqtt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a297900d0f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=538 identity=62320 ipv4=10.0.0.21 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9hqtt subsys=endpoint level=info msg="Successful endpoint creation" containerID=a297900d0f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=538 identity=62320 ipv4=10.0.0.21 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9hqtt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2075 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02075 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02075 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02075 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02075:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2075 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 1a12ef5c-7c69-47e3-ab57-61d5a1d50bbd default }" containerID=684ff3f76b749fa6726aae6f93c3cd8cf26d42663a4344c9434f2d8864bb3585 datapathConfiguration="&{false false false false false }" interface=lxc364a550ba731 k8sPodName=kube-system/coredns-67659f764b-r75x5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=684ff3f76b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2596 ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-67659f764b-r75x5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=684ff3f76b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2596 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-67659f764b-r75x5 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=684ff3f76b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2596 identity=4713 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-67659f764b-r75x5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=684ff3f76b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2596 identity=4713 ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-67659f764b-r75x5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=684ff3f76b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2596 identity=4713 ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-67659f764b-r75x5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=684ff3f76b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2596 identity=4713 ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-67659f764b-r75x5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.104 7ec9ef97-9bd8-4660-b0cb-9a3ebfb95328 default }" containerID=c673f214454f168e73ad4b81a7aa957fe8566d021a6842baf00ecca8e546846d datapathConfiguration="&{false false false false false }" interface=lxc9446aacafd55 k8sPodName=kube-system/coredns-67659f764b-bw6ln labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c673f21445 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3050 ipv4=10.0.0.104 ipv6= k8sPodName=kube-system/coredns-67659f764b-bw6ln subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c673f21445 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3050 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.104 ipv6= k8sPodName=kube-system/coredns-67659f764b-bw6ln subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c673f21445 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3050 identity=4713 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.104 ipv6= k8sPodName=kube-system/coredns-67659f764b-bw6ln oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c673f21445 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3050 identity=4713 ipv4=10.0.0.104 ipv6= k8sPodName=kube-system/coredns-67659f764b-bw6ln subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c673f21445 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3050 identity=4713 ipv4=10.0.0.104 ipv6= k8sPodName=kube-system/coredns-67659f764b-bw6ln subsys=endpoint level=info msg="Successful endpoint creation" containerID=c673f21445 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3050 identity=4713 ipv4=10.0.0.104 ipv6= k8sPodName=kube-system/coredns-67659f764b-bw6ln subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.229 5bf08ea9-701c-4593-9f9f-499a202275fb default }" containerID=af8fa533daeac64ade5d5e46458087157fec7d3c74ef4353bf2a53bb8e51ad63 datapathConfiguration="&{false false false false false }" interface=lxcbc8e28481f00 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-pr27p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af8fa533da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=494 ipv4=10.0.0.229 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-pr27p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af8fa533da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=494 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.229 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-pr27p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af8fa533da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=494 identity=7008 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.229 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-pr27p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af8fa533da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=494 identity=7008 ipv4=10.0.0.229 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-pr27p subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=af8fa533da datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=494 identity=7008 ipv4=10.0.0.229 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-pr27p subsys=endpoint level=info msg="Successful endpoint creation" containerID=af8fa533da datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=494 identity=7008 ipv4=10.0.0.229 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-pr27p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1262bbfd91 endpointID=878 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-6w4k9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=1262bbfd91 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=878 identity=4713 ipv4=10.0.0.73 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6w4k9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.219 d47ad828-9bb9-44d2-afe3-5583404ea68f default }" containerID=9b922dca58ce662b22d010800b79e303b9ec7ef8a06530701ee2734d00a84fd9 datapathConfiguration="&{false false false false false }" interface=lxcd699107ee41c k8sPodName=cert-manager/cert-manager-webhook-548949fc64-fgd5s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b922dca58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4050 ipv4=10.0.0.219 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-fgd5s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 6732d365-9686-44ae-a7c7-5db827a99cf2 default }" containerID=57a4533d68b9474c27e120224a81a3385253041c2353d3c1f3407daef7b65bae datapathConfiguration="&{false false false false false }" interface=lxcf8f96cc86215 k8sPodName=cert-manager/cert-manager-75c4c745bc-kf2zz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57a4533d68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1063 ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-kf2zz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b922dca58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4050 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.219 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-fgd5s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 0cfe9e4e-e2d1-46d3-9d74-277a6550b1b7 default }" containerID=fce06368b03df96eb5aaf5f0b7fc90dd587c519e4f93204d2180daee74b3abdf datapathConfiguration="&{false false false false false }" interface=lxcc99a26747e62 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-78rqt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fce06368b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3474 ipv4=10.0.0.75 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-78rqt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=57a4533d68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1063 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-kf2zz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fce06368b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3474 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.75 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-78rqt subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b922dca58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4050 identity=54181 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.219 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-fgd5s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b922dca58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4050 identity=54181 ipv4=10.0.0.219 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-fgd5s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=fce06368b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3474 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.75 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-78rqt line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=57a4533d68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1063 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-kf2zz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=57a4533d68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1063 identity=59044 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-kf2zz oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=57a4533d68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1063 identity=59044 ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-kf2zz subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fce06368b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3474 identity=16924 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.75 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-78rqt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fce06368b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3474 identity=16924 ipv4=10.0.0.75 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-78rqt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=57a4533d68 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1063 identity=59044 ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-kf2zz subsys=endpoint level=info msg="Successful endpoint creation" containerID=57a4533d68 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1063 identity=59044 ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-kf2zz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9b922dca58 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4050 identity=54181 ipv4=10.0.0.219 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-fgd5s subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b922dca58 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4050 identity=54181 ipv4=10.0.0.219 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-fgd5s subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fce06368b0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3474 identity=16924 ipv4=10.0.0.75 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-78rqt subsys=endpoint level=info msg="Successful endpoint creation" containerID=fce06368b0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3474 identity=16924 ipv4=10.0.0.75 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-78rqt subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.15 67c6f80a-ee5e-473e-9d95-11fc1e510b2b default }" containerID=729a22fe83d4c2f0b75ddfba13f93d1a41550d2f833026712d9102367c054e07 datapathConfiguration="&{false false false false false }" interface=lxc16d920d97f61 k8sPodName=cert-manager/cert-manager-startupapicheck-mvw6n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=729a22fe83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3102 ipv4=10.0.0.15 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mvw6n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=729a22fe83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3102 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=cab784bd-14f7-4e13-a11e-f6eade596543,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=cab784bd-14f7-4e13-a11e-f6eade596543,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.15 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mvw6n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=cab784bd-14f7-4e13-a11e-f6eade596543;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=cab784bd-14f7-4e13-a11e-f6eade596543;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=729a22fe83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3102 identity=60899 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=cab784bd-14f7-4e13-a11e-f6eade596543,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=cab784bd-14f7-4e13-a11e-f6eade596543,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.15 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mvw6n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=729a22fe83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3102 identity=60899 ipv4=10.0.0.15 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mvw6n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=729a22fe83 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3102 identity=60899 ipv4=10.0.0.15 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mvw6n subsys=endpoint level=info msg="Successful endpoint creation" containerID=729a22fe83 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3102 identity=60899 ipv4=10.0.0.15 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mvw6n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=729a22fe83 endpointID=3102 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-mvw6n subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=cab784bd-14f7-4e13-a11e-f6eade596543 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=cab784bd-14f7-4e13-a11e-f6eade596543 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=729a22fe83 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3102 identity=60899 ipv4=10.0.0.15 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mvw6n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.211 b5246218-5265-49b3-90f6-e87c11bd3d1b default }" containerID=ae6217984fd50c59f7b040ce5c3d5c11a07b587bfb39fb61e923a7acde492315 datapathConfiguration="&{false false false false false }" interface=lxcfbc136536c39 k8sPodName=ingress-nginx/ingress-nginx-admission-create-brs2r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae6217984f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=968 ipv4=10.0.0.211 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-brs2r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae6217984f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=968 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=aff24c45-4d06-4201-b137-fa7a00622b84,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=aff24c45-4d06-4201-b137-fa7a00622b84,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.211 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-brs2r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=aff24c45-4d06-4201-b137-fa7a00622b84;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=aff24c45-4d06-4201-b137-fa7a00622b84;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae6217984f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=968 identity=30193 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=aff24c45-4d06-4201-b137-fa7a00622b84,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=aff24c45-4d06-4201-b137-fa7a00622b84,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.211 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-brs2r oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ae6217984f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=968 identity=30193 ipv4=10.0.0.211 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-brs2r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ae6217984f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=968 identity=30193 ipv4=10.0.0.211 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-brs2r subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae6217984f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=968 identity=30193 ipv4=10.0.0.211 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-brs2r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ae6217984f endpointID=968 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-brs2r subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=aff24c45-4d06-4201-b137-fa7a00622b84 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=aff24c45-4d06-4201-b137-fa7a00622b84 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=ae6217984f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=968 identity=30193 ipv4=10.0.0.211 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-brs2r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.2 58ccf78e-4cd8-42b0-aef3-78ebdf3dc6b3 default }" containerID=fee088363d3a0615423b02056839147749d5675c401e8b9f82084817fa2f0814 datapathConfiguration="&{false false false false false }" interface=lxc97819b5e2eba k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-dbjll labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fee088363d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1670 ipv4=10.0.0.2 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-dbjll subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fee088363d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1670 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.2 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-dbjll subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=fee088363d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1670 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.2 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-dbjll line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=fee088363d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1670 identity=15638 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.2 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-dbjll oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fee088363d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1670 identity=15638 ipv4=10.0.0.2 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-dbjll subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fee088363d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1670 identity=15638 ipv4=10.0.0.2 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-dbjll subsys=endpoint level=info msg="Successful endpoint creation" containerID=fee088363d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1670 identity=15638 ipv4=10.0.0.2 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-dbjll subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.112 e1d13645-2302-4df1-b5ef-45f83529cfed default }" containerID=96ce20daa9e6b64b5ff38a8b2282253b08f5efacd67be52ca29ab10a26d8f220 datapathConfiguration="&{false false false false false }" interface=lxc67900cab2680 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9wkdl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96ce20daa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=282 ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9wkdl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96ce20daa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=282 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=d4f9830c-618b-468e-af6c-2e275d75266b,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=d4f9830c-618b-468e-af6c-2e275d75266b,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9wkdl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=d4f9830c-618b-468e-af6c-2e275d75266b;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=d4f9830c-618b-468e-af6c-2e275d75266b;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=96ce20daa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=282 identity=57827 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=d4f9830c-618b-468e-af6c-2e275d75266b,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=d4f9830c-618b-468e-af6c-2e275d75266b,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9wkdl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96ce20daa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=282 identity=57827 ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9wkdl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=96ce20daa9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=282 identity=57827 ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9wkdl subsys=endpoint level=info msg="Successful endpoint creation" containerID=96ce20daa9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=282 identity=57827 ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9wkdl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=96ce20daa9 endpointID=282 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-9wkdl subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=d4f9830c-618b-468e-af6c-2e275d75266b k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=d4f9830c-618b-468e-af6c-2e275d75266b k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=96ce20daa9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=282 identity=57827 ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9wkdl subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=e84d04dc-41a7-4203-af06-41b0eaebc51c] Description:}]" policyAddRequest=86eaaf7f-f10c-45fd-8d2d-93bfcb17be4b subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=86eaaf7f-f10c-45fd-8d2d-93bfcb17be4b policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=23f0fcb6-ae03-48e4-a9aa-67af2e92cb86] Description:}]" policyAddRequest=ce2dabdf-3cf3-43c4-8cb3-ec88b33e1310 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=ce2dabdf-3cf3-43c4-8cb3-ec88b33e1310 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.6 fb815a43-0b09-47f3-b1da-6c883722b9a8 default }" containerID=0673b19c1d96bc0a28858f014333668d7635b5a0f476586a8e4d1b9dd5e71723 datapathConfiguration="&{false false false false false }" interface=lxce7ab2c0d8f67 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-rtgb7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0673b19c1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=269 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-rtgb7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0673b19c1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=269 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-rtgb7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0673b19c1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=269 identity=10446 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-rtgb7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0673b19c1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=269 identity=10446 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-rtgb7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0673b19c1d datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=269 identity=10446 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-rtgb7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0673b19c1d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=269 identity=10446 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-rtgb7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.26 2dca3ceb-7de5-4d77-a5fb-ea4d9f01f386 default }" containerID=fba7fa029b2558f32757e458bb9dcb2d4a35177a6177d4f49ece14e6cad6c619 datapathConfiguration="&{false false false false false }" interface=lxc15104295433a k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-b9mr7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fba7fa029b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2054 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-b9mr7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fba7fa029b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2054 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-b9mr7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fba7fa029b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2054 identity=10707 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-b9mr7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fba7fa029b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2054 identity=10707 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-b9mr7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fba7fa029b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2054 identity=10707 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-b9mr7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fba7fa029b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2054 identity=10707 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-b9mr7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.9 cdd52bab-78be-4b03-8d8a-6f57728cefc0 default }" containerID=0e5f97e2b10d804218f3abf44fecc10bf14f2cded6beb580bc8c1f0ea03e87d4 datapathConfiguration="&{false false false false false }" interface=lxc12e012032f1d k8sPodName=openstack/pxc-operator-69cb5bbdb9-9zmmz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e5f97e2b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9zmmz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e5f97e2b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9zmmz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0e5f97e2b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.9 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9zmmz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e5f97e2b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identity=38258 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9zmmz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e5f97e2b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identity=38258 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9zmmz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0e5f97e2b1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=537 identity=38258 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9zmmz subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e5f97e2b1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=537 identity=38258 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9zmmz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.160 7a6b0ab5-bce9-4b01-b3c0-42b1063459b0 default }" containerID=4994ba461a9026ad5b6c635ecd54122b87a0434b95e120c68fb3639081d07668 datapathConfiguration="&{false false false false false }" interface=lxcd9f2948fdaee k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4994ba461a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1608 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4994ba461a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1608 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4994ba461a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1608 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.160 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4994ba461a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1608 identity=63045 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4994ba461a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1608 identity=63045 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4994ba461a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1608 identity=63045 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4994ba461a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1608 identity=63045 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.201 7e1ddbbd-aacc-476d-bb28-0639c88793fb default }" containerID=7de38079df0c696e518fb692ed935a54faa6dccf7c856c8b0e2e11de2cea521b datapathConfiguration="&{false false false false false }" interface=lxce5269b566051 k8sPodName=local-path-storage/helper-pod-create-pvc-6c2454cf-5ad4-4499-830d-0b66bd955338 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7de38079df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1029 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c2454cf-5ad4-4499-830d-0b66bd955338 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7de38079df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1029 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c2454cf-5ad4-4499-830d-0b66bd955338 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7de38079df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1029 identity=13189 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c2454cf-5ad4-4499-830d-0b66bd955338 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7de38079df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1029 identity=13189 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c2454cf-5ad4-4499-830d-0b66bd955338 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7de38079df datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1029 identity=13189 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c2454cf-5ad4-4499-830d-0b66bd955338 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7de38079df datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1029 identity=13189 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c2454cf-5ad4-4499-830d-0b66bd955338 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7de38079df endpointID=1029 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6c2454cf-5ad4-4499-830d-0b66bd955338 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7de38079df datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1029 identity=13189 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c2454cf-5ad4-4499-830d-0b66bd955338 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 8c38f8c1-7089-4b6b-b927-dd7fb7cc0234 default }" containerID=b67f706e111472df0e6b68cd541f71e31e45c60f498b7cc783ba13db72ec2688 datapathConfiguration="&{false false false false false }" interface=lxc839f4230fff9 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b67f706e11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b67f706e11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b67f706e11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.163 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b67f706e11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 identity=39680 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b67f706e11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 identity=39680 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b67f706e11 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1604 identity=39680 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b67f706e11 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1604 identity=39680 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=4d3caa08-41aa-4abd-adc4-190b5d0ff960] Description:}]" policyAddRequest=7483216b-1b79-4216-b9fa-411eb3818cd7 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=7483216b-1b79-4216-b9fa-411eb3818cd7 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.52 8f6822c6-b309-4612-80e3-6ca02e57eba4 default }" containerID=6a139c33064e1b5786eb05a6e9a417d0faad749328991a273974957150391632 datapathConfiguration="&{false false false false false }" interface=lxcd76637527b71 k8sPodName=local-path-storage/helper-pod-create-pvc-b559e08b-caf6-482c-bd9c-3820098bfef3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a139c3306 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b559e08b-caf6-482c-bd9c-3820098bfef3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a139c3306 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b559e08b-caf6-482c-bd9c-3820098bfef3 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a139c3306 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 identity=13189 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b559e08b-caf6-482c-bd9c-3820098bfef3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a139c3306 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 identity=13189 ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b559e08b-caf6-482c-bd9c-3820098bfef3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6a139c3306 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=886 identity=13189 ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b559e08b-caf6-482c-bd9c-3820098bfef3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a139c3306 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=886 identity=13189 ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b559e08b-caf6-482c-bd9c-3820098bfef3 subsys=daemon level=info msg="Delete endpoint request" containerID=6a139c3306 endpointID=886 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b559e08b-caf6-482c-bd9c-3820098bfef3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6a139c3306 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=886 identity=13189 ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b559e08b-caf6-482c-bd9c-3820098bfef3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 e41471de-cfca-42ac-8da8-f00ece6da45a default }" containerID=41502fb912437cebb39979115ecbbefd4a7b3117eb307fc9c00db2cc590942d1 datapathConfiguration="&{false false false false false }" interface=lxcc7120d0376b7 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41502fb912 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41502fb912 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=41502fb912 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.178 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41502fb912 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 identity=55456 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=41502fb912 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 identity=55456 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=41502fb912 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1085 identity=55456 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=41502fb912 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1085 identity=55456 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=1837e289-e53d-4acb-88bf-fefdba8020b0] Description:}]" policyAddRequest=75480e84-7720-4fb2-906c-ce6efebde8b4 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=75480e84-7720-4fb2-906c-ce6efebde8b4 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.70 f95b6435-8fc1-4a8a-a57e-894d31db9c41 default }" containerID=b3f2822ef53b0b891c120104060b4290c47c22af764d491394b97ffb3fb5ce89 datapathConfiguration="&{false false false false false }" interface=lxcb1ee0c59591a k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b3f2822ef5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2433 ipv4=10.0.0.70 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b3f2822ef5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2433 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.70 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b3f2822ef5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2433 identity=9267 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.70 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b3f2822ef5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2433 identity=9267 ipv4=10.0.0.70 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b3f2822ef5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2433 identity=9267 ipv4=10.0.0.70 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b3f2822ef5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2433 identity=9267 ipv4=10.0.0.70 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.010591529481786086 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.216 1e117812-c70d-449d-a7c4-aabd9c729a9d default }" containerID=8234f2efbe42caf375c2a8a3588590d1c1f9ead3b67518eaff0cd878fc623646 datapathConfiguration="&{false false false false false }" interface=lxc466b599230ea k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r6prg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8234f2efbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3266 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r6prg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8234f2efbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3266 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r6prg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8234f2efbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3266 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r6prg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8234f2efbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3266 identity=5186 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r6prg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8234f2efbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3266 identity=5186 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r6prg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 eb604f9c-48cd-4b24-a128-3deca4a889a8 default }" containerID=46bac1d23ead1290c9e7a8c90ca8afa3de8869e7166b703433ef19a043e29339 datapathConfiguration="&{false false false false false }" interface=lxca379aed06b59 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tbgqx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=46bac1d23e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2825 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tbgqx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=46bac1d23e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2825 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tbgqx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=46bac1d23e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2825 identity=1013 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tbgqx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=46bac1d23e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2825 identity=1013 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tbgqx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8234f2efbe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3266 identity=5186 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r6prg subsys=endpoint level=info msg="Successful endpoint creation" containerID=8234f2efbe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3266 identity=5186 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r6prg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.93 0d441525-d8af-4363-b44c-a724189a9f60 default }" containerID=5628982682aa96de4ad97d7fdbbfee2a6958cf692eb5f94a924dfd5bda741efa datapathConfiguration="&{false false false false false }" interface=lxc90d4b1b029aa k8sPodName=monitoring/node-feature-discovery-worker-97tv4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5628982682 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2793 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-97tv4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5628982682 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2793 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-97tv4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5628982682 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2793 identity=34048 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-97tv4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5628982682 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2793 identity=34048 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-97tv4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=46bac1d23e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2825 identity=1013 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tbgqx subsys=endpoint level=info msg="Successful endpoint creation" containerID=46bac1d23e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2825 identity=1013 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tbgqx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5628982682 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2793 identity=34048 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-97tv4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5628982682 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2793 identity=34048 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-97tv4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.157 66871adf-706f-40dc-9643-99eeaeaacb55 default }" containerID=4ebcea0380d6423392d9149823e5ebcf8a84b11f742d7b06ec85da336cb6b656 datapathConfiguration="&{false false false false false }" interface=lxc09b1a6760be7 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-fcd5z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ebcea0380 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2017 ipv4=10.0.0.157 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-fcd5z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ebcea0380 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2017 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.157 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-fcd5z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ebcea0380 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2017 identity=504 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.157 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-fcd5z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ebcea0380 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2017 identity=504 ipv4=10.0.0.157 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-fcd5z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4ebcea0380 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2017 identity=504 ipv4=10.0.0.157 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-fcd5z subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ebcea0380 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2017 identity=504 ipv4=10.0.0.157 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-fcd5z subsys=daemon level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2075 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02075 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02075 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02075 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02075:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2075 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.48 c09704a0-c207-464f-9e99-411d5549129e default }" containerID=9aacf86e11f2a3135a5efa6a3a5038cafcdbb24015d7fbe0f53c5ad312b0543f datapathConfiguration="&{false false false false false }" interface=lxc5df41148131a k8sPodName=monitoring/kube-prometheus-stack-admission-create-x474s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9aacf86e11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3106 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-x474s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9aacf86e11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3106 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=12fd1295-e60e-4344-bcd2-dcb153b06ada,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=12fd1295-e60e-4344-bcd2-dcb153b06ada,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-x474s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=12fd1295-e60e-4344-bcd2-dcb153b06ada;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=12fd1295-e60e-4344-bcd2-dcb153b06ada;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9aacf86e11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3106 identity=65114 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=12fd1295-e60e-4344-bcd2-dcb153b06ada,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=12fd1295-e60e-4344-bcd2-dcb153b06ada,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-x474s oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9aacf86e11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3106 identity=65114 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-x474s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9aacf86e11 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3106 identity=65114 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-x474s subsys=endpoint level=info msg="Successful endpoint creation" containerID=9aacf86e11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3106 identity=65114 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-x474s subsys=daemon level=info msg="Delete endpoint request" containerID=9aacf86e11 endpointID=3106 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-x474s subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=12fd1295-e60e-4344-bcd2-dcb153b06ada k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=12fd1295-e60e-4344-bcd2-dcb153b06ada k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=9aacf86e11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3106 identity=65114 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-x474s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 8276f0a9-6a88-4938-aac9-407137226a5d default }" containerID=73cee05b11298cbe79696de0785abaf539f86824f29da1fe54f856ff9f49a1ab datapathConfiguration="&{false false false false false }" interface=lxc09b64d15a6eb k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-znwhf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73cee05b11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-znwhf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=73cee05b11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-znwhf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.96 8c25e1cd-a4c3-44aa-b7ca-f68c02a1d85d default }" containerID=e0c1322f6f6391bd715aff22fa97a6c06d43924be9763ef432058343ea88842f datapathConfiguration="&{false false false false false }" interface=lxc193b61a1a952 k8sPodName=monitoring/kube-prometheus-stack-grafana-78465f6d58-7c75r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e0c1322f6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2511 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-78465f6d58-7c75r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e0c1322f6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2511 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-78465f6d58-7c75r subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=73cee05b11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-znwhf line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=73cee05b11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 identity=57988 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-znwhf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=73cee05b11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 identity=57988 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-znwhf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=e0c1322f6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2511 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-78465f6d58-7c75r line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e0c1322f6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2511 identity=35410 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-78465f6d58-7c75r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e0c1322f6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2511 identity=35410 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-78465f6d58-7c75r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 9857e195-b317-4bac-b067-b1938553c1ac default }" containerID=e10a88fb376bc1b0650cb02a52d1536f8f785913b1dbfcdebde5a008991efddb datapathConfiguration="&{false false false false false }" interface=lxc2bc31d28ebc7 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-lxp52 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e10a88fb37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1950 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-lxp52 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e10a88fb37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1950 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-lxp52 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e10a88fb37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1950 identity=3409 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-lxp52 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e10a88fb37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1950 identity=3409 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-lxp52 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=73cee05b11 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=48 identity=57988 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-znwhf subsys=endpoint level=info msg="Successful endpoint creation" containerID=73cee05b11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=48 identity=57988 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-znwhf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e10a88fb37 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1950 identity=3409 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-lxp52 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e10a88fb37 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1950 identity=3409 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-lxp52 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e0c1322f6f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2511 identity=35410 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-78465f6d58-7c75r subsys=endpoint level=info msg="Successful endpoint creation" containerID=e0c1322f6f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2511 identity=35410 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-78465f6d58-7c75r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.211 543c1268-f2c4-4f3d-b14a-5ab8cd8f010c default }" containerID=079d9eb56297172eb330de29e873724f7413132068e080f61e646b7238810037 datapathConfiguration="&{false false false false false }" interface=lxcf566554b63ed k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wss2l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=079d9eb562 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wss2l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=079d9eb562 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=60f1e0b7-4a89-404c-b912-4ed25d76ac7a,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=60f1e0b7-4a89-404c-b912-4ed25d76ac7a,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wss2l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=60f1e0b7-4a89-404c-b912-4ed25d76ac7a;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=60f1e0b7-4a89-404c-b912-4ed25d76ac7a;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=079d9eb562 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 identity=42116 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=60f1e0b7-4a89-404c-b912-4ed25d76ac7a,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=60f1e0b7-4a89-404c-b912-4ed25d76ac7a,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wss2l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=079d9eb562 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 identity=42116 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wss2l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=079d9eb562 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=832 identity=42116 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wss2l subsys=endpoint level=info msg="Successful endpoint creation" containerID=079d9eb562 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=832 identity=42116 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wss2l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=079d9eb562 endpointID=832 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-wss2l subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=60f1e0b7-4a89-404c-b912-4ed25d76ac7a k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=60f1e0b7-4a89-404c-b912-4ed25d76ac7a k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=079d9eb562 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=832 identity=42116 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wss2l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 12a32a60-c214-4364-9481-0355c62db17c default }" containerID=9aa26d28e0a0272a81b50bcff9ae9d9676c7f65bda9ac3843f0536ec368c8907 datapathConfiguration="&{false false false false false }" interface=lxcca0bac64d6f9 k8sPodName=local-path-storage/helper-pod-create-pvc-52542e8d-30bb-4919-9378-d41994807679 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9aa26d28e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3186 ipv4=10.0.0.131 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52542e8d-30bb-4919-9378-d41994807679 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9aa26d28e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3186 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.131 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52542e8d-30bb-4919-9378-d41994807679 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9aa26d28e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3186 identity=13189 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.131 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52542e8d-30bb-4919-9378-d41994807679 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9aa26d28e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3186 identity=13189 ipv4=10.0.0.131 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52542e8d-30bb-4919-9378-d41994807679 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9aa26d28e0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3186 identity=13189 ipv4=10.0.0.131 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52542e8d-30bb-4919-9378-d41994807679 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9aa26d28e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3186 identity=13189 ipv4=10.0.0.131 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52542e8d-30bb-4919-9378-d41994807679 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.248 4314fc09-bd63-4248-80f5-653b225a941c default }" containerID=668ebaaf51aae55e3cb9a89944bd3ec04b55cc0588d80cf166bf0ce395b3775e datapathConfiguration="&{false false false false false }" interface=lxce0404d589eaf k8sPodName=local-path-storage/helper-pod-create-pvc-d0caa1d2-e452-498c-aaa9-078b7a596288 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=668ebaaf51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3341 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d0caa1d2-e452-498c-aaa9-078b7a596288 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=668ebaaf51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3341 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d0caa1d2-e452-498c-aaa9-078b7a596288 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=668ebaaf51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3341 identity=13189 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d0caa1d2-e452-498c-aaa9-078b7a596288 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=668ebaaf51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3341 identity=13189 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d0caa1d2-e452-498c-aaa9-078b7a596288 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=668ebaaf51 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3341 identity=13189 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d0caa1d2-e452-498c-aaa9-078b7a596288 subsys=endpoint level=info msg="Successful endpoint creation" containerID=668ebaaf51 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3341 identity=13189 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d0caa1d2-e452-498c-aaa9-078b7a596288 subsys=daemon level=info msg="Delete endpoint request" containerID=668ebaaf51 endpointID=3341 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d0caa1d2-e452-498c-aaa9-078b7a596288 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=9aa26d28e0 endpointID=3186 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-52542e8d-30bb-4919-9378-d41994807679 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=668ebaaf51 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3341 identity=13189 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d0caa1d2-e452-498c-aaa9-078b7a596288 subsys=endpoint level=info msg="Removed endpoint" containerID=9aa26d28e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3186 identity=13189 ipv4=10.0.0.131 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52542e8d-30bb-4919-9378-d41994807679 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.38 eed92ab8-89a7-45fb-82e6-5f287ac567ae default }" containerID=7b83face5b08a826d8f12666d69e978830d8f09273094ece71f707b22faed4da datapathConfiguration="&{false false false false false }" interface=lxcf183dfe61a76 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7b83face5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2309 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7b83face5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2309 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7b83face5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2309 identity=61765 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7b83face5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2309 identity=61765 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 bb5fc7f1-7961-4e39-b4ae-5eb0ee55effb default }" containerID=cdbb81bc801f13318feab541aa3f3bcd91d3a4db22819857bbe1bbe1f78a8bc7 datapathConfiguration="&{false false false false false }" interface=lxc7885741fa79c k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cdbb81bc80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2344 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cdbb81bc80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2344 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cdbb81bc80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2344 identity=1215 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cdbb81bc80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2344 identity=1215 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7b83face5b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2309 identity=61765 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7b83face5b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2309 identity=61765 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cdbb81bc80 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2344 identity=1215 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cdbb81bc80 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2344 identity=1215 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.142 bc788d56-a159-4bf0-869b-3390550abb0d default }" containerID=d7fe2af4fbe48ae84b746a9a86e67651c392743243dd3682d0c1012080ac662d datapathConfiguration="&{false false false false false }" interface=lxc78f448fd4d13 k8sPodName=monitoring/loki-gateway-cf54cb88c-mjd8v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d7fe2af4fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1924 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-mjd8v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d7fe2af4fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1924 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-mjd8v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d7fe2af4fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1924 identity=39154 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-mjd8v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d7fe2af4fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1924 identity=39154 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-mjd8v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 1459f7ea-c26b-4669-96b2-d254561deb05 default }" containerID=8bb6a3181c0ea5337a452fc9eff3c12dd568d91be4f741b0739ef8e328833801 datapathConfiguration="&{false false false false false }" interface=lxc7259274ff2a2 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8bb6a3181c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1900 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8bb6a3181c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1900 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8bb6a3181c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1900 identity=56992 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8bb6a3181c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1900 identity=56992 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d7fe2af4fb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1924 identity=39154 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-mjd8v subsys=endpoint level=info msg="Successful endpoint creation" containerID=d7fe2af4fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1924 identity=39154 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-mjd8v subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.52 7a5b9d72-2c22-470b-a88b-70d576a15636 default }" containerID=38411e2243235670a401d8ba6434318febb9fe3d5e82c98cd7b793eb7e9c2544 datapathConfiguration="&{false false false false false }" interface=lxc1f0f5b0391a2 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=38411e2243 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=38411e2243 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=38411e2243 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 identity=40368 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=38411e2243 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 identity=40368 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 43dd96d5-6831-40fb-9908-53a40e6c5a3b default }" containerID=b9eaaca415f80467d40caf1bba3e0263a9b884612299968e0036c35d23746f28 datapathConfiguration="&{false false false false false }" interface=lxcef022513df16 k8sPodName=local-path-storage/helper-pod-create-pvc-48fbdbb9-c6aa-4169-a006-25fa7def7da0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b9eaaca415 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=571 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-48fbdbb9-c6aa-4169-a006-25fa7def7da0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b9eaaca415 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=571 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-48fbdbb9-c6aa-4169-a006-25fa7def7da0 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b9eaaca415 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=571 identity=13189 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-48fbdbb9-c6aa-4169-a006-25fa7def7da0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b9eaaca415 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=571 identity=13189 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-48fbdbb9-c6aa-4169-a006-25fa7def7da0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8bb6a3181c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1900 identity=56992 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8bb6a3181c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1900 identity=56992 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=38411e2243 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2 identity=40368 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=38411e2243 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2 identity=40368 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b9eaaca415 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=571 identity=13189 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-48fbdbb9-c6aa-4169-a006-25fa7def7da0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b9eaaca415 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=571 identity=13189 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-48fbdbb9-c6aa-4169-a006-25fa7def7da0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.213 3db094a0-f01b-4dda-8e30-4c3de74bb7a1 default }" containerID=5fd6e5f6677e414b427f3b3b538bebf8bfb8af8ff50ded3ad23242d1360ca102 datapathConfiguration="&{false false false false false }" interface=lxcd97bff81f6a8 k8sPodName=monitoring/vector-pnqbp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5fd6e5f667 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3077 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/vector-pnqbp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5fd6e5f667 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3077 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/vector-pnqbp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5fd6e5f667 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3077 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/vector-pnqbp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5fd6e5f667 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3077 identity=15442 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/vector-pnqbp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5fd6e5f667 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3077 identity=15442 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/vector-pnqbp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5fd6e5f667 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3077 identity=15442 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/vector-pnqbp subsys=endpoint level=info msg="Successful endpoint creation" containerID=5fd6e5f667 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3077 identity=15442 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/vector-pnqbp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b9eaaca415 endpointID=571 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-48fbdbb9-c6aa-4169-a006-25fa7def7da0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b9eaaca415 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=571 identity=13189 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-48fbdbb9-c6aa-4169-a006-25fa7def7da0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 4ed634bc-b369-4717-a793-88f999c4f4e9 default }" containerID=631759ebff3f9ce30e137433cf95107fc3461eea466f09f63eb91aba600cccec datapathConfiguration="&{false false false false false }" interface=lxc6448aca94da5 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=631759ebff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4089 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=631759ebff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4089 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=631759ebff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4089 identity=13750 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=631759ebff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4089 identity=13750 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=631759ebff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4089 identity=13750 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=631759ebff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4089 identity=13750 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.8 8dfe53f9-c35c-4954-be76-f99107d25025 default }" containerID=f6728d93241ef85d7e5f12ad826321a9a7e95e0ddd533300ce5f8ee9c6091b83 datapathConfiguration="&{false false false false false }" interface=lxc9fa6e1a365bd k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-mjqxc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f6728d9324 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3365 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-mjqxc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f6728d9324 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3365 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-mjqxc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f6728d9324 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3365 identity=32983 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-mjqxc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f6728d9324 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3365 identity=32983 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-mjqxc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f6728d9324 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3365 identity=32983 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-mjqxc subsys=endpoint level=info msg="Successful endpoint creation" containerID=f6728d9324 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3365 identity=32983 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-mjqxc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.254 4821d36c-46a3-44aa-9713-61b4b4b0e7ff default }" containerID=e1db68126ed2a51ea7553638d0c591ccefe9d002f97bdf6dc4f8b5db34756cee datapathConfiguration="&{false false false false false }" interface=lxcbf1d0376955b k8sPodName=openstack/memcached-memcached-6479589586-2b5rb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e1db68126e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1408 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-2b5rb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e1db68126e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1408 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-2b5rb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=e1db68126e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1408 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.254 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-2b5rb line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e1db68126e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1408 identity=35443 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-2b5rb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e1db68126e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1408 identity=35443 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-2b5rb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e1db68126e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1408 identity=35443 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-2b5rb subsys=endpoint level=info msg="Successful endpoint creation" containerID=e1db68126e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1408 identity=35443 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-2b5rb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.32 a7f47ac5-b0f3-45f0-9772-d0c93c0a45fa default }" containerID=dc5e7af26f9e01795d3cb44d445ea64664e391196bf997ee3ce841dba2837857 datapathConfiguration="&{false false false false false }" interface=lxc21466eb00ee0 k8sPodName=local-path-storage/helper-pod-create-pvc-07d5a5f4-7e5f-48df-bf71-326df224a905 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc5e7af26f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=643 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07d5a5f4-7e5f-48df-bf71-326df224a905 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc5e7af26f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=643 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07d5a5f4-7e5f-48df-bf71-326df224a905 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc5e7af26f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=643 identity=13189 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07d5a5f4-7e5f-48df-bf71-326df224a905 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc5e7af26f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=643 identity=13189 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07d5a5f4-7e5f-48df-bf71-326df224a905 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dc5e7af26f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=643 identity=13189 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07d5a5f4-7e5f-48df-bf71-326df224a905 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc5e7af26f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=643 identity=13189 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07d5a5f4-7e5f-48df-bf71-326df224a905 subsys=daemon level=info msg="Delete endpoint request" containerID=dc5e7af26f endpointID=643 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-07d5a5f4-7e5f-48df-bf71-326df224a905 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=dc5e7af26f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=643 identity=13189 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07d5a5f4-7e5f-48df-bf71-326df224a905 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 9927ba71-b1b2-40c6-a246-9b912ac5ce8a default }" containerID=d53126a45c131f50f03295c7e1a3a00453e00caee030f2d8f334bede0daa2491 datapathConfiguration="&{false false false false false }" interface=lxcc2d65861c048 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d53126a45c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1242 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d53126a45c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1242 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d53126a45c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1242 identity=9664 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d53126a45c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1242 identity=9664 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d53126a45c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1242 identity=9664 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d53126a45c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1242 identity=9664 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.95 59a3ca1e-e98a-4a45-9d59-6d727b818c70 default }" containerID=9a78d6f3ce4a264e80e8c8954f488dd5c4f975166a283b326d0cae763a4782ed datapathConfiguration="&{false false false false false }" interface=lxc5c471bf42b2c k8sPodName=openstack/keystone-api-59795bd44d-2sd2k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a78d6f3ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=183 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-api-59795bd44d-2sd2k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a78d6f3ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=183 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-api-59795bd44d-2sd2k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a78d6f3ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=183 identity=36714 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-api-59795bd44d-2sd2k oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9a78d6f3ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=183 identity=36714 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-api-59795bd44d-2sd2k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.222 ea74b83a-c8ef-424a-8b2a-2b79bec9d501 default }" containerID=c53484f5779b3dde9b3680e2eea6abb3c7baef1e0c30eeef8a80139ce2bda2ea datapathConfiguration="&{false false false false false }" interface=lxcbde882ab6be0 k8sPodName=openstack/keystone-credential-setup-zh22t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c53484f577 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1278 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-credential-setup-zh22t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c53484f577 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1278 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2233f5e4-60b6-4534-a6a5-b3753eed320e,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=2233f5e4-60b6-4534-a6a5-b3753eed320e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-credential-setup-zh22t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2233f5e4-60b6-4534-a6a5-b3753eed320e;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=2233f5e4-60b6-4534-a6a5-b3753eed320e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c53484f577 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1278 identity=20671 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2233f5e4-60b6-4534-a6a5-b3753eed320e,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=2233f5e4-60b6-4534-a6a5-b3753eed320e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-credential-setup-zh22t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c53484f577 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1278 identity=20671 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-credential-setup-zh22t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9a78d6f3ce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=183 identity=36714 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-api-59795bd44d-2sd2k subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a78d6f3ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=183 identity=36714 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-api-59795bd44d-2sd2k subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c53484f577 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1278 identity=20671 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-credential-setup-zh22t subsys=endpoint level=info msg="Successful endpoint creation" containerID=c53484f577 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1278 identity=20671 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-credential-setup-zh22t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c53484f577 endpointID=1278 k8sNamespace=openstack k8sPodName=keystone-credential-setup-zh22t subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2233f5e4-60b6-4534-a6a5-b3753eed320e k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=2233f5e4-60b6-4534-a6a5-b3753eed320e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c53484f577 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1278 identity=20671 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-credential-setup-zh22t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 58c83429-82e8-41a9-ad61-e53524fed54e default }" containerID=be21d872447dc98124f12760ffea573720e62e92d34352016fd0e83b47354623 datapathConfiguration="&{false false false false false }" interface=lxcbccc732f9011 k8sPodName=openstack/keystone-db-init-5qvbw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=be21d87244 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2027 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-db-init-5qvbw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=be21d87244 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2027 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b7732efa-88db-434a-8793-aeef93c1a416,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=b7732efa-88db-434a-8793-aeef93c1a416,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-db-init-5qvbw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=be21d87244 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2027 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-db-init-5qvbw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b7732efa-88db-434a-8793-aeef93c1a416;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=b7732efa-88db-434a-8793-aeef93c1a416;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=be21d87244 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2027 identity=20230 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b7732efa-88db-434a-8793-aeef93c1a416,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=b7732efa-88db-434a-8793-aeef93c1a416,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-db-init-5qvbw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=be21d87244 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2027 identity=20230 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-db-init-5qvbw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=be21d87244 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2027 identity=20230 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-db-init-5qvbw subsys=endpoint level=info msg="Successful endpoint creation" containerID=be21d87244 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2027 identity=20230 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-db-init-5qvbw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=be21d87244 endpointID=2027 k8sNamespace=openstack k8sPodName=keystone-db-init-5qvbw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b7732efa-88db-434a-8793-aeef93c1a416 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=b7732efa-88db-434a-8793-aeef93c1a416 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=be21d87244 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2027 identity=20230 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-db-init-5qvbw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 ff226319-45a5-4a6d-84dc-345c1cea4705 default }" containerID=fd89296cbc3ddf5eb484f54096f69aae482ddb40831798093f784cf395892220 datapathConfiguration="&{false false false false false }" interface=lxc78834b926bd7 k8sPodName=openstack/keystone-fernet-setup-gpgk5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd89296cbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-fernet-setup-gpgk5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd89296cbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e9f779ee-da89-4a28-9898-b8d870a2e4e8,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=e9f779ee-da89-4a28-9898-b8d870a2e4e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-fernet-setup-gpgk5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fd89296cbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-fernet-setup-gpgk5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e9f779ee-da89-4a28-9898-b8d870a2e4e8;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=e9f779ee-da89-4a28-9898-b8d870a2e4e8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fd89296cbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 identity=1537 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e9f779ee-da89-4a28-9898-b8d870a2e4e8,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=e9f779ee-da89-4a28-9898-b8d870a2e4e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-fernet-setup-gpgk5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fd89296cbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 identity=1537 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-fernet-setup-gpgk5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fd89296cbc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=683 identity=1537 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-fernet-setup-gpgk5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd89296cbc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=683 identity=1537 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-fernet-setup-gpgk5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fd89296cbc endpointID=683 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-gpgk5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e9f779ee-da89-4a28-9898-b8d870a2e4e8 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=e9f779ee-da89-4a28-9898-b8d870a2e4e8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=fd89296cbc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=683 identity=1537 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-fernet-setup-gpgk5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 6374a25d-05b9-4c6c-a1d5-bc04214daac5 default }" containerID=f3da65b668f475340ab0095a500dd243c7d889c20b99afcbf46b1afbad0b3510 datapathConfiguration="&{false false false false false }" interface=lxcd98f4a35c073 k8sPodName=openstack/keystone-db-sync-cpspz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f3da65b668 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=445 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-db-sync-cpspz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f3da65b668 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=445 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=831dd06c-4eac-4c23-be1a-1adf5b6faaae,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=831dd06c-4eac-4c23-be1a-1adf5b6faaae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-db-sync-cpspz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f3da65b668 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=445 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-db-sync-cpspz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=831dd06c-4eac-4c23-be1a-1adf5b6faaae;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=831dd06c-4eac-4c23-be1a-1adf5b6faaae;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f3da65b668 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=445 identity=1401 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=831dd06c-4eac-4c23-be1a-1adf5b6faaae,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=831dd06c-4eac-4c23-be1a-1adf5b6faaae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-db-sync-cpspz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f3da65b668 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=445 identity=1401 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-db-sync-cpspz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f3da65b668 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=445 identity=1401 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-db-sync-cpspz subsys=endpoint level=info msg="Successful endpoint creation" containerID=f3da65b668 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=445 identity=1401 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-db-sync-cpspz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f3da65b668 endpointID=445 k8sNamespace=openstack k8sPodName=keystone-db-sync-cpspz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=831dd06c-4eac-4c23-be1a-1adf5b6faaae k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=831dd06c-4eac-4c23-be1a-1adf5b6faaae k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f3da65b668 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=445 identity=1401 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-db-sync-cpspz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.238 dcc5f42f-8109-42e3-aebe-b1c690e95870 default }" containerID=04630effc442997296fca9418db84e747ffaf12eec93b9a8f350e8bd802e1e57 datapathConfiguration="&{false false false false false }" interface=lxce3e821ae254b k8sPodName=openstack/keystone-rabbit-init-cbvw6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04630effc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2936 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-rabbit-init-cbvw6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04630effc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2936 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=35e080c8-10c6-4c28-94b1-9b96f162f1ca,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=35e080c8-10c6-4c28-94b1-9b96f162f1ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-rabbit-init-cbvw6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=35e080c8-10c6-4c28-94b1-9b96f162f1ca;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=35e080c8-10c6-4c28-94b1-9b96f162f1ca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=04630effc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2936 identity=45744 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=35e080c8-10c6-4c28-94b1-9b96f162f1ca,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=35e080c8-10c6-4c28-94b1-9b96f162f1ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-rabbit-init-cbvw6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=04630effc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2936 identity=45744 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-rabbit-init-cbvw6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=04630effc4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2936 identity=45744 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-rabbit-init-cbvw6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=04630effc4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2936 identity=45744 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-rabbit-init-cbvw6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=04630effc4 endpointID=2936 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-cbvw6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=35e080c8-10c6-4c28-94b1-9b96f162f1ca k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=35e080c8-10c6-4c28-94b1-9b96f162f1ca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=04630effc4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2936 identity=45744 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-rabbit-init-cbvw6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 373b7aea-34d5-42dd-a7f7-ee85b610217d default }" containerID=8ea48713e5848ec33e242c978001bcfd82b50e9840d9fcaa3af6be86ed3a3bf8 datapathConfiguration="&{false false false false false }" interface=lxc6db88977f1ab k8sPodName=openstack/keystone-domain-manage-92cmh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ea48713e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-domain-manage-92cmh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ea48713e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1bc070bc-f6dd-4442-8180-1bf562a9c768,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=1bc070bc-f6dd-4442-8180-1bf562a9c768,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-domain-manage-92cmh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1bc070bc-f6dd-4442-8180-1bf562a9c768;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=1bc070bc-f6dd-4442-8180-1bf562a9c768;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ea48713e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 identity=31802 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1bc070bc-f6dd-4442-8180-1bf562a9c768,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=1bc070bc-f6dd-4442-8180-1bf562a9c768,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-domain-manage-92cmh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ea48713e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 identity=31802 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-domain-manage-92cmh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8ea48713e5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=683 identity=31802 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-domain-manage-92cmh subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ea48713e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=683 identity=31802 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-domain-manage-92cmh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8ea48713e5 endpointID=683 k8sNamespace=openstack k8sPodName=keystone-domain-manage-92cmh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1bc070bc-f6dd-4442-8180-1bf562a9c768 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=1bc070bc-f6dd-4442-8180-1bf562a9c768 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8ea48713e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=683 identity=31802 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-domain-manage-92cmh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 d15d984d-e695-4319-ae2f-3e659f66d947 default }" containerID=21e3a2d0609e7a275e265abe59440617dae2012346d2a2b12e7e351ac50b41e7 datapathConfiguration="&{false false false false false }" interface=lxc41084a4df2b1 k8sPodName=openstack/keystone-bootstrap-pnrvx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=21e3a2d060 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2522 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-bootstrap-pnrvx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=21e3a2d060 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2522 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b0eb09c0-9b7e-43d0-9790-b0a8e1b3c737,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b0eb09c0-9b7e-43d0-9790-b0a8e1b3c737,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-bootstrap-pnrvx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b0eb09c0-9b7e-43d0-9790-b0a8e1b3c737;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=b0eb09c0-9b7e-43d0-9790-b0a8e1b3c737;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=21e3a2d060 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2522 identity=32128 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b0eb09c0-9b7e-43d0-9790-b0a8e1b3c737,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b0eb09c0-9b7e-43d0-9790-b0a8e1b3c737,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-bootstrap-pnrvx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=21e3a2d060 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2522 identity=32128 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-bootstrap-pnrvx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=21e3a2d060 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2522 identity=32128 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-bootstrap-pnrvx subsys=endpoint level=info msg="Successful endpoint creation" containerID=21e3a2d060 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2522 identity=32128 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-bootstrap-pnrvx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=21e3a2d060 endpointID=2522 k8sNamespace=openstack k8sPodName=keystone-bootstrap-pnrvx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b0eb09c0-9b7e-43d0-9790-b0a8e1b3c737 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=b0eb09c0-9b7e-43d0-9790-b0a8e1b3c737 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=21e3a2d060 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2522 identity=32128 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-bootstrap-pnrvx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 2dd8f2c8-3a3b-4750-af8f-7b6d878ef038 default }" containerID=83ff4cc70a6d29cc336b080eceff5559b4b73e8fd50ea291794df11864bc1ea3 datapathConfiguration="&{false false false false false }" interface=lxc200064b7ca6c k8sPodName=local-path-storage/helper-pod-create-pvc-d2898ec0-b588-4fa6-b059-104e9bf9b93d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=83ff4cc70a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1692 ipv4=10.0.0.51 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d2898ec0-b588-4fa6-b059-104e9bf9b93d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=83ff4cc70a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1692 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.51 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d2898ec0-b588-4fa6-b059-104e9bf9b93d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=83ff4cc70a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1692 identity=13189 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.51 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d2898ec0-b588-4fa6-b059-104e9bf9b93d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=83ff4cc70a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1692 identity=13189 ipv4=10.0.0.51 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d2898ec0-b588-4fa6-b059-104e9bf9b93d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=83ff4cc70a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1692 identity=13189 ipv4=10.0.0.51 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d2898ec0-b588-4fa6-b059-104e9bf9b93d subsys=endpoint level=info msg="Successful endpoint creation" containerID=83ff4cc70a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1692 identity=13189 ipv4=10.0.0.51 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d2898ec0-b588-4fa6-b059-104e9bf9b93d subsys=daemon level=info msg="Delete endpoint request" containerID=83ff4cc70a endpointID=1692 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d2898ec0-b588-4fa6-b059-104e9bf9b93d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=83ff4cc70a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1692 identity=13189 ipv4=10.0.0.51 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d2898ec0-b588-4fa6-b059-104e9bf9b93d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.240 0bf8c3b2-f481-463c-bbc4-add0d4f81d3f default }" containerID=451194b947ddb87b4754a667af78642c899f12a9ce8072647f01afed0d6d7414 datapathConfiguration="&{false false false false false }" interface=lxc98d4a94df2a1 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=451194b947 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3944 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=451194b947 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3944 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=451194b947 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3944 identity=13996 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=451194b947 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3944 identity=13996 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=451194b947 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3944 identity=13996 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=451194b947 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3944 identity=13996 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.237 385d9f9d-ceb8-4be0-bdae-7b2b68d9315a default }" containerID=342577f848959c2b9ca3cd3aa91a05c95af8cbbeab50fb9b6f0e63697b92849c datapathConfiguration="&{false false false false false }" interface=lxc3c757adf92c4 k8sPodName=openstack/barbican-api-778457575c-hc6qd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=342577f848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3303 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/barbican-api-778457575c-hc6qd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=342577f848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3303 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/barbican-api-778457575c-hc6qd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=342577f848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3303 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.237 ipv6= k8sPodName=openstack/barbican-api-778457575c-hc6qd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=342577f848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3303 identity=41917 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/barbican-api-778457575c-hc6qd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=342577f848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3303 identity=41917 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/barbican-api-778457575c-hc6qd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 1e374047-14da-4bf3-a7ef-ee2a2897c00b default }" containerID=3af1235a1a107da3cf13703f799fe32c65aeff697e49b035fe1022d2876ac54c datapathConfiguration="&{false false false false false }" interface=lxc44c10f4b709a k8sPodName=openstack/barbican-db-init-9wxcz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3af1235a1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1505 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-db-init-9wxcz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3af1235a1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1505 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a3074a5f-5949-40f2-8c8e-7ed5d4327326,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=a3074a5f-5949-40f2-8c8e-7ed5d4327326,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-db-init-9wxcz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a3074a5f-5949-40f2-8c8e-7ed5d4327326;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=a3074a5f-5949-40f2-8c8e-7ed5d4327326;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3af1235a1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1505 identity=50948 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a3074a5f-5949-40f2-8c8e-7ed5d4327326,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=a3074a5f-5949-40f2-8c8e-7ed5d4327326,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-db-init-9wxcz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3af1235a1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1505 identity=50948 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-db-init-9wxcz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=342577f848 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3303 identity=41917 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/barbican-api-778457575c-hc6qd subsys=endpoint level=info msg="Successful endpoint creation" containerID=342577f848 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3303 identity=41917 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/barbican-api-778457575c-hc6qd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3af1235a1a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1505 identity=50948 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-db-init-9wxcz subsys=endpoint level=info msg="Successful endpoint creation" containerID=3af1235a1a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1505 identity=50948 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-db-init-9wxcz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3af1235a1a endpointID=1505 k8sNamespace=openstack k8sPodName=barbican-db-init-9wxcz subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a3074a5f-5949-40f2-8c8e-7ed5d4327326 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=a3074a5f-5949-40f2-8c8e-7ed5d4327326 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=3af1235a1a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1505 identity=50948 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-db-init-9wxcz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.218 1bedb240-e768-4dd2-9232-cc90a1629a73 default }" containerID=c0d31ac4d2e26f1c9642c8bf764759f4017b5a5e0f1c5c9779c0b1423e388b39 datapathConfiguration="&{false false false false false }" interface=lxc1562ca1c12fa k8sPodName=openstack/barbican-db-sync-p42pv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0d31ac4d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-db-sync-p42pv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0d31ac4d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9b4b9440-817f-4f43-aaa3-07b83dfd188a,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=9b4b9440-817f-4f43-aaa3-07b83dfd188a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-db-sync-p42pv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c0d31ac4d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-db-sync-p42pv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9b4b9440-817f-4f43-aaa3-07b83dfd188a;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=9b4b9440-817f-4f43-aaa3-07b83dfd188a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c0d31ac4d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 identity=30804 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9b4b9440-817f-4f43-aaa3-07b83dfd188a,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=9b4b9440-817f-4f43-aaa3-07b83dfd188a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-db-sync-p42pv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c0d31ac4d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 identity=30804 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-db-sync-p42pv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c0d31ac4d2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1809 identity=30804 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-db-sync-p42pv subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0d31ac4d2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1809 identity=30804 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-db-sync-p42pv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c0d31ac4d2 endpointID=1809 k8sNamespace=openstack k8sPodName=barbican-db-sync-p42pv subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9b4b9440-817f-4f43-aaa3-07b83dfd188a k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=9b4b9440-817f-4f43-aaa3-07b83dfd188a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c0d31ac4d2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1809 identity=30804 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-db-sync-p42pv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 4733a841-0001-4bee-8ea7-53218d8bb15e default }" containerID=cb3644eb5141e11d2da21a18a6950e793a075213d219e12ce20a7413c37ab2c5 datapathConfiguration="&{false false false false false }" interface=lxc670d68f8bd29 k8sPodName=openstack/barbican-rabbit-init-srt8x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb3644eb51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=413 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-rabbit-init-srt8x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cb3644eb51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=413 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5c9db5a7-0587-41b1-bcdf-b944b5df4f27,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=5c9db5a7-0587-41b1-bcdf-b944b5df4f27,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-rabbit-init-srt8x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cb3644eb51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=413 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-rabbit-init-srt8x line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5c9db5a7-0587-41b1-bcdf-b944b5df4f27;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=5c9db5a7-0587-41b1-bcdf-b944b5df4f27;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cb3644eb51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=413 identity=26177 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5c9db5a7-0587-41b1-bcdf-b944b5df4f27,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=5c9db5a7-0587-41b1-bcdf-b944b5df4f27,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-rabbit-init-srt8x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cb3644eb51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=413 identity=26177 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-rabbit-init-srt8x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cb3644eb51 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=413 identity=26177 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-rabbit-init-srt8x subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb3644eb51 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=413 identity=26177 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-rabbit-init-srt8x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cb3644eb51 endpointID=413 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-srt8x subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5c9db5a7-0587-41b1-bcdf-b944b5df4f27 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=5c9db5a7-0587-41b1-bcdf-b944b5df4f27 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=cb3644eb51 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=413 identity=26177 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-rabbit-init-srt8x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.167 ac7649dd-2858-4f8b-9c52-842accc27a9f default }" containerID=6c85e4a07f87fc648daa6eb1504418e261b2f32ce98674fd160471d058fa20c5 datapathConfiguration="&{false false false false false }" interface=lxc064844b56d3d k8sPodName=openstack/barbican-ks-service-j2pdb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c85e4a07f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-ks-service-j2pdb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c85e4a07f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=be4c70a2-9fa0-4e51-99d4-d97462bcf069,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=be4c70a2-9fa0-4e51-99d4-d97462bcf069,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-ks-service-j2pdb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=be4c70a2-9fa0-4e51-99d4-d97462bcf069;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=be4c70a2-9fa0-4e51-99d4-d97462bcf069;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6c85e4a07f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 identity=56601 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=be4c70a2-9fa0-4e51-99d4-d97462bcf069,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=be4c70a2-9fa0-4e51-99d4-d97462bcf069,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-ks-service-j2pdb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6c85e4a07f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 identity=56601 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-ks-service-j2pdb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6c85e4a07f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=7 identity=56601 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-ks-service-j2pdb subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c85e4a07f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=7 identity=56601 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-ks-service-j2pdb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03592733372110325 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=6c85e4a07f endpointID=7 k8sNamespace=openstack k8sPodName=barbican-ks-service-j2pdb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=be4c70a2-9fa0-4e51-99d4-d97462bcf069 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=be4c70a2-9fa0-4e51-99d4-d97462bcf069 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6c85e4a07f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=7 identity=56601 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-ks-service-j2pdb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.194 f75f251a-7989-4619-9318-7741f4970eb5 default }" containerID=32a72086953193707525ab7f1c8b16a57755554fabcab93c523a379a6304c1d5 datapathConfiguration="&{false false false false false }" interface=lxc47fa02247e65 k8sPodName=openstack/barbican-ks-endpoints-8v8fr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=32a7208695 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-ks-endpoints-8v8fr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=32a7208695 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=78f7be0c-96f3-45f4-b401-d48ed92ff06e,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=78f7be0c-96f3-45f4-b401-d48ed92ff06e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-ks-endpoints-8v8fr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=78f7be0c-96f3-45f4-b401-d48ed92ff06e;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=78f7be0c-96f3-45f4-b401-d48ed92ff06e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=32a7208695 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identity=62039 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=78f7be0c-96f3-45f4-b401-d48ed92ff06e,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=78f7be0c-96f3-45f4-b401-d48ed92ff06e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-ks-endpoints-8v8fr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=32a7208695 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identity=62039 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-ks-endpoints-8v8fr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=32a7208695 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=51 identity=62039 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-ks-endpoints-8v8fr subsys=endpoint level=info msg="Successful endpoint creation" containerID=32a7208695 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=51 identity=62039 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-ks-endpoints-8v8fr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=32a7208695 endpointID=51 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-8v8fr subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=78f7be0c-96f3-45f4-b401-d48ed92ff06e k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=78f7be0c-96f3-45f4-b401-d48ed92ff06e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=32a7208695 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=51 identity=62039 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-ks-endpoints-8v8fr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 7eb1df2c-8398-4a3b-a0c6-451fc16b5ba0 default }" containerID=c36df255ae04d43f676abeae736805692470a2d05474e2b8d5594ec22691a432 datapathConfiguration="&{false false false false false }" interface=lxc61c88f2000f4 k8sPodName=openstack/barbican-ks-user-lmpzk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c36df255ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=503 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-ks-user-lmpzk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c36df255ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=503 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=193aae70-a885-46b3-981a-9d9183f809a1,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=193aae70-a885-46b3-981a-9d9183f809a1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-ks-user-lmpzk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=193aae70-a885-46b3-981a-9d9183f809a1;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=193aae70-a885-46b3-981a-9d9183f809a1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c36df255ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=503 identity=2131 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=193aae70-a885-46b3-981a-9d9183f809a1,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=193aae70-a885-46b3-981a-9d9183f809a1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-ks-user-lmpzk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c36df255ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=503 identity=2131 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-ks-user-lmpzk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c36df255ae datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=503 identity=2131 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-ks-user-lmpzk subsys=endpoint level=info msg="Successful endpoint creation" containerID=c36df255ae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=503 identity=2131 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-ks-user-lmpzk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c36df255ae endpointID=503 k8sNamespace=openstack k8sPodName=barbican-ks-user-lmpzk subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=193aae70-a885-46b3-981a-9d9183f809a1 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=193aae70-a885-46b3-981a-9d9183f809a1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c36df255ae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=503 identity=2131 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-ks-user-lmpzk subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.20 965c3745-73ac-4129-845a-60718a5eea02 default }" containerID=baae5acada602036847c4ae9cfbe0f3e8481397f0252d2618d489c43f52ad412 datapathConfiguration="&{false false false false false }" interface=lxc3171dcf2cfc3 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-5zd9d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=baae5acada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3249 ipv4=10.0.0.20 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-5zd9d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=baae5acada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3249 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.20 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-5zd9d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=baae5acada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3249 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.20 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-5zd9d line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=baae5acada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3249 identity=22133 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.20 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-5zd9d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=baae5acada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3249 identity=22133 ipv4=10.0.0.20 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-5zd9d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=baae5acada datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3249 identity=22133 ipv4=10.0.0.20 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-5zd9d subsys=endpoint level=info msg="Successful endpoint creation" containerID=baae5acada datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3249 identity=22133 ipv4=10.0.0.20 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-5zd9d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.117 a8b25b5a-7237-47fa-aa9d-d8a867218688 default }" containerID=1ae914ee6e2fc63e597427a71461fa9c3a404d33fb4366e0c1b6e10f5127f8c8 datapathConfiguration="&{false false false false false }" interface=lxcc7e49c7d063d k8sPodName=openstack/rook-ceph-detect-version-gfgfk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ae914ee6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=61 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rook-ceph-detect-version-gfgfk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ae914ee6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=61 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=f8543d6f-1e9d-4ea0-8c33-4e1883e9b274,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=f8543d6f-1e9d-4ea0-8c33-4e1883e9b274,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rook-ceph-detect-version-gfgfk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=f8543d6f-1e9d-4ea0-8c33-4e1883e9b274;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=f8543d6f-1e9d-4ea0-8c33-4e1883e9b274;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ae914ee6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=61 identity=14767 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=f8543d6f-1e9d-4ea0-8c33-4e1883e9b274,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=f8543d6f-1e9d-4ea0-8c33-4e1883e9b274,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rook-ceph-detect-version-gfgfk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ae914ee6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=61 identity=14767 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rook-ceph-detect-version-gfgfk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1ae914ee6e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=61 identity=14767 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rook-ceph-detect-version-gfgfk subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ae914ee6e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=61 identity=14767 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rook-ceph-detect-version-gfgfk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1ae914ee6e endpointID=61 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-gfgfk subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=f8543d6f-1e9d-4ea0-8c33-4e1883e9b274 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=f8543d6f-1e9d-4ea0-8c33-4e1883e9b274 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=1ae914ee6e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=61 identity=14767 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rook-ceph-detect-version-gfgfk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.129 cb507a4c-58f1-425c-b68a-dbd6c71e607f default }" containerID=4008f7ff905c159b64b034c0620ec2ac6308390ef1fdd674b5a4d394df630fff datapathConfiguration="&{false false false false false }" interface=lxc429a02b3f903 k8sPodName=openstack/ceph-object-controller-detect-version-75kdn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4008f7ff90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1331 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-75kdn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4008f7ff90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1331 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=05fc31ea-918a-4a1d-9b34-e3aafed25316,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=05fc31ea-918a-4a1d-9b34-e3aafed25316,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-75kdn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=05fc31ea-918a-4a1d-9b34-e3aafed25316;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=05fc31ea-918a-4a1d-9b34-e3aafed25316;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=4008f7ff90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1331 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.129 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-75kdn line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4008f7ff90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1331 identity=45014 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=05fc31ea-918a-4a1d-9b34-e3aafed25316,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=05fc31ea-918a-4a1d-9b34-e3aafed25316,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-75kdn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4008f7ff90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1331 identity=45014 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-75kdn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4008f7ff90 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1331 identity=45014 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-75kdn subsys=endpoint level=info msg="Successful endpoint creation" containerID=4008f7ff90 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1331 identity=45014 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-75kdn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4008f7ff90 endpointID=1331 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-75kdn subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=05fc31ea-918a-4a1d-9b34-e3aafed25316 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=05fc31ea-918a-4a1d-9b34-e3aafed25316 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=4008f7ff90 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1331 identity=45014 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-75kdn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 510c0dfe-649b-43ea-86d7-93ebd76affb6 default }" containerID=1e5cea9e0f65e2d1eddde74d0c77c8da3a447b637a5cce9452bd4c1244fd23bb datapathConfiguration="&{false false false false false }" interface=lxc1a16a6b83fc9 k8sPodName=local-path-storage/helper-pod-create-pvc-81943e30-67af-49ee-95e4-0516b3df4437 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e5cea9e0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1302 ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-81943e30-67af-49ee-95e4-0516b3df4437 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e5cea9e0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1302 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-81943e30-67af-49ee-95e4-0516b3df4437 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e5cea9e0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1302 identity=13189 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-81943e30-67af-49ee-95e4-0516b3df4437 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e5cea9e0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1302 identity=13189 ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-81943e30-67af-49ee-95e4-0516b3df4437 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e5cea9e0f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1302 identity=13189 ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-81943e30-67af-49ee-95e4-0516b3df4437 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e5cea9e0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1302 identity=13189 ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-81943e30-67af-49ee-95e4-0516b3df4437 subsys=daemon level=info msg="Delete endpoint request" containerID=1e5cea9e0f endpointID=1302 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-81943e30-67af-49ee-95e4-0516b3df4437 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1e5cea9e0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1302 identity=13189 ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-81943e30-67af-49ee-95e4-0516b3df4437 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 eeec94fa-1905-42bc-b8f7-704ee4a1a959 default }" containerID=8f3d6ae288d4fa1c5b9edf518a8cc4b9c9322f67b3a6ed4725de04293ee9d284 datapathConfiguration="&{false false false false false }" interface=lxc21797c41b4bb k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f3d6ae288 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=43 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f3d6ae288 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=43 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=8f3d6ae288 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=43 identity=25536 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f3d6ae288 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=43 identity=25536 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8f3d6ae288 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=43 identity=25536 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f3d6ae288 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=43 identity=25536 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.11 e8b8715f-1e6b-4b71-9791-2a0db56611cf default }" containerID=242c3693af32004c1fc86dd2f78abf9b3d30b24dcf3bcba36d9661475482ca2b datapathConfiguration="&{false false false false false }" interface=lxc5205e06b6377 k8sPodName=openstack/glance-db-init-jfckp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=242c3693af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=493 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-db-init-jfckp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=242c3693af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=493 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4896328e-28fa-4e1f-90e8-9983d1b82e56,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=4896328e-28fa-4e1f-90e8-9983d1b82e56,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-db-init-jfckp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4896328e-28fa-4e1f-90e8-9983d1b82e56;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=4896328e-28fa-4e1f-90e8-9983d1b82e56;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=242c3693af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=493 identity=65211 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4896328e-28fa-4e1f-90e8-9983d1b82e56,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=4896328e-28fa-4e1f-90e8-9983d1b82e56,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-db-init-jfckp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=242c3693af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=493 identity=65211 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-db-init-jfckp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=242c3693af datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=493 identity=65211 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-db-init-jfckp subsys=endpoint level=info msg="Successful endpoint creation" containerID=242c3693af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=493 identity=65211 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-db-init-jfckp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=242c3693af endpointID=493 k8sNamespace=openstack k8sPodName=glance-db-init-jfckp subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4896328e-28fa-4e1f-90e8-9983d1b82e56 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=4896328e-28fa-4e1f-90e8-9983d1b82e56 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=242c3693af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=493 identity=65211 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-db-init-jfckp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.206 51bd9899-de17-4069-8a5f-fc871290f4d5 default }" containerID=a46e6cc561f9e9a1dd4734189dbc4ac67b6357127c988c16170115f947ce2a55 datapathConfiguration="&{false false false false false }" interface=lxc7a7a429fae78 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-swhz5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a46e6cc561 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1323 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-swhz5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a46e6cc561 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1323 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-swhz5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a46e6cc561 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1323 identity=16868 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-swhz5 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a46e6cc561 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1323 identity=16868 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-swhz5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 fa691cd8-43be-4e18-8bb8-ab1fe4585667 default }" containerID=4c7015c68af53024162a8fbe84768d94e1fbd7b66352ec277607e17e985bfd6d datapathConfiguration="&{false false false false false }" interface=lxc8110ea8742aa k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-279wz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c7015c68a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1367 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-279wz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c7015c68a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1367 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-279wz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4c7015c68a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1367 identity=37524 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-279wz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c7015c68a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1367 identity=37524 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-279wz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a46e6cc561 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1323 identity=16868 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-swhz5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a46e6cc561 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1323 identity=16868 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-swhz5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4c7015c68a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1367 identity=37524 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-279wz subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c7015c68a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1367 identity=37524 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-279wz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.210 00b6b681-f8e8-43f4-8dff-4bc538497eb3 default }" containerID=5a05ec720215793b6bb5119098331242141aef881ad34dcf4503f97c059cb58b datapathConfiguration="&{false false false false false }" interface=lxc9825adae4643 k8sPodName=openstack/glance-db-sync-lgt29 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a05ec7202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2993 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-db-sync-lgt29 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a05ec7202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2993 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=69ae5108-3988-4975-9287-1040c88ae178,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=69ae5108-3988-4975-9287-1040c88ae178,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-db-sync-lgt29 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=69ae5108-3988-4975-9287-1040c88ae178;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=69ae5108-3988-4975-9287-1040c88ae178;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a05ec7202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2993 identity=35044 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=69ae5108-3988-4975-9287-1040c88ae178,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=69ae5108-3988-4975-9287-1040c88ae178,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-db-sync-lgt29 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a05ec7202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2993 identity=35044 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-db-sync-lgt29 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5a05ec7202 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2993 identity=35044 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-db-sync-lgt29 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a05ec7202 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2993 identity=35044 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-db-sync-lgt29 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5a05ec7202 endpointID=2993 k8sNamespace=openstack k8sPodName=glance-db-sync-lgt29 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=69ae5108-3988-4975-9287-1040c88ae178 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=69ae5108-3988-4975-9287-1040c88ae178 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5a05ec7202 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2993 identity=35044 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-db-sync-lgt29 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 67fb3875-4d6f-4b76-9155-166cfeae9b69 default }" containerID=62176d42c376c3abca8536218cc3f3c76ca021934e8028e5b5c726fb7b41db07 datapathConfiguration="&{false false false false false }" interface=lxc518f52ac03a7 k8sPodName=openstack/glance-rabbit-init-9rqmf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62176d42c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=625 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-rabbit-init-9rqmf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62176d42c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=625 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=08a6fd9e-af2a-4dfd-b482-922416792b53,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=08a6fd9e-af2a-4dfd-b482-922416792b53,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-rabbit-init-9rqmf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=08a6fd9e-af2a-4dfd-b482-922416792b53;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=08a6fd9e-af2a-4dfd-b482-922416792b53;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=62176d42c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=625 identity=21641 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=08a6fd9e-af2a-4dfd-b482-922416792b53,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=08a6fd9e-af2a-4dfd-b482-922416792b53,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-rabbit-init-9rqmf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=62176d42c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=625 identity=21641 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-rabbit-init-9rqmf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=62176d42c3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=625 identity=21641 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-rabbit-init-9rqmf subsys=endpoint level=info msg="Successful endpoint creation" containerID=62176d42c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=625 identity=21641 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-rabbit-init-9rqmf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=62176d42c3 endpointID=625 k8sNamespace=openstack k8sPodName=glance-rabbit-init-9rqmf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=08a6fd9e-af2a-4dfd-b482-922416792b53 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=08a6fd9e-af2a-4dfd-b482-922416792b53 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=62176d42c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=625 identity=21641 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-rabbit-init-9rqmf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.148 471fd9a5-4846-4fb6-af05-ac2e8498775d default }" containerID=1c135ad7885f2b253350ae780eeacfc31cb6af2947a9353e57eea062dd8fdc25 datapathConfiguration="&{false false false false false }" interface=lxc0aa279d1394f k8sPodName=openstack/glance-ks-service-gn6hv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c135ad788 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=851 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-ks-service-gn6hv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c135ad788 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=851 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b405876d-b3c2-4ae5-b625-bafc2963dab6,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=b405876d-b3c2-4ae5-b625-bafc2963dab6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-ks-service-gn6hv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b405876d-b3c2-4ae5-b625-bafc2963dab6;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=b405876d-b3c2-4ae5-b625-bafc2963dab6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1c135ad788 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=851 identity=1258 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b405876d-b3c2-4ae5-b625-bafc2963dab6,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=b405876d-b3c2-4ae5-b625-bafc2963dab6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-ks-service-gn6hv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1c135ad788 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=851 identity=1258 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-ks-service-gn6hv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1c135ad788 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=851 identity=1258 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-ks-service-gn6hv subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c135ad788 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=851 identity=1258 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-ks-service-gn6hv subsys=daemon level=info msg="Delete endpoint request" containerID=1c135ad788 endpointID=851 k8sNamespace=openstack k8sPodName=glance-ks-service-gn6hv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b405876d-b3c2-4ae5-b625-bafc2963dab6 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=b405876d-b3c2-4ae5-b625-bafc2963dab6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1c135ad788 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=851 identity=1258 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-ks-service-gn6hv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.19 243230d4-1af3-492a-b5e4-98b64d866a4f default }" containerID=1006537864e926a9ded5183e361d28ebb72b136336ae721bcf40ca71e920fa66 datapathConfiguration="&{false false false false false }" interface=lxcf0b4f74949d2 k8sPodName=openstack/glance-ks-endpoints-xcmh4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1006537864 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=966 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/glance-ks-endpoints-xcmh4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1006537864 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=966 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=43026504-7c13-41eb-a0a0-5e0704f06be9,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=43026504-7c13-41eb-a0a0-5e0704f06be9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/glance-ks-endpoints-xcmh4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=43026504-7c13-41eb-a0a0-5e0704f06be9;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=43026504-7c13-41eb-a0a0-5e0704f06be9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1006537864 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=966 identity=42674 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=43026504-7c13-41eb-a0a0-5e0704f06be9,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=43026504-7c13-41eb-a0a0-5e0704f06be9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/glance-ks-endpoints-xcmh4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1006537864 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=966 identity=42674 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/glance-ks-endpoints-xcmh4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1006537864 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=966 identity=42674 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/glance-ks-endpoints-xcmh4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1006537864 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=966 identity=42674 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/glance-ks-endpoints-xcmh4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1006537864 endpointID=966 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-xcmh4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=43026504-7c13-41eb-a0a0-5e0704f06be9 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=43026504-7c13-41eb-a0a0-5e0704f06be9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1006537864 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=966 identity=42674 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/glance-ks-endpoints-xcmh4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 80904c3a-b614-4cfc-9daf-625e6cd46be2 default }" containerID=9521db244c4aef704d334175254d68b838593c7c6de5f8af3e2431a0350303ec datapathConfiguration="&{false false false false false }" interface=lxc7abfcaf103e2 k8sPodName=openstack/glance-ks-user-jr8db labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9521db244c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-ks-user-jr8db subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9521db244c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9efa3c6f-7796-4837-93e8-07879c20b160,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=9efa3c6f-7796-4837-93e8-07879c20b160,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-ks-user-jr8db subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9efa3c6f-7796-4837-93e8-07879c20b160;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=9efa3c6f-7796-4837-93e8-07879c20b160;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9521db244c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 identity=22088 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9efa3c6f-7796-4837-93e8-07879c20b160,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=9efa3c6f-7796-4837-93e8-07879c20b160,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-ks-user-jr8db oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9521db244c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=155 identity=22088 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-ks-user-jr8db subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9521db244c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=155 identity=22088 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-ks-user-jr8db subsys=endpoint level=info msg="Successful endpoint creation" containerID=9521db244c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=155 identity=22088 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-ks-user-jr8db subsys=daemon level=info msg="Delete endpoint request" containerID=9521db244c endpointID=155 k8sNamespace=openstack k8sPodName=glance-ks-user-jr8db subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9efa3c6f-7796-4837-93e8-07879c20b160 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=9efa3c6f-7796-4837-93e8-07879c20b160 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9521db244c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=155 identity=22088 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-ks-user-jr8db subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 01619124-b6c1-41ef-9290-1eff7a59bd47 default }" containerID=7d572a9f963e0e29c18a397e6a0c6238d1bfd7a8fa59f31ad8d53e1eeb32da22 datapathConfiguration="&{false false false false false }" interface=lxc1bff0314a86d k8sPodName=openstack/glance-metadefs-load-8tnhh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7d572a9f96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2284 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-metadefs-load-8tnhh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7d572a9f96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2284 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7c7a4856-6cbe-4bed-a33d-7dd16414e000,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=7c7a4856-6cbe-4bed-a33d-7dd16414e000,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-metadefs-load-8tnhh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7c7a4856-6cbe-4bed-a33d-7dd16414e000;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=7c7a4856-6cbe-4bed-a33d-7dd16414e000;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7d572a9f96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2284 identity=23295 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7c7a4856-6cbe-4bed-a33d-7dd16414e000,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=7c7a4856-6cbe-4bed-a33d-7dd16414e000,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-metadefs-load-8tnhh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7d572a9f96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2284 identity=23295 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-metadefs-load-8tnhh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7d572a9f96 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2284 identity=23295 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-metadefs-load-8tnhh subsys=endpoint level=info msg="Successful endpoint creation" containerID=7d572a9f96 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2284 identity=23295 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-metadefs-load-8tnhh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7d572a9f96 endpointID=2284 k8sNamespace=openstack k8sPodName=glance-metadefs-load-8tnhh subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7c7a4856-6cbe-4bed-a33d-7dd16414e000 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=7c7a4856-6cbe-4bed-a33d-7dd16414e000 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7d572a9f96 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2284 identity=23295 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-metadefs-load-8tnhh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 99580821-4c4e-4a49-8d39-8b230f000911 default }" containerID=2981dd03a4f76fb037919330cb9d18b132ae74de79c34a9b886eb1934a52931d datapathConfiguration="&{false false false false false }" interface=lxc0af0ab32f380 k8sPodName=openstack/glance-storage-init-g2qqz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2981dd03a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1837 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-storage-init-g2qqz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2981dd03a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1837 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ec7de5da-c982-4f92-8dda-b5afe1b1e502,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=ec7de5da-c982-4f92-8dda-b5afe1b1e502,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-storage-init-g2qqz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2981dd03a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1837 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-storage-init-g2qqz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ec7de5da-c982-4f92-8dda-b5afe1b1e502;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=ec7de5da-c982-4f92-8dda-b5afe1b1e502;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2981dd03a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1837 identity=9134 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ec7de5da-c982-4f92-8dda-b5afe1b1e502,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=ec7de5da-c982-4f92-8dda-b5afe1b1e502,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-storage-init-g2qqz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2981dd03a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1837 identity=9134 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-storage-init-g2qqz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2981dd03a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1837 identity=9134 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-storage-init-g2qqz subsys=endpoint level=info msg="Successful endpoint creation" containerID=2981dd03a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1837 identity=9134 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-storage-init-g2qqz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2981dd03a4 endpointID=1837 k8sNamespace=openstack k8sPodName=glance-storage-init-g2qqz subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ec7de5da-c982-4f92-8dda-b5afe1b1e502 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=ec7de5da-c982-4f92-8dda-b5afe1b1e502 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2981dd03a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1837 identity=9134 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-storage-init-g2qqz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.63 047855f4-be5a-4cd5-b04d-9fd27eeef8f8 default }" containerID=5769e6ece52e4fd00d3e99af9423aa81179d25ed06eba49f998a8afccf4143c5 datapathConfiguration="&{false false false false false }" interface=lxc63cffae41a6a k8sPodName=openstack/glance-api-67775dd5d-gnghh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5769e6ece5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-api-67775dd5d-gnghh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5769e6ece5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-api-67775dd5d-gnghh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5769e6ece5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 identity=8040 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-api-67775dd5d-gnghh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5769e6ece5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 identity=8040 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-api-67775dd5d-gnghh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5769e6ece5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=223 identity=8040 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-api-67775dd5d-gnghh subsys=endpoint level=info msg="Successful endpoint creation" containerID=5769e6ece5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=223 identity=8040 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-api-67775dd5d-gnghh subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.22 0c5a05e7-af03-4152-b876-f26433b7db53 default }" containerID=f9acffa0817c42705096e17ffea43ea1bd36ebb6a1ac60f0615e84b80a434fe0 datapathConfiguration="&{false false false false false }" interface=lxcd7ef4fa70e25 k8sPodName=openstack/staffeln-conductor-6c957668b6-xgq6q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9acffa081 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1478 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/staffeln-conductor-6c957668b6-xgq6q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9acffa081 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1478 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/staffeln-conductor-6c957668b6-xgq6q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f9acffa081 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1478 identity=51198 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/staffeln-conductor-6c957668b6-xgq6q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9acffa081 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1478 identity=51198 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/staffeln-conductor-6c957668b6-xgq6q subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.227 844a5303-5394-4e1b-bfdb-b99a57d59ec4 default }" containerID=bb44ad5baef9a30bc935b31bbadf32009cf9ab0ccbc7fe59d17e39d44cd78595 datapathConfiguration="&{false false false false false }" interface=lxca6fed9b68a8b k8sPodName=openstack/staffeln-api-75888d7b45-5ktfb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb44ad5bae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1071 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/staffeln-api-75888d7b45-5ktfb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb44ad5bae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1071 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/staffeln-api-75888d7b45-5ktfb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb44ad5bae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1071 identity=40130 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/staffeln-api-75888d7b45-5ktfb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb44ad5bae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1071 identity=40130 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/staffeln-api-75888d7b45-5ktfb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.23 de025ce4-8842-48d2-acb2-c810dc158ec1 default }" containerID=44d625ab5d0a465b256df1d1227a900ce8e92cadc4b7650b3358d237fe34f9c9 datapathConfiguration="&{false false false false false }" interface=lxc3ee03cfb0608 k8sPodName=openstack/staffeln-db-init-58jrf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44d625ab5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/staffeln-db-init-58jrf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44d625ab5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=dd8ce98e-055c-4c14-abf3-c607dd0cd8b5,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=dd8ce98e-055c-4c14-abf3-c607dd0cd8b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/staffeln-db-init-58jrf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=dd8ce98e-055c-4c14-abf3-c607dd0cd8b5;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=dd8ce98e-055c-4c14-abf3-c607dd0cd8b5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44d625ab5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 identity=266 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=dd8ce98e-055c-4c14-abf3-c607dd0cd8b5,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=dd8ce98e-055c-4c14-abf3-c607dd0cd8b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/staffeln-db-init-58jrf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=44d625ab5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 identity=266 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/staffeln-db-init-58jrf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f9acffa081 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1478 identity=51198 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/staffeln-conductor-6c957668b6-xgq6q subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9acffa081 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1478 identity=51198 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/staffeln-conductor-6c957668b6-xgq6q subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bb44ad5bae datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1071 identity=40130 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/staffeln-api-75888d7b45-5ktfb subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb44ad5bae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1071 identity=40130 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/staffeln-api-75888d7b45-5ktfb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=44d625ab5d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2641 identity=266 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/staffeln-db-init-58jrf subsys=endpoint level=info msg="Successful endpoint creation" containerID=44d625ab5d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2641 identity=266 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/staffeln-db-init-58jrf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=44d625ab5d endpointID=2641 k8sNamespace=openstack k8sPodName=staffeln-db-init-58jrf subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=dd8ce98e-055c-4c14-abf3-c607dd0cd8b5 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=dd8ce98e-055c-4c14-abf3-c607dd0cd8b5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=44d625ab5d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2641 identity=266 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/staffeln-db-init-58jrf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 43acf863-f5c4-4aa4-af94-92404977b6c6 default }" containerID=755c925dc6cff5f215f720d2e8dccc2a6690a7d32d2450179aee6032c9e0c4d9 datapathConfiguration="&{false false false false false }" interface=lxcd57eee041180 k8sPodName=openstack/staffeln-db-sync-5s6d4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=755c925dc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=286 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/staffeln-db-sync-5s6d4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=755c925dc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=286 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=a2ecadd1-1c87-483b-9e3f-b99cdddefacf,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=a2ecadd1-1c87-483b-9e3f-b99cdddefacf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/staffeln-db-sync-5s6d4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=a2ecadd1-1c87-483b-9e3f-b99cdddefacf;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=a2ecadd1-1c87-483b-9e3f-b99cdddefacf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=755c925dc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=286 identity=20427 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=a2ecadd1-1c87-483b-9e3f-b99cdddefacf,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=a2ecadd1-1c87-483b-9e3f-b99cdddefacf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/staffeln-db-sync-5s6d4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=755c925dc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=286 identity=20427 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/staffeln-db-sync-5s6d4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=755c925dc6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=286 identity=20427 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/staffeln-db-sync-5s6d4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=755c925dc6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=286 identity=20427 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/staffeln-db-sync-5s6d4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=755c925dc6 endpointID=286 k8sNamespace=openstack k8sPodName=staffeln-db-sync-5s6d4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=a2ecadd1-1c87-483b-9e3f-b99cdddefacf k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=a2ecadd1-1c87-483b-9e3f-b99cdddefacf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=755c925dc6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=286 identity=20427 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/staffeln-db-sync-5s6d4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 63cd7954-c5cc-45f0-82ef-fc7071b2271d default }" containerID=df9516e8730b74c73a803e510f959785b22aa724e6478d1631e2983b45c8a6da datapathConfiguration="&{false false false false false }" interface=lxc3851f8134a9d k8sPodName=local-path-storage/helper-pod-create-pvc-0f7be416-a159-4639-bf93-11b2d26a29fd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df9516e873 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=111 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0f7be416-a159-4639-bf93-11b2d26a29fd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df9516e873 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=111 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0f7be416-a159-4639-bf93-11b2d26a29fd subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df9516e873 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=111 identity=13189 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0f7be416-a159-4639-bf93-11b2d26a29fd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df9516e873 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=111 identity=13189 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0f7be416-a159-4639-bf93-11b2d26a29fd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df9516e873 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=111 identity=13189 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0f7be416-a159-4639-bf93-11b2d26a29fd subsys=endpoint level=info msg="Successful endpoint creation" containerID=df9516e873 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=111 identity=13189 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0f7be416-a159-4639-bf93-11b2d26a29fd subsys=daemon level=info msg="Delete endpoint request" containerID=df9516e873 endpointID=111 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0f7be416-a159-4639-bf93-11b2d26a29fd subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=df9516e873 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=111 identity=13189 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0f7be416-a159-4639-bf93-11b2d26a29fd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 7042766f-1f6a-4cd2-91e6-891595e8ac59 default }" containerID=ce0bc517fa0470acea271c9ad08651e63656be12ee60b0e70594ca790d137f26 datapathConfiguration="&{false false false false false }" interface=lxc44ee22c58b1c k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce0bc517fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3846 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce0bc517fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3846 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ce0bc517fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3846 identity=57648 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ce0bc517fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3846 identity=57648 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ce0bc517fa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3846 identity=57648 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce0bc517fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3846 identity=57648 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.195 0c3491d8-76e9-4dff-ae8d-b4fa23723749 default }" containerID=bb78075edcf05f8b7973d3bd8b7f5c19a8e9140e17c0489acd8fee01401bcaa6 datapathConfiguration="&{false false false false false }" interface=lxcd67a6ea462c2 k8sPodName=openstack/cinder-api-85777d648f-v5bjw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb78075edc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2057 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/cinder-api-85777d648f-v5bjw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb78075edc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2057 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/cinder-api-85777d648f-v5bjw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb78075edc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2057 identity=26142 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/cinder-api-85777d648f-v5bjw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb78075edc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2057 identity=26142 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/cinder-api-85777d648f-v5bjw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 96377e67-da8e-465a-9249-f19ac21f2759 default }" containerID=5b51d96bc4a54a59869bb2ce4fc659bdd0e83a5558bf6a203d91f2128d2588c2 datapathConfiguration="&{false false false false false }" interface=lxc9ad2b0b7b985 k8sPodName=openstack/cinder-scheduler-7c9c8ddf5-bzshx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5b51d96bc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1454 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/cinder-scheduler-7c9c8ddf5-bzshx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5b51d96bc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1454 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/cinder-scheduler-7c9c8ddf5-bzshx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5b51d96bc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1454 identity=6726 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/cinder-scheduler-7c9c8ddf5-bzshx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5b51d96bc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1454 identity=6726 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/cinder-scheduler-7c9c8ddf5-bzshx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 debc4f3a-749c-4816-9328-8d2b4c7bde9f default }" containerID=790486c4b19a83ef2bb5dca915240863cc09992c845df61579773064eefb043a datapathConfiguration="&{false false false false false }" interface=lxc10d8ad552848 k8sPodName=openstack/cinder-db-init-8csbq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=790486c4b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3275 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/cinder-db-init-8csbq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=790486c4b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3275 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=28be1c52-0e30-4a1f-a396-5adde5d53f27,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=28be1c52-0e30-4a1f-a396-5adde5d53f27,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/cinder-db-init-8csbq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=28be1c52-0e30-4a1f-a396-5adde5d53f27;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=28be1c52-0e30-4a1f-a396-5adde5d53f27;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=790486c4b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3275 identity=32418 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=28be1c52-0e30-4a1f-a396-5adde5d53f27,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=28be1c52-0e30-4a1f-a396-5adde5d53f27,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/cinder-db-init-8csbq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=790486c4b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3275 identity=32418 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/cinder-db-init-8csbq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bb78075edc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2057 identity=26142 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/cinder-api-85777d648f-v5bjw subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb78075edc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2057 identity=26142 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/cinder-api-85777d648f-v5bjw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5b51d96bc4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1454 identity=6726 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/cinder-scheduler-7c9c8ddf5-bzshx subsys=endpoint level=info msg="Successful endpoint creation" containerID=5b51d96bc4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1454 identity=6726 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/cinder-scheduler-7c9c8ddf5-bzshx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=790486c4b1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3275 identity=32418 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/cinder-db-init-8csbq subsys=endpoint level=info msg="Successful endpoint creation" containerID=790486c4b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3275 identity=32418 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/cinder-db-init-8csbq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=790486c4b1 endpointID=3275 k8sNamespace=openstack k8sPodName=cinder-db-init-8csbq subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=28be1c52-0e30-4a1f-a396-5adde5d53f27 k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=28be1c52-0e30-4a1f-a396-5adde5d53f27 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=790486c4b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3275 identity=32418 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/cinder-db-init-8csbq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 1d4d7ef6-cfb6-47b2-a645-15aa78064479 default }" containerID=48fce744ccc6052026e654ba6fe30893afd943b5c729298abb9247bb54519355 datapathConfiguration="&{false false false false false }" interface=lxc4a516a0f5782 k8sPodName=openstack/cinder-db-sync-k4nrv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=48fce744cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/cinder-db-sync-k4nrv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=48fce744cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e2750a8c-b1be-453d-bf0a-797c2f3a8af0,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=e2750a8c-b1be-453d-bf0a-797c2f3a8af0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/cinder-db-sync-k4nrv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=48fce744cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.108 ipv6= k8sPodName=openstack/cinder-db-sync-k4nrv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=e2750a8c-b1be-453d-bf0a-797c2f3a8af0;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=e2750a8c-b1be-453d-bf0a-797c2f3a8af0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=48fce744cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 identity=28497 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e2750a8c-b1be-453d-bf0a-797c2f3a8af0,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=e2750a8c-b1be-453d-bf0a-797c2f3a8af0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/cinder-db-sync-k4nrv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=48fce744cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 identity=28497 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/cinder-db-sync-k4nrv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=48fce744cc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=272 identity=28497 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/cinder-db-sync-k4nrv subsys=endpoint level=info msg="Successful endpoint creation" containerID=48fce744cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=272 identity=28497 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/cinder-db-sync-k4nrv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=48fce744cc endpointID=272 k8sNamespace=openstack k8sPodName=cinder-db-sync-k4nrv subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=e2750a8c-b1be-453d-bf0a-797c2f3a8af0 k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=e2750a8c-b1be-453d-bf0a-797c2f3a8af0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=48fce744cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=272 identity=28497 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/cinder-db-sync-k4nrv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 430a648b-b76b-449f-8e8d-12369fe94e49 default }" containerID=1e5c3af71a7e82a82df3229e0bca2a341419f3d3aea5995c6cbfe72981380825 datapathConfiguration="&{false false false false false }" interface=lxc2e4f920d94e7 k8sPodName=openstack/cinder-rabbit-init-t9kzk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e5c3af71a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/cinder-rabbit-init-t9kzk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e5c3af71a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a3f4251f-a93a-4343-b573-ec4f4f84f3be,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a3f4251f-a93a-4343-b573-ec4f4f84f3be,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/cinder-rabbit-init-t9kzk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=a3f4251f-a93a-4343-b573-ec4f4f84f3be;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=a3f4251f-a93a-4343-b573-ec4f4f84f3be;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e5c3af71a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identity=4038 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a3f4251f-a93a-4343-b573-ec4f4f84f3be,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a3f4251f-a93a-4343-b573-ec4f4f84f3be,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/cinder-rabbit-init-t9kzk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e5c3af71a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identity=4038 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/cinder-rabbit-init-t9kzk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e5c3af71a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=660 identity=4038 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/cinder-rabbit-init-t9kzk subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e5c3af71a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=660 identity=4038 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/cinder-rabbit-init-t9kzk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1e5c3af71a endpointID=660 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-t9kzk subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=a3f4251f-a93a-4343-b573-ec4f4f84f3be k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=a3f4251f-a93a-4343-b573-ec4f4f84f3be k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=1e5c3af71a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=660 identity=4038 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/cinder-rabbit-init-t9kzk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 d9619378-b652-4b88-91fc-43a0664c5a9b default }" containerID=e0b84d35e07ad40564b491775aef907d3920600437def79154e88d9e3454aa29 datapathConfiguration="&{false false false false false }" interface=lxce65e814b6af5 k8sPodName=openstack/cinder-ks-service-892vv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e0b84d35e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1107 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/cinder-ks-service-892vv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e0b84d35e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1107 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=4191234a-fe1e-4479-b67a-a5c737d7446e,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=4191234a-fe1e-4479-b67a-a5c737d7446e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/cinder-ks-service-892vv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=4191234a-fe1e-4479-b67a-a5c737d7446e;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=4191234a-fe1e-4479-b67a-a5c737d7446e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e0b84d35e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1107 identity=3244 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=4191234a-fe1e-4479-b67a-a5c737d7446e,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=4191234a-fe1e-4479-b67a-a5c737d7446e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/cinder-ks-service-892vv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e0b84d35e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1107 identity=3244 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/cinder-ks-service-892vv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e0b84d35e0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1107 identity=3244 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/cinder-ks-service-892vv subsys=endpoint level=info msg="Successful endpoint creation" containerID=e0b84d35e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1107 identity=3244 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/cinder-ks-service-892vv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e0b84d35e0 endpointID=1107 k8sNamespace=openstack k8sPodName=cinder-ks-service-892vv subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=4191234a-fe1e-4479-b67a-a5c737d7446e k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=4191234a-fe1e-4479-b67a-a5c737d7446e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=e0b84d35e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1107 identity=3244 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/cinder-ks-service-892vv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 33cae1f4-1335-4d54-a903-8256c4902e59 default }" containerID=cc9e8b36e73c891214ee479c1045864ab7af0b85bccf760e7c5156256cecf5ab datapathConfiguration="&{false false false false false }" interface=lxc66ba08fee8da k8sPodName=openstack/cinder-ks-endpoints-rc7zf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc9e8b36e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2660 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rc7zf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc9e8b36e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2660 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=59fc5e9f-45c7-41f6-bc5b-77a32f22533f,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=59fc5e9f-45c7-41f6-bc5b-77a32f22533f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rc7zf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=59fc5e9f-45c7-41f6-bc5b-77a32f22533f;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=59fc5e9f-45c7-41f6-bc5b-77a32f22533f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=cc9e8b36e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2660 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.155 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rc7zf line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=cc9e8b36e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2660 identity=43134 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=59fc5e9f-45c7-41f6-bc5b-77a32f22533f,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=59fc5e9f-45c7-41f6-bc5b-77a32f22533f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rc7zf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc9e8b36e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2660 identity=43134 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rc7zf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cc9e8b36e7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2660 identity=43134 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rc7zf subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc9e8b36e7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2660 identity=43134 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rc7zf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cc9e8b36e7 endpointID=2660 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-rc7zf subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=59fc5e9f-45c7-41f6-bc5b-77a32f22533f k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=59fc5e9f-45c7-41f6-bc5b-77a32f22533f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=cc9e8b36e7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2660 identity=43134 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rc7zf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 28a2b4e8-7798-484e-9d53-ca92f6c77a51 default }" containerID=90a522efa07e12ea8a34b1075faddf5bdf526bfdff041a3f032e5f3c7a669acb datapathConfiguration="&{false false false false false }" interface=lxc3abcb60e2b4e k8sPodName=openstack/cinder-ks-user-jjxv7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=90a522efa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2073 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/cinder-ks-user-jjxv7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=90a522efa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2073 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e453363b-f115-492d-994b-2bd01f9cb9b4,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=e453363b-f115-492d-994b-2bd01f9cb9b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/cinder-ks-user-jjxv7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=e453363b-f115-492d-994b-2bd01f9cb9b4;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=e453363b-f115-492d-994b-2bd01f9cb9b4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=90a522efa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2073 identity=26918 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e453363b-f115-492d-994b-2bd01f9cb9b4,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=e453363b-f115-492d-994b-2bd01f9cb9b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/cinder-ks-user-jjxv7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=90a522efa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2073 identity=26918 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/cinder-ks-user-jjxv7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=90a522efa0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2073 identity=26918 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/cinder-ks-user-jjxv7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=90a522efa0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2073 identity=26918 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/cinder-ks-user-jjxv7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=90a522efa0 endpointID=2073 k8sNamespace=openstack k8sPodName=cinder-ks-user-jjxv7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=e453363b-f115-492d-994b-2bd01f9cb9b4 k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=e453363b-f115-492d-994b-2bd01f9cb9b4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=90a522efa0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2073 identity=26918 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/cinder-ks-user-jjxv7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 f627ae67-045a-42c0-a607-ea0db749fb09 default }" containerID=703dc2e3c6d16bce339751e80a6ef5b2ab9cf2ccb1baece368c79776de45c75b datapathConfiguration="&{false false false false false }" interface=lxc837cc4c4f464 k8sPodName=openstack/cinder-backup-storage-init-fg4d2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=703dc2e3c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3262 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/cinder-backup-storage-init-fg4d2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=703dc2e3c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3262 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=41bf0609-800b-4217-b03a-3750f9767796,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=41bf0609-800b-4217-b03a-3750f9767796,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/cinder-backup-storage-init-fg4d2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=41bf0609-800b-4217-b03a-3750f9767796;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=41bf0609-800b-4217-b03a-3750f9767796;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=703dc2e3c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3262 identity=17273 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=41bf0609-800b-4217-b03a-3750f9767796,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=41bf0609-800b-4217-b03a-3750f9767796,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/cinder-backup-storage-init-fg4d2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=703dc2e3c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3262 identity=17273 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/cinder-backup-storage-init-fg4d2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=703dc2e3c6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3262 identity=17273 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/cinder-backup-storage-init-fg4d2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=703dc2e3c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3262 identity=17273 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/cinder-backup-storage-init-fg4d2 subsys=daemon level=info msg="Delete endpoint request" containerID=703dc2e3c6 endpointID=3262 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-fg4d2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=41bf0609-800b-4217-b03a-3750f9767796 k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=41bf0609-800b-4217-b03a-3750f9767796 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=703dc2e3c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3262 identity=17273 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/cinder-backup-storage-init-fg4d2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 d6ff2beb-50de-481c-bfa3-f54928af77ee default }" containerID=4e6f59c2ed17c35cc46f6623a34ea743e129809bea180cb1d1ce7bd59ac1d844 datapathConfiguration="&{false false false false false }" interface=lxce45b46a4b79d k8sPodName=openstack/cinder-create-internal-tenant-zxc92 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e6f59c2ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=669 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-zxc92 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e6f59c2ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=669 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e0f38c76-aba9-4fdf-9cb8-10f05f0d0b4d,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=e0f38c76-aba9-4fdf-9cb8-10f05f0d0b4d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-zxc92 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=e0f38c76-aba9-4fdf-9cb8-10f05f0d0b4d;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=e0f38c76-aba9-4fdf-9cb8-10f05f0d0b4d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e6f59c2ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=669 identity=9415 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e0f38c76-aba9-4fdf-9cb8-10f05f0d0b4d,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=e0f38c76-aba9-4fdf-9cb8-10f05f0d0b4d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-zxc92 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e6f59c2ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=669 identity=9415 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-zxc92 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4e6f59c2ed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=669 identity=9415 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-zxc92 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e6f59c2ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=669 identity=9415 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-zxc92 subsys=daemon level=info msg="Delete endpoint request" containerID=4e6f59c2ed endpointID=669 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-zxc92 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=e0f38c76-aba9-4fdf-9cb8-10f05f0d0b4d k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=e0f38c76-aba9-4fdf-9cb8-10f05f0d0b4d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=4e6f59c2ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=669 identity=9415 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-zxc92 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.233 463813df-dc92-4631-a34b-0b20f3c01683 default }" containerID=e4e518a0e8db6476152346b16520ef603e3ff7531e64428920c7b67c9f07f6de datapathConfiguration="&{false false false false false }" interface=lxc13c64cc0ea26 k8sPodName=openstack/cinder-storage-init-4llfs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4e518a0e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2218 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-storage-init-4llfs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4e518a0e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2218 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=3940e3f3-28d0-4190-9b9b-2ab9e84c94fa,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=3940e3f3-28d0-4190-9b9b-2ab9e84c94fa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-storage-init-4llfs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e4e518a0e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2218 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-storage-init-4llfs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=3940e3f3-28d0-4190-9b9b-2ab9e84c94fa;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=3940e3f3-28d0-4190-9b9b-2ab9e84c94fa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e4e518a0e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2218 identity=6934 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=3940e3f3-28d0-4190-9b9b-2ab9e84c94fa,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=3940e3f3-28d0-4190-9b9b-2ab9e84c94fa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-storage-init-4llfs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4e518a0e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2218 identity=6934 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-storage-init-4llfs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e4e518a0e8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2218 identity=6934 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-storage-init-4llfs subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4e518a0e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2218 identity=6934 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-storage-init-4llfs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e4e518a0e8 endpointID=2218 k8sNamespace=openstack k8sPodName=cinder-storage-init-4llfs subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=3940e3f3-28d0-4190-9b9b-2ab9e84c94fa k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=3940e3f3-28d0-4190-9b9b-2ab9e84c94fa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=e4e518a0e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2218 identity=6934 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-storage-init-4llfs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 a2a341d9-7e3b-4769-83ff-178dbd79b299 default }" containerID=7b80bcf3bc0c5efd334327e00fcbd5f3458eb17ec5db38807ff76a4319d1bc7f datapathConfiguration="&{false false false false false }" interface=lxce785def41ec8 k8sPodName=openstack/cinder-bootstrap-2gz2t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7b80bcf3bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1000 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/cinder-bootstrap-2gz2t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7b80bcf3bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1000 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=dcec0328-a7ae-47ee-99e7-34e6f535c5bc,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=dcec0328-a7ae-47ee-99e7-34e6f535c5bc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/cinder-bootstrap-2gz2t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=dcec0328-a7ae-47ee-99e7-34e6f535c5bc;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=dcec0328-a7ae-47ee-99e7-34e6f535c5bc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=7b80bcf3bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1000 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.247 ipv6= k8sPodName=openstack/cinder-bootstrap-2gz2t line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7b80bcf3bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1000 identity=31118 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=dcec0328-a7ae-47ee-99e7-34e6f535c5bc,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=dcec0328-a7ae-47ee-99e7-34e6f535c5bc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/cinder-bootstrap-2gz2t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7b80bcf3bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1000 identity=31118 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/cinder-bootstrap-2gz2t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7b80bcf3bc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1000 identity=31118 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/cinder-bootstrap-2gz2t subsys=endpoint level=info msg="Successful endpoint creation" containerID=7b80bcf3bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1000 identity=31118 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/cinder-bootstrap-2gz2t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.35 25bcb563-847d-4344-b48b-cc6628fe7b2f default }" containerID=df6b485456d122f2e6ed389c8b5d8a665264a5c0f8034bc4f831fb3e873632a9 datapathConfiguration="&{false false false false false }" interface=lxcb26bea4495e3 k8sPodName=openstack/cinder-backup-658555bdc7-vwvj2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df6b485456 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=258 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/cinder-backup-658555bdc7-vwvj2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df6b485456 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=258 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/cinder-backup-658555bdc7-vwvj2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df6b485456 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=258 identity=1386 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/cinder-backup-658555bdc7-vwvj2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df6b485456 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=258 identity=1386 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/cinder-backup-658555bdc7-vwvj2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.102 7409879c-b994-482b-8ce4-da1aa5f9bf77 default }" containerID=ff567c0422232585aacabaaec7ed73d8247a05c66f6b1b9325f422dbb33b04b5 datapathConfiguration="&{false false false false false }" interface=lxcdb1ef534c89a k8sPodName=openstack/cinder-volume-84ddf6c7c4-sn7jv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff567c0422 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1444 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/cinder-volume-84ddf6c7c4-sn7jv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff567c0422 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1444 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/cinder-volume-84ddf6c7c4-sn7jv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff567c0422 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1444 identity=46298 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/cinder-volume-84ddf6c7c4-sn7jv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ff567c0422 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1444 identity=46298 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/cinder-volume-84ddf6c7c4-sn7jv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df6b485456 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=258 identity=1386 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/cinder-backup-658555bdc7-vwvj2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=df6b485456 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=258 identity=1386 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/cinder-backup-658555bdc7-vwvj2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ff567c0422 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1444 identity=46298 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/cinder-volume-84ddf6c7c4-sn7jv subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff567c0422 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1444 identity=46298 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/cinder-volume-84ddf6c7c4-sn7jv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7b80bcf3bc endpointID=1000 k8sNamespace=openstack k8sPodName=cinder-bootstrap-2gz2t subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=dcec0328-a7ae-47ee-99e7-34e6f535c5bc k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=dcec0328-a7ae-47ee-99e7-34e6f535c5bc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=7b80bcf3bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1000 identity=31118 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/cinder-bootstrap-2gz2t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 0855177c-a4ed-4c42-bb45-7d3234e58d11 default }" containerID=215b61e70622caedec6f054db0388d7ff5b43906308fdc0c5c06680d4b71f435 datapathConfiguration="&{false false false false false }" interface=lxc26420bedbce4 k8sPodName=openstack/placement-api-7545c45fd8-nmnhx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=215b61e706 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=368 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/placement-api-7545c45fd8-nmnhx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=215b61e706 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=368 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/placement-api-7545c45fd8-nmnhx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=215b61e706 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=368 identity=12779 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/placement-api-7545c45fd8-nmnhx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=215b61e706 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=368 identity=12779 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/placement-api-7545c45fd8-nmnhx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 8129bef9-0d37-4435-bce4-0f3d634c7b53 default }" containerID=e67f625d682f0f3a05eb26e14d9a4fd7ca9c5c0551c7c571851714bf8cef7955 datapathConfiguration="&{false false false false false }" interface=lxc9403c3a616d5 k8sPodName=openstack/placement-db-init-r2w8p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e67f625d68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=210 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/placement-db-init-r2w8p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e67f625d68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=210 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=e74ebda5-c64f-41ca-bd1a-e7c83c1f79fb,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=e74ebda5-c64f-41ca-bd1a-e7c83c1f79fb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/placement-db-init-r2w8p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=e74ebda5-c64f-41ca-bd1a-e7c83c1f79fb;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=e74ebda5-c64f-41ca-bd1a-e7c83c1f79fb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e67f625d68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=210 identity=3623 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=e74ebda5-c64f-41ca-bd1a-e7c83c1f79fb,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=e74ebda5-c64f-41ca-bd1a-e7c83c1f79fb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/placement-db-init-r2w8p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e67f625d68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=210 identity=3623 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/placement-db-init-r2w8p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=215b61e706 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=368 identity=12779 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/placement-api-7545c45fd8-nmnhx subsys=endpoint level=info msg="Successful endpoint creation" containerID=215b61e706 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=368 identity=12779 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/placement-api-7545c45fd8-nmnhx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e67f625d68 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=210 identity=3623 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/placement-db-init-r2w8p subsys=endpoint level=info msg="Successful endpoint creation" containerID=e67f625d68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=210 identity=3623 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/placement-db-init-r2w8p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e67f625d68 endpointID=210 k8sNamespace=openstack k8sPodName=placement-db-init-r2w8p subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=e74ebda5-c64f-41ca-bd1a-e7c83c1f79fb k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=e74ebda5-c64f-41ca-bd1a-e7c83c1f79fb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=e67f625d68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=210 identity=3623 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/placement-db-init-r2w8p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 6cb960e9-9581-4ad6-a355-8b6fc027a575 default }" containerID=542d6ad67ff7c0144f4195b6bb0ad7ef708afabbc64edfe9b34965792c8c4500 datapathConfiguration="&{false false false false false }" interface=lxca040a3ff8a0d k8sPodName=openstack/placement-db-sync-wtw9f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=542d6ad67f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2449 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/placement-db-sync-wtw9f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=542d6ad67f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2449 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=fe4f0814-6ae5-4fe9-a661-5d49cf92fc27,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=fe4f0814-6ae5-4fe9-a661-5d49cf92fc27,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/placement-db-sync-wtw9f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=542d6ad67f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2449 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.123 ipv6= k8sPodName=openstack/placement-db-sync-wtw9f line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=fe4f0814-6ae5-4fe9-a661-5d49cf92fc27;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=fe4f0814-6ae5-4fe9-a661-5d49cf92fc27;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=542d6ad67f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2449 identity=25473 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=fe4f0814-6ae5-4fe9-a661-5d49cf92fc27,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=fe4f0814-6ae5-4fe9-a661-5d49cf92fc27,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/placement-db-sync-wtw9f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=542d6ad67f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2449 identity=25473 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/placement-db-sync-wtw9f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=542d6ad67f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2449 identity=25473 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/placement-db-sync-wtw9f subsys=endpoint level=info msg="Successful endpoint creation" containerID=542d6ad67f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2449 identity=25473 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/placement-db-sync-wtw9f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=542d6ad67f endpointID=2449 k8sNamespace=openstack k8sPodName=placement-db-sync-wtw9f subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=fe4f0814-6ae5-4fe9-a661-5d49cf92fc27 k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=fe4f0814-6ae5-4fe9-a661-5d49cf92fc27 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=542d6ad67f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2449 identity=25473 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/placement-db-sync-wtw9f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 ce8a756d-a9b0-45e8-9fa3-f1eb17116406 default }" containerID=93b24ad13ac357298fbab347183517fab4a7dc5aae87b86c49930667295beda9 datapathConfiguration="&{false false false false false }" interface=lxc6f708618060c k8sPodName=openstack/placement-ks-service-5hf2b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=93b24ad13a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3186 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/placement-ks-service-5hf2b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=93b24ad13a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3186 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=bf58333b-8741-4d75-9182-a03557814bfd,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=bf58333b-8741-4d75-9182-a03557814bfd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/placement-ks-service-5hf2b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=bf58333b-8741-4d75-9182-a03557814bfd;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=bf58333b-8741-4d75-9182-a03557814bfd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=93b24ad13a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3186 identity=15995 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=bf58333b-8741-4d75-9182-a03557814bfd,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=bf58333b-8741-4d75-9182-a03557814bfd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/placement-ks-service-5hf2b oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=93b24ad13a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3186 identity=15995 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/placement-ks-service-5hf2b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=93b24ad13a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3186 identity=15995 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/placement-ks-service-5hf2b subsys=endpoint level=info msg="Successful endpoint creation" containerID=93b24ad13a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3186 identity=15995 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/placement-ks-service-5hf2b subsys=daemon level=info msg="Delete endpoint request" containerID=93b24ad13a endpointID=3186 k8sNamespace=openstack k8sPodName=placement-ks-service-5hf2b subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=bf58333b-8741-4d75-9182-a03557814bfd k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=bf58333b-8741-4d75-9182-a03557814bfd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=93b24ad13a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3186 identity=15995 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/placement-ks-service-5hf2b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 791ae7b1-a48a-47a2-aa26-95ba318f70d0 default }" containerID=b2fd1733e29321df7d220066c0ecfb065609a238396743fe70a8bc9470fd4810 datapathConfiguration="&{false false false false false }" interface=lxca945cc0c277f k8sPodName=openstack/placement-ks-user-s2ns8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b2fd1733e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/placement-ks-user-s2ns8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b2fd1733e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=23878e87-0030-44eb-84d1-0417bd9c4b68,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=23878e87-0030-44eb-84d1-0417bd9c4b68,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/placement-ks-user-s2ns8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b2fd1733e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.10 ipv6= k8sPodName=openstack/placement-ks-user-s2ns8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=23878e87-0030-44eb-84d1-0417bd9c4b68;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=23878e87-0030-44eb-84d1-0417bd9c4b68;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b2fd1733e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 identity=5165 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=23878e87-0030-44eb-84d1-0417bd9c4b68,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=23878e87-0030-44eb-84d1-0417bd9c4b68,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/placement-ks-user-s2ns8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b2fd1733e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 identity=5165 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/placement-ks-user-s2ns8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b2fd1733e2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=958 identity=5165 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/placement-ks-user-s2ns8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b2fd1733e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=958 identity=5165 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/placement-ks-user-s2ns8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b2fd1733e2 endpointID=958 k8sNamespace=openstack k8sPodName=placement-ks-user-s2ns8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=23878e87-0030-44eb-84d1-0417bd9c4b68 k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=23878e87-0030-44eb-84d1-0417bd9c4b68 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=b2fd1733e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=958 identity=5165 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/placement-ks-user-s2ns8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 8dd4e845-950e-4884-acba-f24ec454d300 default }" containerID=dc337511a99dbf4439b07a8df233183b02c9ad0dd04f89a73bcfef19b1cd9d39 datapathConfiguration="&{false false false false false }" interface=lxceec68efacb3b k8sPodName=openstack/placement-ks-endpoints-wqmhr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc337511a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2476 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/placement-ks-endpoints-wqmhr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc337511a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2476 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=607ff3e5-f6ce-49ac-b226-90d88cf2ac27,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=607ff3e5-f6ce-49ac-b226-90d88cf2ac27,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/placement-ks-endpoints-wqmhr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=607ff3e5-f6ce-49ac-b226-90d88cf2ac27;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=607ff3e5-f6ce-49ac-b226-90d88cf2ac27;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc337511a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2476 identity=10405 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=607ff3e5-f6ce-49ac-b226-90d88cf2ac27,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=607ff3e5-f6ce-49ac-b226-90d88cf2ac27,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/placement-ks-endpoints-wqmhr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=dc337511a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2476 identity=10405 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/placement-ks-endpoints-wqmhr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dc337511a9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2476 identity=10405 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/placement-ks-endpoints-wqmhr subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc337511a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2476 identity=10405 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/placement-ks-endpoints-wqmhr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dc337511a9 endpointID=2476 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-wqmhr subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=607ff3e5-f6ce-49ac-b226-90d88cf2ac27 k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=607ff3e5-f6ce-49ac-b226-90d88cf2ac27 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=dc337511a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2476 identity=10405 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/placement-ks-endpoints-wqmhr subsys=endpoint