level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.451237ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="73.902µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.250792ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="11.072µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=95.083043ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="11.921µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="14.76µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="54.383µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="58.341µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="68.521µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="437.81µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.45µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.220081ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.504958ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="36.521µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="35.111µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="211.095µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="83.813µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="103.862µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=46.942161ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="89.113µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="9.94µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="5.42µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.169.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.389114ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="14.65µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.509834ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="9.42µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.899534ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="2.88µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.82µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.32µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="5.11µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="19.35µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="32.561µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="14.13µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="161.664µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="367.38µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.38µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="12.151µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="198.915µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="607.516µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=5.335278ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="6.55µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="23.421µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.169 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.169 ipAddr.ipv6="" k8sNodeIP=199.204.45.169 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.169" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.3" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.169" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.169} {CiliumInternalIP 10.0.0.3}] 10.0.0.0/24 [] [] 10.0.0.242 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:37555" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.862605533s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="21.491µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="10µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="84.712µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="51.231µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2082 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2082 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2082 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.837723827s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.105 4438cd1a-8866-4eab-9d47-9493c7eeee48 default }" containerID=2c3a39da7052fbc7fa6b57a0dfb547c7449f9caaac432cb97d9884f0f45e5b8e datapathConfiguration="&{false false false false false }" interface=lxc2a0aaaacbf3d k8sPodName=kube-system/coredns-7c96b6546b-kjt54 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c3a39da70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2332 ipv4=10.0.0.105 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-kjt54 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c3a39da70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2332 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.105 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-kjt54 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=2c3a39da70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2332 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.105 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-kjt54 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2c3a39da70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2332 identity=23514 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.105 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-kjt54 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c3a39da70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2332 identity=23514 ipv4=10.0.0.105 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-kjt54 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 d1845e3f-b930-4019-90a5-e2de31aedabd default }" containerID=10c18d4a72b37ccf5c6897b0fa0e289a26d603b28e5cf12d8c009088d979609f datapathConfiguration="&{false false false false false }" interface=lxc97781ec98e75 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-r9x5s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=10c18d4a72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=326 ipv4=10.0.0.77 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-r9x5s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=10c18d4a72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=326 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=c63610fb-0018-42c5-865c-3e3a11ca102e,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=c63610fb-0018-42c5-865c-3e3a11ca102e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.77 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-r9x5s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=c63610fb-0018-42c5-865c-3e3a11ca102e;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=c63610fb-0018-42c5-865c-3e3a11ca102e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=10c18d4a72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=326 identity=25212 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=c63610fb-0018-42c5-865c-3e3a11ca102e,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=c63610fb-0018-42c5-865c-3e3a11ca102e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.77 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-r9x5s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=10c18d4a72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=326 identity=25212 ipv4=10.0.0.77 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-r9x5s subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=304.349843ms file-path=/var/run/cilium/state/templates/04fd8d8a7bccbabc1f4c280704dda939d5cbd175f8d93dcd78ac7fed7fb6e3bb/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2082 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1548 ipv4=10.0.0.242 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1548 identityLabels="reserved:health" ipv4=10.0.0.242 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1548 identity=4 identityLabels="reserved:health" ipv4=10.0.0.242 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.068311809s file-path=/var/run/cilium/state/templates/09d9c7e6fc47443bc52a8e357187b3e59df3b1d010328c302a626e0cda1974de/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=2c3a39da70 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2332 identity=23514 ipv4=10.0.0.105 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-kjt54 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c3a39da70 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2332 identity=23514 ipv4=10.0.0.105 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-kjt54 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1548 identity=4 ipv4=10.0.0.242 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=10c18d4a72 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=326 identity=25212 ipv4=10.0.0.77 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-r9x5s subsys=endpoint level=info msg="Successful endpoint creation" containerID=10c18d4a72 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=326 identity=25212 ipv4=10.0.0.77 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-r9x5s subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=10c18d4a72 endpointID=326 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-r9x5s subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=c63610fb-0018-42c5-865c-3e3a11ca102e k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=c63610fb-0018-42c5-865c-3e3a11ca102e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=10c18d4a72 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=326 identity=25212 ipv4=10.0.0.77 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-r9x5s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 68b30f71-ab8b-4b3e-82fc-37806774f788 default }" containerID=429c8d9f14e2db34cc5637a25e349f6c9f144959c7a2e5bde224f576835de986 datapathConfiguration="&{false false false false false }" interface=lxc656c2fce3360 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-m8kll labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=429c8d9f14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=63 ipv4=10.0.0.67 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-m8kll subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=429c8d9f14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=63 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.67 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-m8kll subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=429c8d9f14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=63 identity=2765 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.67 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-m8kll oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=429c8d9f14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=63 identity=2765 ipv4=10.0.0.67 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-m8kll subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=429c8d9f14 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=63 identity=2765 ipv4=10.0.0.67 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-m8kll subsys=endpoint level=info msg="Successful endpoint creation" containerID=429c8d9f14 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=63 identity=2765 ipv4=10.0.0.67 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-m8kll subsys=daemon level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2082 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02082 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02082 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02082 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02082:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2082 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 3b230a39-e68e-4105-b769-37a112d9a1ad default }" containerID=49f2c2adff69a1b9b7f9497db16721ac8525365bbde7e3f123ff7fcf400ce655 datapathConfiguration="&{false false false false false }" interface=lxce854114ec7f4 k8sPodName=kube-system/coredns-67659f764b-xmsds labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=49f2c2adff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1203 ipv4=10.0.0.66 ipv6= k8sPodName=kube-system/coredns-67659f764b-xmsds subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=49f2c2adff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1203 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.66 ipv6= k8sPodName=kube-system/coredns-67659f764b-xmsds subsys=endpoint level=info msg="Identity of endpoint changed" containerID=49f2c2adff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1203 identity=23514 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.66 ipv6= k8sPodName=kube-system/coredns-67659f764b-xmsds oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=49f2c2adff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1203 identity=23514 ipv4=10.0.0.66 ipv6= k8sPodName=kube-system/coredns-67659f764b-xmsds subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.23 d5b3cbfb-6499-4e29-bb30-edfbe8e538b9 default }" containerID=ffce953c57d59c98d9774d83071e483381d78d80cbf420f1a73f7ce237a55680 datapathConfiguration="&{false false false false false }" interface=lxc453bdd1eeae2 k8sPodName=kube-system/coredns-67659f764b-9t59d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ffce953c57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 ipv4=10.0.0.23 ipv6= k8sPodName=kube-system/coredns-67659f764b-9t59d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ffce953c57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.23 ipv6= k8sPodName=kube-system/coredns-67659f764b-9t59d subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ffce953c57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 identity=23514 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.23 ipv6= k8sPodName=kube-system/coredns-67659f764b-9t59d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ffce953c57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 identity=23514 ipv4=10.0.0.23 ipv6= k8sPodName=kube-system/coredns-67659f764b-9t59d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=49f2c2adff datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1203 identity=23514 ipv4=10.0.0.66 ipv6= k8sPodName=kube-system/coredns-67659f764b-xmsds subsys=endpoint level=info msg="Successful endpoint creation" containerID=49f2c2adff datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1203 identity=23514 ipv4=10.0.0.66 ipv6= k8sPodName=kube-system/coredns-67659f764b-xmsds subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ffce953c57 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=339 identity=23514 ipv4=10.0.0.23 ipv6= k8sPodName=kube-system/coredns-67659f764b-9t59d subsys=endpoint level=info msg="Successful endpoint creation" containerID=ffce953c57 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=339 identity=23514 ipv4=10.0.0.23 ipv6= k8sPodName=kube-system/coredns-67659f764b-9t59d subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.133 5db743fa-8233-4f7f-b22b-1b57fade7579 default }" containerID=36331a8a0d0a0cf210f501f9cbc4df2013c89a71c4488e48f749e4f174a1ef09 datapathConfiguration="&{false false false false false }" interface=lxc055bc306347b k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z7rcw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=36331a8a0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=432 ipv4=10.0.0.133 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z7rcw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36331a8a0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=432 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.133 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z7rcw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=36331a8a0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=432 identity=46587 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.133 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z7rcw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=36331a8a0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=432 identity=46587 ipv4=10.0.0.133 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z7rcw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=36331a8a0d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=432 identity=46587 ipv4=10.0.0.133 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z7rcw subsys=endpoint level=info msg="Successful endpoint creation" containerID=36331a8a0d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=432 identity=46587 ipv4=10.0.0.133 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z7rcw subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2c3a39da70 endpointID=2332 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-kjt54 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=2c3a39da70 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2332 identity=23514 ipv4=10.0.0.105 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-kjt54 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 48ab7443-4f85-4c1d-821c-48d304610087 default }" containerID=c5844b3af9987c4e3fe99bbed435effaa8b823f691cc0bf39acb69def380de93 datapathConfiguration="&{false false false false false }" interface=lxc2c7516fc86d5 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bhvl9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c5844b3af9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bhvl9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c5844b3af9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bhvl9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.47 433f629f-72e8-4cf9-a511-a5a404da6ac5 default }" containerID=b8b18460e37234242ae750b1ac790b2969285eee2fb7cdc84c7d75688e1a0695 datapathConfiguration="&{false false false false false }" interface=lxc801d23ffa4f6 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9lhj2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8b18460e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9lhj2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8b18460e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9lhj2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.168 8b08252d-b59a-4648-a354-aa156498d7fa default }" containerID=b22049dabf5df9e22b9780e501f3896053536121aff2eeada398a94125ac0236 datapathConfiguration="&{false false false false false }" interface=lxc0c0dc2f93798 k8sPodName=cert-manager/cert-manager-75c4c745bc-8rfb5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b22049dabf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3243 ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8rfb5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b22049dabf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3243 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8rfb5 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c5844b3af9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 identity=12692 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bhvl9 oldIdentity="no identity" subsys=endpoint level=info msg="Invalid state transition skipped" containerID=b22049dabf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3243 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8rfb5 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=b8b18460e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9lhj2 line=611 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c5844b3af9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 identity=12692 ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bhvl9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8b18460e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 identity=17968 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9lhj2 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=b8b18460e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 identity=17968 ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9lhj2 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b22049dabf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3243 identity=39788 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8rfb5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b22049dabf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3243 identity=39788 ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8rfb5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c5844b3af9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2417 identity=12692 ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bhvl9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c5844b3af9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2417 identity=12692 ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bhvl9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b8b18460e3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=934 identity=17968 ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9lhj2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8b18460e3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=934 identity=17968 ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9lhj2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b22049dabf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3243 identity=39788 ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8rfb5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b22049dabf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3243 identity=39788 ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8rfb5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.111 284defed-82b0-4dee-8b99-ca43584d8194 default }" containerID=418c557e7935b18c3480c4bddf3a5e2a1d3df489fefc3b5d91aa32ce1dd5fae8 datapathConfiguration="&{false false false false false }" interface=lxc81edf2a2af25 k8sPodName=cert-manager/cert-manager-startupapicheck-9bwtn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=418c557e79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2980 ipv4=10.0.0.111 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9bwtn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=418c557e79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2980 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=4a278566-b0e1-4efd-8f4a-ae96a6220477,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=4a278566-b0e1-4efd-8f4a-ae96a6220477,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.111 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9bwtn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=4a278566-b0e1-4efd-8f4a-ae96a6220477;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=4a278566-b0e1-4efd-8f4a-ae96a6220477;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=418c557e79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2980 identity=57710 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=4a278566-b0e1-4efd-8f4a-ae96a6220477,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=4a278566-b0e1-4efd-8f4a-ae96a6220477,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.111 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9bwtn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=418c557e79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2980 identity=57710 ipv4=10.0.0.111 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9bwtn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=418c557e79 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2980 identity=57710 ipv4=10.0.0.111 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9bwtn subsys=endpoint level=info msg="Successful endpoint creation" containerID=418c557e79 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2980 identity=57710 ipv4=10.0.0.111 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9bwtn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=418c557e79 endpointID=2980 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-9bwtn subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=4a278566-b0e1-4efd-8f4a-ae96a6220477 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=4a278566-b0e1-4efd-8f4a-ae96a6220477 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=418c557e79 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2980 identity=57710 ipv4=10.0.0.111 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9bwtn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 af23af93-b0f5-49dc-98cf-2d78cc599e11 default }" containerID=334712277d2b8939bae9c1af44c7d22dad80309b670cbae0f948b9024bdaf6f0 datapathConfiguration="&{false false false false false }" interface=lxc865a653abcb4 k8sPodName=ingress-nginx/ingress-nginx-admission-create-c2cmp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=334712277d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 ipv4=10.0.0.7 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c2cmp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=334712277d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=1f9f3d38-90a9-4117-88be-08d34ae39cf0,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=1f9f3d38-90a9-4117-88be-08d34ae39cf0,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.7 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c2cmp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=1f9f3d38-90a9-4117-88be-08d34ae39cf0;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=1f9f3d38-90a9-4117-88be-08d34ae39cf0;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=334712277d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 identity=53510 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=1f9f3d38-90a9-4117-88be-08d34ae39cf0,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=1f9f3d38-90a9-4117-88be-08d34ae39cf0,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.7 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c2cmp oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=334712277d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=471 identity=53510 ipv4=10.0.0.7 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c2cmp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=334712277d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=471 identity=53510 ipv4=10.0.0.7 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c2cmp subsys=endpoint level=info msg="Successful endpoint creation" containerID=334712277d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=471 identity=53510 ipv4=10.0.0.7 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c2cmp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=334712277d endpointID=471 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-c2cmp subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=1f9f3d38-90a9-4117-88be-08d34ae39cf0 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=1f9f3d38-90a9-4117-88be-08d34ae39cf0 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=334712277d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=471 identity=53510 ipv4=10.0.0.7 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c2cmp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 84a73867-0e39-4875-ba98-ed923c98cb2d default }" containerID=f0f9c2457eaf3ea34f23a8db9ca9dff81ccfffca38ac8c05ea5d9b444f5662eb datapathConfiguration="&{false false false false false }" interface=lxc21c5ff2465e6 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-l6gmg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f0f9c2457e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=199 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-l6gmg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f0f9c2457e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=199 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-l6gmg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f0f9c2457e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=199 identity=41655 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-l6gmg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f0f9c2457e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=199 identity=41655 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-l6gmg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f0f9c2457e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=199 identity=41655 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-l6gmg subsys=endpoint level=info msg="Successful endpoint creation" containerID=f0f9c2457e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=199 identity=41655 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-l6gmg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.34 7fd5e385-47a8-4ce3-8dd2-14fd94207ac8 default }" containerID=ae32af9a59ba5d9a738207b6da355d37a608fbb9520a46670842d19e698da04e datapathConfiguration="&{false false false false false }" interface=lxc11afc4603c88 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-84snd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae32af9a59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=831 ipv4=10.0.0.34 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-84snd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae32af9a59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=831 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=ce33c990-3225-4185-959f-74f4869bb83f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=ce33c990-3225-4185-959f-74f4869bb83f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.34 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-84snd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=ce33c990-3225-4185-959f-74f4869bb83f;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=ce33c990-3225-4185-959f-74f4869bb83f;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae32af9a59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=831 identity=6177 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=ce33c990-3225-4185-959f-74f4869bb83f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=ce33c990-3225-4185-959f-74f4869bb83f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.34 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-84snd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae32af9a59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=831 identity=6177 ipv4=10.0.0.34 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-84snd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ae32af9a59 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=831 identity=6177 ipv4=10.0.0.34 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-84snd subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae32af9a59 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=831 identity=6177 ipv4=10.0.0.34 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-84snd subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ae32af9a59 endpointID=831 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-84snd subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=ce33c990-3225-4185-959f-74f4869bb83f k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=ce33c990-3225-4185-959f-74f4869bb83f k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=ae32af9a59 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=831 identity=6177 ipv4=10.0.0.34 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-84snd subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=589f7792-be68-4563-8c6a-7df019649dc9] Description:}]" policyAddRequest=3585ec9b-c1dd-48a2-88b9-34d2ae675544 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=3585ec9b-c1dd-48a2-88b9-34d2ae675544 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=ecf73b08-33b5-42eb-b52b-60f325ae92bb] Description:}]" policyAddRequest=ea458207-83f8-408c-a9db-dc5432f45dd1 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=ea458207-83f8-408c-a9db-dc5432f45dd1 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.14 8d989011-7a20-41ac-be07-9ea97924e506 default }" containerID=c3047f67552904933f692da8c59aa41500f6d67b5912ece340fbc366a263fd7e datapathConfiguration="&{false false false false false }" interface=lxca8cbffbfeafe k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bmww6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c3047f6755 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=942 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bmww6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c3047f6755 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=942 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bmww6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c3047f6755 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=942 identity=11049 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bmww6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c3047f6755 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=942 identity=11049 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bmww6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c3047f6755 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=942 identity=11049 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bmww6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3047f6755 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=942 identity=11049 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bmww6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.163 482d6ab8-f7c5-4a85-abaf-74673ac27fb6 default }" containerID=a9f29a29bc3ea872395d5fe02f0fa0f2f067b64eb1645712e727ff19339aafec datapathConfiguration="&{false false false false false }" interface=lxcdcbb419805e3 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-c4fxp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a9f29a29bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1691 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-c4fxp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a9f29a29bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1691 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-c4fxp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a9f29a29bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1691 identity=48695 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-c4fxp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a9f29a29bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1691 identity=48695 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-c4fxp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a9f29a29bc datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1691 identity=48695 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-c4fxp subsys=endpoint level=info msg="Successful endpoint creation" containerID=a9f29a29bc datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1691 identity=48695 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-c4fxp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.243 ce00d6b3-b4a7-41a5-9a19-09219d94368c default }" containerID=4b8db6aeec2747577ea996174d8c5d0cc65a7dbbac6eddbb2b542b8739f82853 datapathConfiguration="&{false false false false false }" interface=lxc52610bf5610b k8sPodName=openstack/pxc-operator-69cb5bbdb9-jvwb6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b8db6aeec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3739 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-jvwb6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4b8db6aeec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3739 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-jvwb6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4b8db6aeec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3739 identity=12648 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-jvwb6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4b8db6aeec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3739 identity=12648 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-jvwb6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4b8db6aeec datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3739 identity=12648 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-jvwb6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b8db6aeec datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3739 identity=12648 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-jvwb6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.186 2d7025cd-e96a-49f6-a029-53062cda2e1c default }" containerID=1685078c3e32c8be19e2f64a5df8f1cf71223a83be914e21f7976c2b7348d5db datapathConfiguration="&{false false false false false }" interface=lxcd16c2aa90c8e k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1685078c3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1685078c3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1685078c3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.186 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1685078c3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 identity=40295 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1685078c3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 identity=40295 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1685078c3e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=120 identity=40295 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1685078c3e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=120 identity=40295 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.85 f2673ba4-ee22-4d80-9301-75e68dfbf25c default }" containerID=65d8ecdaa51b1759d4ae84dabcc08a151425671299d74abd177de759ee1890d1 datapathConfiguration="&{false false false false false }" interface=lxc5db5d0f0e8f4 k8sPodName=local-path-storage/helper-pod-create-pvc-4fa2a7c0-983c-48c3-b925-08bc8a811b05 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65d8ecdaa5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3642 ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4fa2a7c0-983c-48c3-b925-08bc8a811b05 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65d8ecdaa5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3642 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4fa2a7c0-983c-48c3-b925-08bc8a811b05 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=65d8ecdaa5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3642 identity=1424 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4fa2a7c0-983c-48c3-b925-08bc8a811b05 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=65d8ecdaa5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3642 identity=1424 ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4fa2a7c0-983c-48c3-b925-08bc8a811b05 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=65d8ecdaa5 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3642 identity=1424 ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4fa2a7c0-983c-48c3-b925-08bc8a811b05 subsys=endpoint level=info msg="Successful endpoint creation" containerID=65d8ecdaa5 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3642 identity=1424 ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4fa2a7c0-983c-48c3-b925-08bc8a811b05 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=65d8ecdaa5 endpointID=3642 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4fa2a7c0-983c-48c3-b925-08bc8a811b05 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=65d8ecdaa5 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3642 identity=1424 ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4fa2a7c0-983c-48c3-b925-08bc8a811b05 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 257e240d-0b78-4664-8364-4f97f3fa4f99 default }" containerID=437a6977bff0166d86d744bde9ec77016cc9d932fadad9955b768c2d138dc4f9 datapathConfiguration="&{false false false false false }" interface=lxc65d1bbeb750b k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=437a6977bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3568 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=437a6977bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3568 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=437a6977bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3568 identity=14278 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=437a6977bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3568 identity=14278 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=437a6977bf datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3568 identity=14278 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=437a6977bf datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3568 identity=14278 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=8cf15480-2667-4004-9671-25161b590a7e] Description:}]" policyAddRequest=cfd85f19-bd7e-48ff-8b2c-345c41bc8b57 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=cfd85f19-bd7e-48ff-8b2c-345c41bc8b57 policyRevision=4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.109 95b4a537-8073-4cc4-8db6-bd949cf52047 default }" containerID=f5e478255785012bcba0ca3f5d2482027d83c09dd9eb684fc9b90773dd4f7b72 datapathConfiguration="&{false false false false false }" interface=lxc03c9f47d2335 k8sPodName=local-path-storage/helper-pod-create-pvc-74123087-3571-44da-88b0-ddc551cdb51b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5e4782557 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=950 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-74123087-3571-44da-88b0-ddc551cdb51b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5e4782557 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=950 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-74123087-3571-44da-88b0-ddc551cdb51b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f5e4782557 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=950 identity=1424 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-74123087-3571-44da-88b0-ddc551cdb51b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f5e4782557 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=950 identity=1424 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-74123087-3571-44da-88b0-ddc551cdb51b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f5e4782557 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=950 identity=1424 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-74123087-3571-44da-88b0-ddc551cdb51b subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5e4782557 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=950 identity=1424 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-74123087-3571-44da-88b0-ddc551cdb51b subsys=daemon level=info msg="Delete endpoint request" containerID=f5e4782557 endpointID=950 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-74123087-3571-44da-88b0-ddc551cdb51b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f5e4782557 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=950 identity=1424 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-74123087-3571-44da-88b0-ddc551cdb51b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 b71c3f95-4930-4e54-89ca-e288c8defe67 default }" containerID=6efb03c6be3b5010b9edaae6c098f373ce818e557834a8544d2b5a3c06070619 datapathConfiguration="&{false false false false false }" interface=lxccd10ee790daf k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6efb03c6be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2381 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6efb03c6be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2381 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=6efb03c6be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2381 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.114 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6efb03c6be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2381 identity=25785 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6efb03c6be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2381 identity=25785 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6efb03c6be datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2381 identity=25785 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6efb03c6be datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2381 identity=25785 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=a9c036c8-98bb-4d6e-9434-cb368ff08128] Description:}]" policyAddRequest=93555365-da03-4b2e-b935-3fc47999e960 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=93555365-da03-4b2e-b935-3fc47999e960 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.241 7ba7990b-d277-49c0-9c83-b0e4b16980ce default }" containerID=a37e7339a9eea40ddabaf07c2e730a640e28e48e2538dfbcd20b4253762aa344 datapathConfiguration="&{false false false false false }" interface=lxc8a84b93d53a4 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a37e7339a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=747 ipv4=10.0.0.241 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a37e7339a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=747 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.241 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a37e7339a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=747 identity=26536 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.241 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a37e7339a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=747 identity=26536 ipv4=10.0.0.241 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a37e7339a9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=747 identity=26536 ipv4=10.0.0.241 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a37e7339a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=747 identity=26536 ipv4=10.0.0.241 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.008822892853761142 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.205 2a45f83a-f3d2-4d46-85bc-8344fde3a4a6 default }" containerID=4b12eb6dbe3fe249cd41c8a15bc51b4efe458796133803eb3df2b056f921599f datapathConfiguration="&{false false false false false }" interface=lxc477e420d924b k8sPodName=monitoring/node-feature-discovery-worker-qjlhd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b12eb6dbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2048 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qjlhd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4b12eb6dbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2048 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qjlhd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4b12eb6dbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2048 identity=27157 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qjlhd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4b12eb6dbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2048 identity=27157 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qjlhd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.113 8b00bb26-0a5e-4693-ac68-feb528505a97 default }" containerID=a163f1071ef74d2789e4920dbd5e52a897c361cc1aa1d8467a2f9766e66d5af7 datapathConfiguration="&{false false false false false }" interface=lxc982263611903 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-p27l9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a163f1071e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3791 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-p27l9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a163f1071e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3791 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-p27l9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a163f1071e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3791 identity=64437 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-p27l9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a163f1071e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3791 identity=64437 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-p27l9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4b12eb6dbe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2048 identity=27157 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qjlhd subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b12eb6dbe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2048 identity=27157 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qjlhd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.180 42bea006-2b67-4f53-9cb5-b15a4ee1b17e default }" containerID=8433cfa5055812e317e0d41aeae63e5f9c8bc324e2e21d4aceb8a9dda0919f3d datapathConfiguration="&{false false false false false }" interface=lxc70d3f66ce9da k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cd92g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8433cfa505 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=213 ipv4=10.0.0.180 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cd92g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8433cfa505 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=213 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.180 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cd92g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8433cfa505 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=213 identity=60246 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.180 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cd92g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8433cfa505 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=213 identity=60246 ipv4=10.0.0.180 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cd92g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a163f1071e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3791 identity=64437 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-p27l9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a163f1071e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3791 identity=64437 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-p27l9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8433cfa505 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=213 identity=60246 ipv4=10.0.0.180 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cd92g subsys=endpoint level=info msg="Successful endpoint creation" containerID=8433cfa505 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=213 identity=60246 ipv4=10.0.0.180 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cd92g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.36 b2b1b3e1-4df6-4816-9384-c65de8bc4cf9 default }" containerID=7574312f9dc19bc459a961f2c771d60b16a574231fe090daeca412889a472769 datapathConfiguration="&{false false false false false }" interface=lxccd4a41ba2e54 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qbbdt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7574312f9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3376 ipv4=10.0.0.36 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qbbdt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7574312f9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3376 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.36 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qbbdt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7574312f9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3376 identity=61097 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.36 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qbbdt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7574312f9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3376 identity=61097 ipv4=10.0.0.36 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qbbdt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7574312f9d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3376 identity=61097 ipv4=10.0.0.36 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qbbdt subsys=endpoint level=info msg="Successful endpoint creation" containerID=7574312f9d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3376 identity=61097 ipv4=10.0.0.36 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qbbdt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2082 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-179-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02082 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02082 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02082 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02082:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2082 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 d19688a6-e941-401b-9b14-82e3a39662c1 default }" containerID=f8cf17ce84788b962cd8f66139de30c587ba2498574c727c09f818a9cbedf467 datapathConfiguration="&{false false false false false }" interface=lxcd3a93bbc0a04 k8sPodName=monitoring/kube-prometheus-stack-admission-create-lwcbg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f8cf17ce84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lwcbg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f8cf17ce84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=bb461dfc-9530-4379-85af-9a9964f0d834,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=bb461dfc-9530-4379-85af-9a9964f0d834,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lwcbg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=bb461dfc-9530-4379-85af-9a9964f0d834;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=bb461dfc-9530-4379-85af-9a9964f0d834;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f8cf17ce84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 identity=45058 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=bb461dfc-9530-4379-85af-9a9964f0d834,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=bb461dfc-9530-4379-85af-9a9964f0d834,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lwcbg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f8cf17ce84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 identity=45058 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lwcbg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f8cf17ce84 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2482 identity=45058 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lwcbg subsys=endpoint level=info msg="Successful endpoint creation" containerID=f8cf17ce84 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2482 identity=45058 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lwcbg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f8cf17ce84 endpointID=2482 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-lwcbg subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=bb461dfc-9530-4379-85af-9a9964f0d834 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=bb461dfc-9530-4379-85af-9a9964f0d834 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=f8cf17ce84 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2482 identity=45058 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lwcbg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 9ecf36a0-7e00-48f9-acdc-611df1df41b6 default }" containerID=c7d3b279d3dc20baef8e90422a4cf40bff8f2fad2590824e96887428c1fa7369 datapathConfiguration="&{false false false false false }" interface=lxc015b39c130df k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pbw6k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7d3b279d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3970 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pbw6k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7d3b279d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3970 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pbw6k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 944786b3-4031-4bda-b97b-4ae71379ebd2 default }" containerID=92cc890c8ac9cd05a18d757d6a22889493facbb20a95e430a2a82216e2ec658e datapathConfiguration="&{false false false false false }" interface=lxcf6be9a0ad30c k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-t5dvm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=92cc890c8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-t5dvm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=92cc890c8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-t5dvm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=92cc890c8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-t5dvm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7d3b279d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3970 identity=6744 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pbw6k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7d3b279d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3970 identity=6744 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pbw6k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=92cc890c8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 identity=19422 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-t5dvm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=92cc890c8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 identity=19422 ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-t5dvm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 6c12dc29-f4fd-4f07-bcc1-d38a2cb6926e default }" containerID=25e55898d105fa3acb60a0ea867581257d1720f5d6d2f9ffcf9e4136c417e72d datapathConfiguration="&{false false false false false }" interface=lxc2d785de654ea k8sPodName=monitoring/kube-prometheus-stack-grafana-599d67f8f9-89hqr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=25e55898d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3966 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-599d67f8f9-89hqr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=25e55898d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3966 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-599d67f8f9-89hqr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=25e55898d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3966 identity=13153 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-599d67f8f9-89hqr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=25e55898d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3966 identity=13153 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-599d67f8f9-89hqr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c7d3b279d3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3970 identity=6744 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pbw6k subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7d3b279d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3970 identity=6744 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pbw6k subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=92cc890c8a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=89 identity=19422 ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-t5dvm subsys=endpoint level=info msg="Successful endpoint creation" containerID=92cc890c8a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=89 identity=19422 ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-t5dvm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=25e55898d1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3966 identity=13153 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-599d67f8f9-89hqr subsys=endpoint level=info msg="Successful endpoint creation" containerID=25e55898d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3966 identity=13153 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-599d67f8f9-89hqr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.169 090e2398-8d68-48d6-8c9c-d0cdba884add default }" containerID=6725860fec350955f28657025348537f239fe32fce2a9c63710b80cbb17b700c datapathConfiguration="&{false false false false false }" interface=lxcbae75f7bd205 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zqn52 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6725860fec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=58 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zqn52 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6725860fec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=58 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=0780f670-dcd2-47ee-b881-82f73a6c5062,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=0780f670-dcd2-47ee-b881-82f73a6c5062,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zqn52 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=0780f670-dcd2-47ee-b881-82f73a6c5062;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=0780f670-dcd2-47ee-b881-82f73a6c5062;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6725860fec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=58 identity=37123 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=0780f670-dcd2-47ee-b881-82f73a6c5062,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=0780f670-dcd2-47ee-b881-82f73a6c5062,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zqn52 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6725860fec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=58 identity=37123 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zqn52 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6725860fec datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=58 identity=37123 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zqn52 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6725860fec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=58 identity=37123 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zqn52 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.206 8992502c-b712-4d6e-9f63-b2bac12b7832 default }" containerID=79456b6c05bf3c87d5dd3a9c54593f54ad492c4c5ddc85d85c62b48998a13628 datapathConfiguration="&{false false false false false }" interface=lxc231959237f44 k8sPodName=local-path-storage/helper-pod-create-pvc-ac5a6409-fee4-4fb1-be14-fac07457a9c0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79456b6c05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3750 ipv4=10.0.0.206 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ac5a6409-fee4-4fb1-be14-fac07457a9c0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79456b6c05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3750 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.206 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ac5a6409-fee4-4fb1-be14-fac07457a9c0 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=79456b6c05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3750 identity=1424 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.206 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ac5a6409-fee4-4fb1-be14-fac07457a9c0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=79456b6c05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3750 identity=1424 ipv4=10.0.0.206 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ac5a6409-fee4-4fb1-be14-fac07457a9c0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=79456b6c05 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3750 identity=1424 ipv4=10.0.0.206 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ac5a6409-fee4-4fb1-be14-fac07457a9c0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=79456b6c05 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3750 identity=1424 ipv4=10.0.0.206 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ac5a6409-fee4-4fb1-be14-fac07457a9c0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.29 073dc1b8-996d-4871-8fd0-76829c9a11a6 default }" containerID=0aca83c953835743837c2b0d9c90dee604bfd131a3c8d65ab578b85d959f7544 datapathConfiguration="&{false false false false false }" interface=lxc41b8f3e046e8 k8sPodName=local-path-storage/helper-pod-create-pvc-a6e959a1-93d3-4a21-a44e-4091b20f7948 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0aca83c953 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=523 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a6e959a1-93d3-4a21-a44e-4091b20f7948 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0aca83c953 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=523 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a6e959a1-93d3-4a21-a44e-4091b20f7948 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0aca83c953 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=523 identity=1424 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a6e959a1-93d3-4a21-a44e-4091b20f7948 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0aca83c953 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=523 identity=1424 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a6e959a1-93d3-4a21-a44e-4091b20f7948 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0aca83c953 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=523 identity=1424 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a6e959a1-93d3-4a21-a44e-4091b20f7948 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0aca83c953 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=523 identity=1424 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a6e959a1-93d3-4a21-a44e-4091b20f7948 subsys=daemon level=info msg="Delete endpoint request" containerID=6725860fec endpointID=58 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-zqn52 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=0780f670-dcd2-47ee-b881-82f73a6c5062 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=0780f670-dcd2-47ee-b881-82f73a6c5062 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=6725860fec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=58 identity=37123 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zqn52 subsys=endpoint level=info msg="Delete endpoint request" containerID=0aca83c953 endpointID=523 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a6e959a1-93d3-4a21-a44e-4091b20f7948 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=79456b6c05 endpointID=3750 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ac5a6409-fee4-4fb1-be14-fac07457a9c0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=79456b6c05 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3750 identity=1424 ipv4=10.0.0.206 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ac5a6409-fee4-4fb1-be14-fac07457a9c0 subsys=endpoint level=info msg="Removed endpoint" containerID=0aca83c953 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=523 identity=1424 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a6e959a1-93d3-4a21-a44e-4091b20f7948 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 9efc19f2-33fc-4569-aa29-bca26ea17a8d default }" containerID=bd4b6f21b44a10586f481c27e6706f1e42d89f2d22f57510faebd27ddb0e0298 datapathConfiguration="&{false false false false false }" interface=lxcf21856b12479 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd4b6f21b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=796 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd4b6f21b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=796 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bd4b6f21b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=796 identity=2179 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd4b6f21b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=796 identity=2179 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bd4b6f21b4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=796 identity=2179 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd4b6f21b4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=796 identity=2179 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.78 5b01643f-44af-4ded-bd2d-32938d7a4fb0 default }" containerID=2f9157cf1d3a1c034738a5c04e97ee01d89746a51e7424b5e5b49f08e0130cde datapathConfiguration="&{false false false false false }" interface=lxc841229bdfc07 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2f9157cf1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1198 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2f9157cf1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1198 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2f9157cf1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1198 identity=56059 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2f9157cf1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1198 identity=56059 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2f9157cf1d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1198 identity=56059 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2f9157cf1d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1198 identity=56059 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.119 69cfef5e-2a98-4d67-90aa-68c70ba40bcc default }" containerID=497cbdf3f55b3b40bd63a6441978764afd5cd04bed9fa478d2c13ad1b018a3d1 datapathConfiguration="&{false false false false false }" interface=lxc758bcd6b641c k8sPodName=monitoring/loki-gateway-cf54cb88c-tq64m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=497cbdf3f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-tq64m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=497cbdf3f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-tq64m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=497cbdf3f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-tq64m line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=497cbdf3f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identity=42417 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-tq64m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=497cbdf3f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identity=42417 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-tq64m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.206 460b5ee2-f07f-4832-bd97-a85ff90e9084 default }" containerID=b1a8b80cf162d273e926a03b23940c8c1e3bc3998738c9cf757babc585d35b83 datapathConfiguration="&{false false false false false }" interface=lxcd97a0f53fb9d k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b1a8b80cf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1202 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b1a8b80cf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1202 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b1a8b80cf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1202 identity=37312 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b1a8b80cf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1202 identity=37312 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=497cbdf3f5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=537 identity=42417 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-tq64m subsys=endpoint level=info msg="Successful endpoint creation" containerID=497cbdf3f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=537 identity=42417 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-tq64m subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.254 e3f66f6e-40e4-44b4-9b44-6fb3b879a8df default }" containerID=054d86ea2db4ef41d925da1b5df4afdf112c50ab73714a3aca55449cd98987b0 datapathConfiguration="&{false false false false false }" interface=lxc2e11442ec763 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=054d86ea2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=054d86ea2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=054d86ea2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 identity=15110 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=054d86ea2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 identity=15110 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b1a8b80cf1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1202 identity=37312 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b1a8b80cf1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1202 identity=37312 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=054d86ea2d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=243 identity=15110 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=054d86ea2d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=243 identity=15110 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.134 d3da22a9-5b12-4204-b16f-2d1c43c4ef31 default }" containerID=ab4b9c3deba54edde8f99146958a86da454e7b6b57ba40cdd4071b831617b295 datapathConfiguration="&{false false false false false }" interface=lxc331e61ed6694 k8sPodName=local-path-storage/helper-pod-create-pvc-b6fe3120-653c-4561-b686-beac6c9587d2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ab4b9c3deb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1125 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6fe3120-653c-4561-b686-beac6c9587d2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab4b9c3deb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1125 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6fe3120-653c-4561-b686-beac6c9587d2 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ab4b9c3deb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1125 identity=1424 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6fe3120-653c-4561-b686-beac6c9587d2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ab4b9c3deb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1125 identity=1424 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6fe3120-653c-4561-b686-beac6c9587d2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ab4b9c3deb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1125 identity=1424 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6fe3120-653c-4561-b686-beac6c9587d2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab4b9c3deb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1125 identity=1424 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6fe3120-653c-4561-b686-beac6c9587d2 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.32 6b1533ec-a687-4391-beb7-db86c46d8b75 default }" containerID=4b888d184927312317b79af100e2192363a7ab28d72f05e09e9e2e698225d4a5 datapathConfiguration="&{false false false false false }" interface=lxcdbe3d252cf23 k8sPodName=monitoring/vector-5wvck labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b888d1849 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2270 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/vector-5wvck subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4b888d1849 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2270 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/vector-5wvck subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4b888d1849 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2270 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/vector-5wvck line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4b888d1849 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2270 identity=64987 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/vector-5wvck oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4b888d1849 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2270 identity=64987 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/vector-5wvck subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4b888d1849 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2270 identity=64987 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/vector-5wvck subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b888d1849 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2270 identity=64987 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/vector-5wvck subsys=daemon level=info msg="Delete endpoint request" containerID=ab4b9c3deb endpointID=1125 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b6fe3120-653c-4561-b686-beac6c9587d2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ab4b9c3deb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1125 identity=1424 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6fe3120-653c-4561-b686-beac6c9587d2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.58 c67dd8cc-1acc-4303-b131-bea55a569a4f default }" containerID=cf287e008d308ed04276f75fc2d28ddb2a839583e6e01c6828a5f6a60a7cf6ae datapathConfiguration="&{false false false false false }" interface=lxcb6508b7d05c9 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf287e008d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1578 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf287e008d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1578 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cf287e008d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1578 identity=23029 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=cf287e008d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1578 identity=23029 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cf287e008d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1578 identity=23029 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf287e008d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1578 identity=23029 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.159 e50b8d60-ee12-47a1-af04-d4b0680db943 default }" containerID=0b876fd272457002f11d2ecebda724134d09ade0c7d5709410a40ae94e2c5fc4 datapathConfiguration="&{false false false false false }" interface=lxc86ff64dc12e8 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-db5d5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b876fd272 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=262 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-db5d5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b876fd272 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=262 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-db5d5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b876fd272 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=262 identity=16778 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-db5d5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b876fd272 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=262 identity=16778 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-db5d5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0b876fd272 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=262 identity=16778 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-db5d5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b876fd272 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=262 identity=16778 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-db5d5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.48 ae79d9f1-6a89-4901-ae48-44b18ea40b65 default }" containerID=e0f69adfab226f9ddefbf65053a81ceb2de1b6c4728fb70ee164df5a6470260f datapathConfiguration="&{false false false false false }" interface=lxcd6c2f38134f7 k8sPodName=openstack/memcached-memcached-6479589586-789mn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e0f69adfab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=80 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-789mn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e0f69adfab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=80 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-789mn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e0f69adfab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=80 identity=26894 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-789mn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e0f69adfab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=80 identity=26894 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-789mn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e0f69adfab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=80 identity=26894 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-789mn subsys=endpoint level=info msg="Successful endpoint creation" containerID=e0f69adfab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=80 identity=26894 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-789mn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.214 fb87345f-ed5a-4914-875c-9721ce481f59 default }" containerID=ea8b6ff40129ba3378c17fef7a06d55745a0c4e976ccdf718412d9e5b30556d8 datapathConfiguration="&{false false false false false }" interface=lxcdfc8087a7766 k8sPodName=local-path-storage/helper-pod-create-pvc-ea0b9182-9971-4b53-9d44-d81a362083ba labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea8b6ff401 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2263 ipv4=10.0.0.214 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea0b9182-9971-4b53-9d44-d81a362083ba subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea8b6ff401 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2263 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.214 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea0b9182-9971-4b53-9d44-d81a362083ba subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea8b6ff401 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2263 identity=1424 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.214 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea0b9182-9971-4b53-9d44-d81a362083ba oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea8b6ff401 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2263 identity=1424 ipv4=10.0.0.214 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea0b9182-9971-4b53-9d44-d81a362083ba subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea8b6ff401 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2263 identity=1424 ipv4=10.0.0.214 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea0b9182-9971-4b53-9d44-d81a362083ba subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea8b6ff401 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2263 identity=1424 ipv4=10.0.0.214 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea0b9182-9971-4b53-9d44-d81a362083ba subsys=daemon level=info msg="Delete endpoint request" containerID=ea8b6ff401 endpointID=2263 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ea0b9182-9971-4b53-9d44-d81a362083ba subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ea8b6ff401 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2263 identity=1424 ipv4=10.0.0.214 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea0b9182-9971-4b53-9d44-d81a362083ba subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 4ec7dbc9-44f3-4c48-aaf8-624c950523b2 default }" containerID=caab8fadb1ef591f8b1ce35ca7edb89691c3fe40247f13b5585f10862cb295a8 datapathConfiguration="&{false false false false false }" interface=lxc4129eea35dd8 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=caab8fadb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=caab8fadb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=caab8fadb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=caab8fadb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 identity=37727 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=caab8fadb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 identity=37727 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=caab8fadb1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1604 identity=37727 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=caab8fadb1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1604 identity=37727 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.201 96bda128-fa33-4505-bd2b-73a0eaa6ff45 default }" containerID=c4f41d8585863b973852dc66f3314903cee2384c1ad0d868f0e9151915e509a3 datapathConfiguration="&{false false false false false }" interface=lxc992ed959d45b k8sPodName=openstack/keystone-api-795649f9bd-m9nws labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c4f41d8585 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-api-795649f9bd-m9nws subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c4f41d8585 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-api-795649f9bd-m9nws subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c4f41d8585 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identity=15053 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-api-795649f9bd-m9nws oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c4f41d8585 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identity=15053 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-api-795649f9bd-m9nws subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 7c433697-38e4-450d-9973-207e505ec857 default }" containerID=75c258adf6baf5fb561a5909bd64ce6a50bc970ef913c7922c081ebe56074b5c datapathConfiguration="&{false false false false false }" interface=lxcdc7db97804c9 k8sPodName=openstack/keystone-credential-setup-d2hlv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=75c258adf6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1077 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-credential-setup-d2hlv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=75c258adf6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1077 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c44c9dbf-d3cf-42ad-8959-d1e6b83f1ac7,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=c44c9dbf-d3cf-42ad-8959-d1e6b83f1ac7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-credential-setup-d2hlv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c44c9dbf-d3cf-42ad-8959-d1e6b83f1ac7;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=c44c9dbf-d3cf-42ad-8959-d1e6b83f1ac7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=75c258adf6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1077 identity=6520 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c44c9dbf-d3cf-42ad-8959-d1e6b83f1ac7,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=c44c9dbf-d3cf-42ad-8959-d1e6b83f1ac7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-credential-setup-d2hlv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=75c258adf6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1077 identity=6520 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-credential-setup-d2hlv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c4f41d8585 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=439 identity=15053 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-api-795649f9bd-m9nws subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4f41d8585 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=439 identity=15053 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-api-795649f9bd-m9nws subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=75c258adf6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1077 identity=6520 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-credential-setup-d2hlv subsys=endpoint level=info msg="Successful endpoint creation" containerID=75c258adf6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1077 identity=6520 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-credential-setup-d2hlv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=75c258adf6 endpointID=1077 k8sNamespace=openstack k8sPodName=keystone-credential-setup-d2hlv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c44c9dbf-d3cf-42ad-8959-d1e6b83f1ac7 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=c44c9dbf-d3cf-42ad-8959-d1e6b83f1ac7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=75c258adf6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1077 identity=6520 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-credential-setup-d2hlv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 d738baae-c7a5-45b3-8899-911cadc6af30 default }" containerID=89fef088269f36948cf172f1c0ca635de68df46e94dc4a34f5fb33741b152570 datapathConfiguration="&{false false false false false }" interface=lxce22ff99f62a6 k8sPodName=openstack/keystone-db-init-kw9kb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=89fef08826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=97 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-db-init-kw9kb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=89fef08826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=97 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ac96aaca-11ad-4ce6-8b4f-d25b6203e5ac,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=ac96aaca-11ad-4ce6-8b4f-d25b6203e5ac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-db-init-kw9kb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ac96aaca-11ad-4ce6-8b4f-d25b6203e5ac;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=ac96aaca-11ad-4ce6-8b4f-d25b6203e5ac;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=89fef08826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=97 identity=41993 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ac96aaca-11ad-4ce6-8b4f-d25b6203e5ac,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=ac96aaca-11ad-4ce6-8b4f-d25b6203e5ac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-db-init-kw9kb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=89fef08826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=97 identity=41993 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-db-init-kw9kb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=89fef08826 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=97 identity=41993 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-db-init-kw9kb subsys=endpoint level=info msg="Successful endpoint creation" containerID=89fef08826 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=97 identity=41993 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-db-init-kw9kb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=89fef08826 endpointID=97 k8sNamespace=openstack k8sPodName=keystone-db-init-kw9kb subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ac96aaca-11ad-4ce6-8b4f-d25b6203e5ac k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=ac96aaca-11ad-4ce6-8b4f-d25b6203e5ac k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=89fef08826 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=97 identity=41993 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-db-init-kw9kb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 f8739027-aedd-44cb-8300-6194f925854d default }" containerID=66ac4239a680f42fad41213de07aab0b56917ba8cee1653d5175da87a63475f3 datapathConfiguration="&{false false false false false }" interface=lxc810b10e06b11 k8sPodName=openstack/keystone-fernet-setup-8wwkz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=66ac4239a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=643 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-fernet-setup-8wwkz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=66ac4239a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=643 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ffafaaef-ff7b-44f3-a7cb-604a07cac719,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=ffafaaef-ff7b-44f3-a7cb-604a07cac719,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-fernet-setup-8wwkz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ffafaaef-ff7b-44f3-a7cb-604a07cac719;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=ffafaaef-ff7b-44f3-a7cb-604a07cac719;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=66ac4239a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=643 identity=55942 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ffafaaef-ff7b-44f3-a7cb-604a07cac719,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=ffafaaef-ff7b-44f3-a7cb-604a07cac719,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-fernet-setup-8wwkz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=66ac4239a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=643 identity=55942 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-fernet-setup-8wwkz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=66ac4239a6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=643 identity=55942 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-fernet-setup-8wwkz subsys=endpoint level=info msg="Successful endpoint creation" containerID=66ac4239a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=643 identity=55942 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-fernet-setup-8wwkz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=66ac4239a6 endpointID=643 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-8wwkz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ffafaaef-ff7b-44f3-a7cb-604a07cac719 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=ffafaaef-ff7b-44f3-a7cb-604a07cac719 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=66ac4239a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=643 identity=55942 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-fernet-setup-8wwkz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 7a88a219-96b6-46a7-bc1a-b8cc019dd3a3 default }" containerID=18b00e244667859ed2ec97fbc2079edd874c7a0046a913ec2ee8dc769485c715 datapathConfiguration="&{false false false false false }" interface=lxc47afbaf871e0 k8sPodName=openstack/keystone-db-sync-4885n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18b00e2446 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3236 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-db-sync-4885n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18b00e2446 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3236 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9df8eddf-e6ec-42ff-88bd-5c2bf76639d9,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=9df8eddf-e6ec-42ff-88bd-5c2bf76639d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-db-sync-4885n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=18b00e2446 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3236 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-db-sync-4885n line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9df8eddf-e6ec-42ff-88bd-5c2bf76639d9;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=9df8eddf-e6ec-42ff-88bd-5c2bf76639d9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=18b00e2446 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3236 identity=16581 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9df8eddf-e6ec-42ff-88bd-5c2bf76639d9,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=9df8eddf-e6ec-42ff-88bd-5c2bf76639d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-db-sync-4885n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=18b00e2446 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3236 identity=16581 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-db-sync-4885n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=18b00e2446 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3236 identity=16581 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-db-sync-4885n subsys=endpoint level=info msg="Successful endpoint creation" containerID=18b00e2446 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3236 identity=16581 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-db-sync-4885n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=18b00e2446 endpointID=3236 k8sNamespace=openstack k8sPodName=keystone-db-sync-4885n subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9df8eddf-e6ec-42ff-88bd-5c2bf76639d9 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=9df8eddf-e6ec-42ff-88bd-5c2bf76639d9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=18b00e2446 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3236 identity=16581 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-db-sync-4885n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 5552e479-eece-4b69-9fa8-f455b8560203 default }" containerID=e6f15b0d07172c17f2e765f13b01ec21828157bbdcfd6da011085bb96efe6ac0 datapathConfiguration="&{false false false false false }" interface=lxc6b7582cd8a32 k8sPodName=openstack/keystone-rabbit-init-xps84 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e6f15b0d07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2143 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-rabbit-init-xps84 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e6f15b0d07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2143 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f5109c56-bbab-44d5-91a3-9fe831f2d081,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f5109c56-bbab-44d5-91a3-9fe831f2d081,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-rabbit-init-xps84 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f5109c56-bbab-44d5-91a3-9fe831f2d081;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=f5109c56-bbab-44d5-91a3-9fe831f2d081;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e6f15b0d07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2143 identity=20748 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f5109c56-bbab-44d5-91a3-9fe831f2d081,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f5109c56-bbab-44d5-91a3-9fe831f2d081,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-rabbit-init-xps84 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e6f15b0d07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2143 identity=20748 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-rabbit-init-xps84 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e6f15b0d07 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2143 identity=20748 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-rabbit-init-xps84 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e6f15b0d07 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2143 identity=20748 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-rabbit-init-xps84 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e6f15b0d07 endpointID=2143 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-xps84 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f5109c56-bbab-44d5-91a3-9fe831f2d081 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=f5109c56-bbab-44d5-91a3-9fe831f2d081 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e6f15b0d07 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2143 identity=20748 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-rabbit-init-xps84 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 ed115a7a-dd29-4c91-b891-cbaac5775140 default }" containerID=89242d9c55f59fea516824f198c0f1c5f693391260e14575592842edb97110ca datapathConfiguration="&{false false false false false }" interface=lxcc9554fe7af9f k8sPodName=openstack/keystone-domain-manage-kqf2q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=89242d9c55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-domain-manage-kqf2q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=89242d9c55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2e80bdb0-3566-4364-90c7-31ec2235adfe,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=2e80bdb0-3566-4364-90c7-31ec2235adfe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-domain-manage-kqf2q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2e80bdb0-3566-4364-90c7-31ec2235adfe;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=2e80bdb0-3566-4364-90c7-31ec2235adfe;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=89242d9c55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 identity=63810 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2e80bdb0-3566-4364-90c7-31ec2235adfe,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=2e80bdb0-3566-4364-90c7-31ec2235adfe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-domain-manage-kqf2q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=89242d9c55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 identity=63810 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-domain-manage-kqf2q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=89242d9c55 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=256 identity=63810 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-domain-manage-kqf2q subsys=endpoint level=info msg="Successful endpoint creation" containerID=89242d9c55 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=256 identity=63810 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-domain-manage-kqf2q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=89242d9c55 endpointID=256 k8sNamespace=openstack k8sPodName=keystone-domain-manage-kqf2q subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2e80bdb0-3566-4364-90c7-31ec2235adfe k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=2e80bdb0-3566-4364-90c7-31ec2235adfe k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=89242d9c55 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=256 identity=63810 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-domain-manage-kqf2q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 25eb672b-ef64-404f-a22e-8668b839392e default }" containerID=fab649cabb0959781e7024788054f01129155048524d0a0d5f6e5aaa48b17fb8 datapathConfiguration="&{false false false false false }" interface=lxcd54df747d1ea k8sPodName=openstack/keystone-bootstrap-ljbx4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fab649cabb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=823 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-bootstrap-ljbx4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fab649cabb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=823 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=32b58c72-68de-41b1-93b8-a8d5d835678c,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=32b58c72-68de-41b1-93b8-a8d5d835678c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-bootstrap-ljbx4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=32b58c72-68de-41b1-93b8-a8d5d835678c;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=32b58c72-68de-41b1-93b8-a8d5d835678c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=fab649cabb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=823 identity=6476 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=32b58c72-68de-41b1-93b8-a8d5d835678c,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=32b58c72-68de-41b1-93b8-a8d5d835678c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-bootstrap-ljbx4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fab649cabb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=823 identity=6476 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-bootstrap-ljbx4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fab649cabb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=823 identity=6476 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-bootstrap-ljbx4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fab649cabb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=823 identity=6476 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-bootstrap-ljbx4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fab649cabb endpointID=823 k8sNamespace=openstack k8sPodName=keystone-bootstrap-ljbx4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=32b58c72-68de-41b1-93b8-a8d5d835678c k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=32b58c72-68de-41b1-93b8-a8d5d835678c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=fab649cabb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=823 identity=6476 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-bootstrap-ljbx4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 a81f8062-18ae-4468-8452-9a013240104b default }" containerID=247d9d9f18285f744c024c50e39456722397d6a085df66ebe3f342360377793c datapathConfiguration="&{false false false false false }" interface=lxceb4dbd00fda7 k8sPodName=local-path-storage/helper-pod-create-pvc-9538d8be-cb90-4e9d-b077-093d7ba73dfd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=247d9d9f18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9538d8be-cb90-4e9d-b077-093d7ba73dfd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=247d9d9f18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9538d8be-cb90-4e9d-b077-093d7ba73dfd subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=247d9d9f18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 identity=1424 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9538d8be-cb90-4e9d-b077-093d7ba73dfd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=247d9d9f18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 identity=1424 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9538d8be-cb90-4e9d-b077-093d7ba73dfd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=247d9d9f18 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=62 identity=1424 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9538d8be-cb90-4e9d-b077-093d7ba73dfd subsys=endpoint level=info msg="Successful endpoint creation" containerID=247d9d9f18 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=62 identity=1424 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9538d8be-cb90-4e9d-b077-093d7ba73dfd subsys=daemon level=info msg="Delete endpoint request" containerID=247d9d9f18 endpointID=62 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-9538d8be-cb90-4e9d-b077-093d7ba73dfd subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=247d9d9f18 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=62 identity=1424 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9538d8be-cb90-4e9d-b077-093d7ba73dfd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.129 e6942733-7653-4460-8e90-3c5ba95ed68d default }" containerID=e8157315e407052c5c9e60b2da12c0e20e614aa93b17bde179af69a8ca88bf97 datapathConfiguration="&{false false false false false }" interface=lxc4830685e350e k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8157315e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8157315e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e8157315e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identity=7506 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e8157315e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identity=7506 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e8157315e4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=639 identity=7506 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8157315e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=639 identity=7506 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03497707197640916 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.55 e5dd8d3f-7d41-4b3f-9198-f064ca71f2ee default }" containerID=46056bdc0d3def2d989666f99c0b9e2a3d6cad55970226ec58dfe6dda151f080 datapathConfiguration="&{false false false false false }" interface=lxce3b0bcb8040d k8sPodName=openstack/barbican-api-94c7b46fd-g9fh6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=46056bdc0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-api-94c7b46fd-g9fh6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=46056bdc0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-api-94c7b46fd-g9fh6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=46056bdc0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identity=49055 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-api-94c7b46fd-g9fh6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=46056bdc0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identity=49055 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-api-94c7b46fd-g9fh6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.90 fa3e69fb-a876-4ee4-b5df-675e0cd82cf5 default }" containerID=efa6f81cd4826bf137c609ad1269334af8e999d556bc1cd897a9f192816ea0bc datapathConfiguration="&{false false false false false }" interface=lxc64f4bd18a3ed k8sPodName=openstack/barbican-db-init-8tzsz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=efa6f81cd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1940 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-db-init-8tzsz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=efa6f81cd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1940 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b347b3db-c872-4b62-9a66-240a77b80fba,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=b347b3db-c872-4b62-9a66-240a77b80fba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-db-init-8tzsz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b347b3db-c872-4b62-9a66-240a77b80fba;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=b347b3db-c872-4b62-9a66-240a77b80fba;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=efa6f81cd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1940 identity=7442 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b347b3db-c872-4b62-9a66-240a77b80fba,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=b347b3db-c872-4b62-9a66-240a77b80fba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-db-init-8tzsz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=efa6f81cd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1940 identity=7442 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-db-init-8tzsz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=46056bdc0d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=22 identity=49055 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-api-94c7b46fd-g9fh6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=46056bdc0d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=22 identity=49055 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-api-94c7b46fd-g9fh6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=efa6f81cd4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1940 identity=7442 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-db-init-8tzsz subsys=endpoint level=info msg="Successful endpoint creation" containerID=efa6f81cd4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1940 identity=7442 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-db-init-8tzsz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=efa6f81cd4 endpointID=1940 k8sNamespace=openstack k8sPodName=barbican-db-init-8tzsz subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b347b3db-c872-4b62-9a66-240a77b80fba k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=b347b3db-c872-4b62-9a66-240a77b80fba k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=efa6f81cd4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1940 identity=7442 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-db-init-8tzsz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 4a294a18-74d6-4c46-a7fc-ea056d8ff3c4 default }" containerID=da6f647eba2a745fc950d9af7ac12e5ad849866f95cb8937afe0d6dd447e8ab7 datapathConfiguration="&{false false false false false }" interface=lxc1ac58edcbc2c k8sPodName=openstack/barbican-db-sync-9c44t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da6f647eba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2460 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-db-sync-9c44t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da6f647eba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2460 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a5d08f10-69ac-42e7-aaa7-92a45df71db7,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=a5d08f10-69ac-42e7-aaa7-92a45df71db7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-db-sync-9c44t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a5d08f10-69ac-42e7-aaa7-92a45df71db7;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=a5d08f10-69ac-42e7-aaa7-92a45df71db7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da6f647eba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2460 identity=19987 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a5d08f10-69ac-42e7-aaa7-92a45df71db7,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=a5d08f10-69ac-42e7-aaa7-92a45df71db7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-db-sync-9c44t oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=da6f647eba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2460 identity=19987 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-db-sync-9c44t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=da6f647eba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2460 identity=19987 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-db-sync-9c44t subsys=endpoint level=info msg="Successful endpoint creation" containerID=da6f647eba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2460 identity=19987 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-db-sync-9c44t subsys=daemon level=info msg="Delete endpoint request" containerID=da6f647eba endpointID=2460 k8sNamespace=openstack k8sPodName=barbican-db-sync-9c44t subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a5d08f10-69ac-42e7-aaa7-92a45df71db7 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=a5d08f10-69ac-42e7-aaa7-92a45df71db7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=da6f647eba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2460 identity=19987 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-db-sync-9c44t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 ae40e0e0-0e1a-4827-8a3b-435033a0df12 default }" containerID=56511ec55931b6f7a909b83b1bc6b4fbffe2975224d32acd262b06c8e6b9d357 datapathConfiguration="&{false false false false false }" interface=lxc5a85531b4eb9 k8sPodName=openstack/barbican-rabbit-init-pjppx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=56511ec559 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/barbican-rabbit-init-pjppx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=56511ec559 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=62406568-f817-478c-8701-4a2d7a2d5880,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=62406568-f817-478c-8701-4a2d7a2d5880,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/barbican-rabbit-init-pjppx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=62406568-f817-478c-8701-4a2d7a2d5880;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=62406568-f817-478c-8701-4a2d7a2d5880;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=56511ec559 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 identity=51410 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=62406568-f817-478c-8701-4a2d7a2d5880,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=62406568-f817-478c-8701-4a2d7a2d5880,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/barbican-rabbit-init-pjppx oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=56511ec559 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 identity=51410 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/barbican-rabbit-init-pjppx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=56511ec559 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=118 identity=51410 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/barbican-rabbit-init-pjppx subsys=endpoint level=info msg="Successful endpoint creation" containerID=56511ec559 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=118 identity=51410 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/barbican-rabbit-init-pjppx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=56511ec559 endpointID=118 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-pjppx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=62406568-f817-478c-8701-4a2d7a2d5880 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=62406568-f817-478c-8701-4a2d7a2d5880 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=56511ec559 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=118 identity=51410 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/barbican-rabbit-init-pjppx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.218 b6e9d0d5-c28d-4b00-9824-cacc4c15dc08 default }" containerID=bd3bf8d06d0dab90bc10e887d47dc399e9acbeb2f895d137db481b955bd975c6 datapathConfiguration="&{false false false false false }" interface=lxcbd6d23b1050e k8sPodName=openstack/barbican-ks-service-s4db4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd3bf8d06d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3051 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-ks-service-s4db4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd3bf8d06d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3051 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6dc7948c-0aa9-4d5f-8ae2-ed6fb42c46e9,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=6dc7948c-0aa9-4d5f-8ae2-ed6fb42c46e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-ks-service-s4db4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=6dc7948c-0aa9-4d5f-8ae2-ed6fb42c46e9;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=6dc7948c-0aa9-4d5f-8ae2-ed6fb42c46e9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bd3bf8d06d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3051 identity=16248 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6dc7948c-0aa9-4d5f-8ae2-ed6fb42c46e9,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=6dc7948c-0aa9-4d5f-8ae2-ed6fb42c46e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-ks-service-s4db4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd3bf8d06d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3051 identity=16248 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-ks-service-s4db4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bd3bf8d06d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3051 identity=16248 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-ks-service-s4db4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd3bf8d06d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3051 identity=16248 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-ks-service-s4db4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bd3bf8d06d endpointID=3051 k8sNamespace=openstack k8sPodName=barbican-ks-service-s4db4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=6dc7948c-0aa9-4d5f-8ae2-ed6fb42c46e9 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=6dc7948c-0aa9-4d5f-8ae2-ed6fb42c46e9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=bd3bf8d06d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3051 identity=16248 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-ks-service-s4db4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 f48fc854-2f9d-4bd5-9b01-f9682c2ce295 default }" containerID=e87b1aee99fa03a37a80c2486bf6b2e96de8a0b1093095a8ae88b59dc0e129b3 datapathConfiguration="&{false false false false false }" interface=lxc2667f8956302 k8sPodName=openstack/barbican-ks-endpoints-6nwrs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e87b1aee99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=964 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6nwrs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e87b1aee99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=964 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=508c0475-1b34-41b2-bd86-880ccd3448b3,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=508c0475-1b34-41b2-bd86-880ccd3448b3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6nwrs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e87b1aee99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=964 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6nwrs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=508c0475-1b34-41b2-bd86-880ccd3448b3;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=508c0475-1b34-41b2-bd86-880ccd3448b3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e87b1aee99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=964 identity=47739 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=508c0475-1b34-41b2-bd86-880ccd3448b3,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=508c0475-1b34-41b2-bd86-880ccd3448b3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6nwrs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e87b1aee99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=964 identity=47739 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6nwrs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e87b1aee99 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=964 identity=47739 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6nwrs subsys=endpoint level=info msg="Successful endpoint creation" containerID=e87b1aee99 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=964 identity=47739 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6nwrs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e87b1aee99 endpointID=964 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-6nwrs subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=508c0475-1b34-41b2-bd86-880ccd3448b3 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=508c0475-1b34-41b2-bd86-880ccd3448b3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e87b1aee99 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=964 identity=47739 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6nwrs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 f1b76d7b-e9ac-4bb1-a24c-606ad05b5637 default }" containerID=344b70e5d4d411f59824e66812c3edeb6fa5ae89e6df3858ed147db473d5cafc datapathConfiguration="&{false false false false false }" interface=lxcc9c57f76b776 k8sPodName=openstack/barbican-ks-user-jh7pp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=344b70e5d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/barbican-ks-user-jh7pp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=344b70e5d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e5f3eb34-2df7-465a-9ba4-86f87ac42a9c,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=e5f3eb34-2df7-465a-9ba4-86f87ac42a9c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/barbican-ks-user-jh7pp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e5f3eb34-2df7-465a-9ba4-86f87ac42a9c;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=e5f3eb34-2df7-465a-9ba4-86f87ac42a9c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=344b70e5d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 identity=2534 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e5f3eb34-2df7-465a-9ba4-86f87ac42a9c,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=e5f3eb34-2df7-465a-9ba4-86f87ac42a9c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/barbican-ks-user-jh7pp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=344b70e5d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 identity=2534 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/barbican-ks-user-jh7pp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=344b70e5d4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=719 identity=2534 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/barbican-ks-user-jh7pp subsys=endpoint level=info msg="Successful endpoint creation" containerID=344b70e5d4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=719 identity=2534 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/barbican-ks-user-jh7pp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=344b70e5d4 endpointID=719 k8sNamespace=openstack k8sPodName=barbican-ks-user-jh7pp subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e5f3eb34-2df7-465a-9ba4-86f87ac42a9c k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=e5f3eb34-2df7-465a-9ba4-86f87ac42a9c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=344b70e5d4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=719 identity=2534 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/barbican-ks-user-jh7pp subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.253 9449358b-8021-441a-8bda-6430caffb494 default }" containerID=bec3eaf0ffb8459baa353c603ec64c33094a78e20dca2598be06e5d44ac582f9 datapathConfiguration="&{false false false false false }" interface=lxc8bfc3c9ec364 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-xlpwl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bec3eaf0ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=575 ipv4=10.0.0.253 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-xlpwl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bec3eaf0ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=575 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.253 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-xlpwl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bec3eaf0ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=575 identity=58859 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.253 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-xlpwl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bec3eaf0ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=575 identity=58859 ipv4=10.0.0.253 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-xlpwl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bec3eaf0ff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=575 identity=58859 ipv4=10.0.0.253 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-xlpwl subsys=endpoint level=info msg="Successful endpoint creation" containerID=bec3eaf0ff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=575 identity=58859 ipv4=10.0.0.253 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-xlpwl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.81 7458c777-160c-4e98-8dd4-185520fa15f4 default }" containerID=ba294b55b31eca98e12d67d86fcdd7ba0f1a3beff0cbf5a17b32cd9988ae8b78 datapathConfiguration="&{false false false false false }" interface=lxc5f4ed03f375c k8sPodName=openstack/rook-ceph-detect-version-5479q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba294b55b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=477 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5479q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba294b55b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=477 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=2bff45c4-e3da-4903-9baf-8f0e1e8c697d,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=2bff45c4-e3da-4903-9baf-8f0e1e8c697d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5479q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=2bff45c4-e3da-4903-9baf-8f0e1e8c697d;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=2bff45c4-e3da-4903-9baf-8f0e1e8c697d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba294b55b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=477 identity=13997 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=2bff45c4-e3da-4903-9baf-8f0e1e8c697d,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=2bff45c4-e3da-4903-9baf-8f0e1e8c697d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5479q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba294b55b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=477 identity=13997 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5479q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ba294b55b3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=477 identity=13997 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5479q subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba294b55b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=477 identity=13997 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5479q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ba294b55b3 endpointID=477 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-5479q subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=2bff45c4-e3da-4903-9baf-8f0e1e8c697d k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=2bff45c4-e3da-4903-9baf-8f0e1e8c697d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=ba294b55b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=477 identity=13997 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5479q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 bea86d3e-461f-414c-9cde-ec48782c5a72 default }" containerID=870b55876cec26f425e238c3a8c37a25e3a9205715e5759be58705315a8a9a66 datapathConfiguration="&{false false false false false }" interface=lxcd2eb59749313 k8sPodName=openstack/ceph-object-controller-detect-version-7twdf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=870b55876c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1284 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-7twdf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=870b55876c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1284 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=cd05e169-6f8b-4546-9819-09dbe46a4094,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=cd05e169-6f8b-4546-9819-09dbe46a4094,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-7twdf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=cd05e169-6f8b-4546-9819-09dbe46a4094;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=cd05e169-6f8b-4546-9819-09dbe46a4094;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=870b55876c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1284 identity=4462 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=cd05e169-6f8b-4546-9819-09dbe46a4094,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=cd05e169-6f8b-4546-9819-09dbe46a4094,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-7twdf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=870b55876c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1284 identity=4462 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-7twdf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=870b55876c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1284 identity=4462 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-7twdf subsys=endpoint level=info msg="Successful endpoint creation" containerID=870b55876c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1284 identity=4462 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-7twdf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=870b55876c endpointID=1284 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-7twdf subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=cd05e169-6f8b-4546-9819-09dbe46a4094 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=cd05e169-6f8b-4546-9819-09dbe46a4094 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=870b55876c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1284 identity=4462 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-7twdf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 988f49ed-2b5f-4206-9c38-1be6bf515cb2 default }" containerID=2da8da3bce27d9773185708a768b91a13247afa862d17449d7a35a99aa21644a datapathConfiguration="&{false false false false false }" interface=lxcd6d9f2e7db5e k8sPodName=local-path-storage/helper-pod-create-pvc-0d5bad56-03f1-438a-876c-07fb7841e714 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2da8da3bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1960 ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0d5bad56-03f1-438a-876c-07fb7841e714 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2da8da3bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1960 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0d5bad56-03f1-438a-876c-07fb7841e714 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2da8da3bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1960 identity=1424 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0d5bad56-03f1-438a-876c-07fb7841e714 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2da8da3bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1960 identity=1424 ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0d5bad56-03f1-438a-876c-07fb7841e714 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2da8da3bce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1960 identity=1424 ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0d5bad56-03f1-438a-876c-07fb7841e714 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2da8da3bce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1960 identity=1424 ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0d5bad56-03f1-438a-876c-07fb7841e714 subsys=daemon level=info msg="Delete endpoint request" containerID=2da8da3bce endpointID=1960 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0d5bad56-03f1-438a-876c-07fb7841e714 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2da8da3bce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1960 identity=1424 ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0d5bad56-03f1-438a-876c-07fb7841e714 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.187 6a9093cc-fd8d-4e34-8e66-074f8dad1243 default }" containerID=6e7d6a03224d00c595daf7f1c399d22d182f81572936f62342c969cc9e1c4d43 datapathConfiguration="&{false false false false false }" interface=lxcf59096d0d766 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e7d6a0322 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1940 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e7d6a0322 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1940 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e7d6a0322 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1940 identity=1190 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e7d6a0322 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1940 identity=1190 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6e7d6a0322 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1940 identity=1190 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e7d6a0322 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1940 identity=1190 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.189 938d8c98-d390-41a8-8565-9b2065a55353 default }" containerID=6d5838ce428d5c40ad77811c7ae0878dbb77775e0452c98b5ef10579ff0268df datapathConfiguration="&{false false false false false }" interface=lxcbd46e872ee4b k8sPodName=openstack/glance-db-init-rd4kk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d5838ce42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1892 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-db-init-rd4kk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d5838ce42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1892 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a964194d-16ce-4690-af34-b096b07bed99,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=a964194d-16ce-4690-af34-b096b07bed99,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-db-init-rd4kk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6d5838ce42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1892 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-db-init-rd4kk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a964194d-16ce-4690-af34-b096b07bed99;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=a964194d-16ce-4690-af34-b096b07bed99;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d5838ce42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1892 identity=26629 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a964194d-16ce-4690-af34-b096b07bed99,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=a964194d-16ce-4690-af34-b096b07bed99,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-db-init-rd4kk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6d5838ce42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1892 identity=26629 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-db-init-rd4kk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6d5838ce42 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1892 identity=26629 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-db-init-rd4kk subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d5838ce42 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1892 identity=26629 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-db-init-rd4kk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6d5838ce42 endpointID=1892 k8sNamespace=openstack k8sPodName=glance-db-init-rd4kk subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a964194d-16ce-4690-af34-b096b07bed99 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=a964194d-16ce-4690-af34-b096b07bed99 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6d5838ce42 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1892 identity=26629 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-db-init-rd4kk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 1337a3d1-43ea-4f97-9e1f-02cd56897973 default }" containerID=735866289463b8e0ad8bfa7197e0f137ba1471887812add5db9d387f804d3a06 datapathConfiguration="&{false false false false false }" interface=lxc3d873ae7c5f7 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-whjs8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7358662894 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=984 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-whjs8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7358662894 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=984 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-whjs8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7358662894 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=984 identity=29804 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-whjs8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7358662894 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=984 identity=29804 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-whjs8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 31d3eff2-3951-4373-97cb-64360ac8f2b0 default }" containerID=50398a41e5a6d19ca32391be69906984d300e1efc9df5a716866cff5fc1071aa datapathConfiguration="&{false false false false false }" interface=lxcbc30a9cd3b7a k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-dmnfd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=50398a41e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2347 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-dmnfd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=50398a41e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2347 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-dmnfd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=50398a41e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2347 identity=9826 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-dmnfd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=50398a41e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2347 identity=9826 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-dmnfd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7358662894 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=984 identity=29804 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-whjs8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7358662894 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=984 identity=29804 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-whjs8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=50398a41e5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2347 identity=9826 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-dmnfd subsys=endpoint level=info msg="Successful endpoint creation" containerID=50398a41e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2347 identity=9826 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-dmnfd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.193 1dd7514d-2799-4075-ae76-a54a96477ce2 default }" containerID=61dba4632c259c26e2f4f8828459b191e6517af502537ddf21a997fbaa0feef5 datapathConfiguration="&{false false false false false }" interface=lxc479f6a6f244a k8sPodName=openstack/glance-db-sync-bflxv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=61dba4632c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3285 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/glance-db-sync-bflxv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=61dba4632c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3285 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0546c3ca-ca01-4781-8a20-c9da90ee2c1f,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=0546c3ca-ca01-4781-8a20-c9da90ee2c1f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/glance-db-sync-bflxv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0546c3ca-ca01-4781-8a20-c9da90ee2c1f;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=0546c3ca-ca01-4781-8a20-c9da90ee2c1f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=61dba4632c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3285 identity=55498 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0546c3ca-ca01-4781-8a20-c9da90ee2c1f,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=0546c3ca-ca01-4781-8a20-c9da90ee2c1f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/glance-db-sync-bflxv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=61dba4632c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3285 identity=55498 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/glance-db-sync-bflxv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=61dba4632c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3285 identity=55498 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/glance-db-sync-bflxv subsys=endpoint level=info msg="Successful endpoint creation" containerID=61dba4632c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3285 identity=55498 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/glance-db-sync-bflxv subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=61dba4632c endpointID=3285 k8sNamespace=openstack k8sPodName=glance-db-sync-bflxv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0546c3ca-ca01-4781-8a20-c9da90ee2c1f k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=0546c3ca-ca01-4781-8a20-c9da90ee2c1f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=61dba4632c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3285 identity=55498 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/glance-db-sync-bflxv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 7924f5d4-b12b-4fac-bc15-72891996b23c default }" containerID=dc08974c6ced706774bb0091b52a4b6397512de2ec7f02eb294c0dcc821fccf2 datapathConfiguration="&{false false false false false }" interface=lxc67b2a4e4d755 k8sPodName=openstack/glance-rabbit-init-r98ks labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc08974c6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-rabbit-init-r98ks subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc08974c6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2105f64b-2637-49de-8819-f14849c246eb,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2105f64b-2637-49de-8819-f14849c246eb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-rabbit-init-r98ks subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=2105f64b-2637-49de-8819-f14849c246eb;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=2105f64b-2637-49de-8819-f14849c246eb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc08974c6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 identity=55703 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2105f64b-2637-49de-8819-f14849c246eb,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2105f64b-2637-49de-8819-f14849c246eb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-rabbit-init-r98ks oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc08974c6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 identity=55703 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-rabbit-init-r98ks subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dc08974c6c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=412 identity=55703 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-rabbit-init-r98ks subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc08974c6c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=412 identity=55703 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-rabbit-init-r98ks subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dc08974c6c endpointID=412 k8sNamespace=openstack k8sPodName=glance-rabbit-init-r98ks subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=2105f64b-2637-49de-8819-f14849c246eb k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=2105f64b-2637-49de-8819-f14849c246eb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=dc08974c6c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=412 identity=55703 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-rabbit-init-r98ks subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 3a5205ea-240a-4579-840c-4bb4e7409114 default }" containerID=14b4880b833cf6d1075ce62b9c41e2e8e5e5989d8026d013b3024aa0f83efc3d datapathConfiguration="&{false false false false false }" interface=lxc0e1793805d3d k8sPodName=openstack/glance-ks-service-zp558 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=14b4880b83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=801 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/glance-ks-service-zp558 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=14b4880b83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=801 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=89ff2cab-1386-4a5f-ba9d-a9c9c4ce2bf5,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=89ff2cab-1386-4a5f-ba9d-a9c9c4ce2bf5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/glance-ks-service-zp558 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=89ff2cab-1386-4a5f-ba9d-a9c9c4ce2bf5;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=89ff2cab-1386-4a5f-ba9d-a9c9c4ce2bf5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=14b4880b83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=801 identity=4812 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=89ff2cab-1386-4a5f-ba9d-a9c9c4ce2bf5,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=89ff2cab-1386-4a5f-ba9d-a9c9c4ce2bf5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/glance-ks-service-zp558 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=14b4880b83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=801 identity=4812 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/glance-ks-service-zp558 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=14b4880b83 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=801 identity=4812 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/glance-ks-service-zp558 subsys=endpoint level=info msg="Successful endpoint creation" containerID=14b4880b83 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=801 identity=4812 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/glance-ks-service-zp558 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=14b4880b83 endpointID=801 k8sNamespace=openstack k8sPodName=glance-ks-service-zp558 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=89ff2cab-1386-4a5f-ba9d-a9c9c4ce2bf5 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=89ff2cab-1386-4a5f-ba9d-a9c9c4ce2bf5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=14b4880b83 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=801 identity=4812 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/glance-ks-service-zp558 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.238 018d91d1-44e0-498f-94d4-23921363e7f5 default }" containerID=3bf0441c8df216710d4e7ec14f1dbedc04ad1fe52ed83ea55687d56db86959de datapathConfiguration="&{false false false false false }" interface=lxc3fbd8bdcb24e k8sPodName=openstack/glance-ks-endpoints-q2np6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3bf0441c8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/glance-ks-endpoints-q2np6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3bf0441c8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f4d2e0b8-a45a-4709-8491-d25daf15594a,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f4d2e0b8-a45a-4709-8491-d25daf15594a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/glance-ks-endpoints-q2np6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f4d2e0b8-a45a-4709-8491-d25daf15594a;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=f4d2e0b8-a45a-4709-8491-d25daf15594a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3bf0441c8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 identity=6327 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f4d2e0b8-a45a-4709-8491-d25daf15594a,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f4d2e0b8-a45a-4709-8491-d25daf15594a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/glance-ks-endpoints-q2np6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3bf0441c8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 identity=6327 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/glance-ks-endpoints-q2np6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3bf0441c8d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=683 identity=6327 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/glance-ks-endpoints-q2np6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3bf0441c8d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=683 identity=6327 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/glance-ks-endpoints-q2np6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3bf0441c8d endpointID=683 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-q2np6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f4d2e0b8-a45a-4709-8491-d25daf15594a k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=f4d2e0b8-a45a-4709-8491-d25daf15594a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3bf0441c8d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=683 identity=6327 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/glance-ks-endpoints-q2np6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 08e33e69-d6c8-4f8d-944d-784d3797aeb3 default }" containerID=c97140eebb7893ddb6dc1b6ad093b61375fe9fcd1a91aa843d9e0dc11afc0c03 datapathConfiguration="&{false false false false false }" interface=lxc6763fd4c536e k8sPodName=openstack/glance-ks-user-xbf2g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c97140eebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3134 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/glance-ks-user-xbf2g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c97140eebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3134 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=138cad9f-85b5-447f-b68c-f08ee7718329,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=138cad9f-85b5-447f-b68c-f08ee7718329,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/glance-ks-user-xbf2g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=138cad9f-85b5-447f-b68c-f08ee7718329;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=138cad9f-85b5-447f-b68c-f08ee7718329;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c97140eebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3134 identity=50578 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=138cad9f-85b5-447f-b68c-f08ee7718329,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=138cad9f-85b5-447f-b68c-f08ee7718329,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/glance-ks-user-xbf2g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c97140eebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3134 identity=50578 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/glance-ks-user-xbf2g subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c97140eebb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3134 identity=50578 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/glance-ks-user-xbf2g subsys=endpoint level=info msg="Successful endpoint creation" containerID=c97140eebb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3134 identity=50578 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/glance-ks-user-xbf2g subsys=daemon level=info msg="Delete endpoint request" containerID=c97140eebb endpointID=3134 k8sNamespace=openstack k8sPodName=glance-ks-user-xbf2g subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=138cad9f-85b5-447f-b68c-f08ee7718329 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=138cad9f-85b5-447f-b68c-f08ee7718329 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c97140eebb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3134 identity=50578 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/glance-ks-user-xbf2g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 f283b46a-4f59-4293-a05b-cd3cafc55da5 default }" containerID=8b3733c553cf55f54171b5a598ab63561aba7b90c5bfa756f645b7296f57aec0 datapathConfiguration="&{false false false false false }" interface=lxc7189db3c40af k8sPodName=openstack/glance-metadefs-load-mcc9x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b3733c553 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2460 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-metadefs-load-mcc9x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b3733c553 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2460 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fab2375f-c79e-4083-86f6-0e0622daa05f,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=fab2375f-c79e-4083-86f6-0e0622daa05f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-metadefs-load-mcc9x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=fab2375f-c79e-4083-86f6-0e0622daa05f;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=fab2375f-c79e-4083-86f6-0e0622daa05f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=8b3733c553 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2460 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-metadefs-load-mcc9x line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8b3733c553 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2460 identity=30654 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fab2375f-c79e-4083-86f6-0e0622daa05f,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=fab2375f-c79e-4083-86f6-0e0622daa05f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-metadefs-load-mcc9x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b3733c553 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2460 identity=30654 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-metadefs-load-mcc9x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8b3733c553 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2460 identity=30654 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-metadefs-load-mcc9x subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b3733c553 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2460 identity=30654 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-metadefs-load-mcc9x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8b3733c553 endpointID=2460 k8sNamespace=openstack k8sPodName=glance-metadefs-load-mcc9x subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=fab2375f-c79e-4083-86f6-0e0622daa05f k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=fab2375f-c79e-4083-86f6-0e0622daa05f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8b3733c553 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2460 identity=30654 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-metadefs-load-mcc9x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 e266b650-ecae-4d7c-ba68-e8ae8a27679d default }" containerID=b478ff47c83d07fa443b9898ac21881942ac928cbaa51d588c0f9723dfa6c1ca datapathConfiguration="&{false false false false false }" interface=lxc2a637119f15b k8sPodName=openstack/glance-storage-init-grvkx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b478ff47c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/glance-storage-init-grvkx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b478ff47c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d3eb5649-43d4-4583-871b-b96c0ca46e33,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=d3eb5649-43d4-4583-871b-b96c0ca46e33,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/glance-storage-init-grvkx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d3eb5649-43d4-4583-871b-b96c0ca46e33;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=d3eb5649-43d4-4583-871b-b96c0ca46e33;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b478ff47c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 identity=34499 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d3eb5649-43d4-4583-871b-b96c0ca46e33,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=d3eb5649-43d4-4583-871b-b96c0ca46e33,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/glance-storage-init-grvkx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b478ff47c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 identity=34499 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/glance-storage-init-grvkx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b478ff47c8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=990 identity=34499 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/glance-storage-init-grvkx subsys=endpoint level=info msg="Successful endpoint creation" containerID=b478ff47c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=990 identity=34499 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/glance-storage-init-grvkx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b478ff47c8 endpointID=990 k8sNamespace=openstack k8sPodName=glance-storage-init-grvkx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d3eb5649-43d4-4583-871b-b96c0ca46e33 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=d3eb5649-43d4-4583-871b-b96c0ca46e33 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b478ff47c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=990 identity=34499 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/glance-storage-init-grvkx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 67532e0d-d702-4bc5-8da1-35d2a6f66f8c default }" containerID=4dcbde46291674e850f219cd6fa248214b0944e0a196b0acc04793c2a45b040a datapathConfiguration="&{false false false false false }" interface=lxc15d43ba0fbdc k8sPodName=openstack/glance-api-7d7fd8bc46-cj5hp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4dcbde4629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1865 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-api-7d7fd8bc46-cj5hp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4dcbde4629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1865 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-api-7d7fd8bc46-cj5hp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4dcbde4629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1865 identity=775 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-api-7d7fd8bc46-cj5hp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4dcbde4629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1865 identity=775 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-api-7d7fd8bc46-cj5hp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4dcbde4629 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1865 identity=775 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-api-7d7fd8bc46-cj5hp subsys=endpoint level=info msg="Successful endpoint creation" containerID=4dcbde4629 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1865 identity=775 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-api-7d7fd8bc46-cj5hp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.53 fbfe900b-5779-4294-80cf-837a30c8d47c default }" containerID=40de9ec2016ec8249f85869ebe558172c161cfe8e856906322c3fa212bae2f72 datapathConfiguration="&{false false false false false }" interface=lxc9d2a1b43017a k8sPodName=openstack/staffeln-db-init-zn8bb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=40de9ec201 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/staffeln-db-init-zn8bb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=40de9ec201 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=6524a1d3-cdb6-44da-bf75-43f597ddef8d,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=6524a1d3-cdb6-44da-bf75-43f597ddef8d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/staffeln-db-init-zn8bb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=6524a1d3-cdb6-44da-bf75-43f597ddef8d;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=6524a1d3-cdb6-44da-bf75-43f597ddef8d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=40de9ec201 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 identity=6770 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=6524a1d3-cdb6-44da-bf75-43f597ddef8d,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=6524a1d3-cdb6-44da-bf75-43f597ddef8d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/staffeln-db-init-zn8bb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=40de9ec201 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 identity=6770 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/staffeln-db-init-zn8bb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=40de9ec201 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1549 identity=6770 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/staffeln-db-init-zn8bb subsys=endpoint level=info msg="Successful endpoint creation" containerID=40de9ec201 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1549 identity=6770 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/staffeln-db-init-zn8bb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.104 839fcc4b-78a1-4f88-a7a6-0e05beceb47b default }" containerID=f08606d978357be48eefa87be9e97e348d36d69de311717e2d567abb51301127 datapathConfiguration="&{false false false false false }" interface=lxcf2bd1ace0128 k8sPodName=openstack/staffeln-api-6675f4f48-zvjqj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f08606d978 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=426 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/staffeln-api-6675f4f48-zvjqj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f08606d978 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=426 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/staffeln-api-6675f4f48-zvjqj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f08606d978 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=426 identity=18853 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/staffeln-api-6675f4f48-zvjqj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f08606d978 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=426 identity=18853 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/staffeln-api-6675f4f48-zvjqj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 b121d658-c483-4fdf-bf79-edf4ec6db012 default }" containerID=a94fe98d1264a6a5334ab49bca66e2719a450f0245851bbf32ecd40fdccdf330 datapathConfiguration="&{false false false false false }" interface=lxce91e5c5ee856 k8sPodName=openstack/staffeln-conductor-6bb5674859-fcwf8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a94fe98d12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1039 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/staffeln-conductor-6bb5674859-fcwf8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a94fe98d12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1039 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/staffeln-conductor-6bb5674859-fcwf8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a94fe98d12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1039 identity=17832 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/staffeln-conductor-6bb5674859-fcwf8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a94fe98d12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1039 identity=17832 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/staffeln-conductor-6bb5674859-fcwf8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f08606d978 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=426 identity=18853 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/staffeln-api-6675f4f48-zvjqj subsys=endpoint level=info msg="Successful endpoint creation" containerID=f08606d978 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=426 identity=18853 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/staffeln-api-6675f4f48-zvjqj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a94fe98d12 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1039 identity=17832 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/staffeln-conductor-6bb5674859-fcwf8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a94fe98d12 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1039 identity=17832 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/staffeln-conductor-6bb5674859-fcwf8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=40de9ec201 endpointID=1549 k8sNamespace=openstack k8sPodName=staffeln-db-init-zn8bb subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=6524a1d3-cdb6-44da-bf75-43f597ddef8d k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=6524a1d3-cdb6-44da-bf75-43f597ddef8d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=40de9ec201 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1549 identity=6770 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/staffeln-db-init-zn8bb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 531de7a7-b03a-45f2-821a-813e858282cd default }" containerID=e91be8f3f301fd25cadf410405405d1a0fe98cca03652ac994590714188f18d8 datapathConfiguration="&{false false false false false }" interface=lxcca06ff6006c8 k8sPodName=openstack/staffeln-db-sync-qghft labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e91be8f3f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1959 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/staffeln-db-sync-qghft subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e91be8f3f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1959 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=4efcf849-58fc-4c52-9e50-932d01274a3e,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=4efcf849-58fc-4c52-9e50-932d01274a3e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/staffeln-db-sync-qghft subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=4efcf849-58fc-4c52-9e50-932d01274a3e;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=4efcf849-58fc-4c52-9e50-932d01274a3e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e91be8f3f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1959 identity=1143 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=4efcf849-58fc-4c52-9e50-932d01274a3e,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=4efcf849-58fc-4c52-9e50-932d01274a3e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/staffeln-db-sync-qghft oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e91be8f3f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1959 identity=1143 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/staffeln-db-sync-qghft subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e91be8f3f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1959 identity=1143 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/staffeln-db-sync-qghft subsys=endpoint level=info msg="Successful endpoint creation" containerID=e91be8f3f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1959 identity=1143 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/staffeln-db-sync-qghft subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e91be8f3f3 endpointID=1959 k8sNamespace=openstack k8sPodName=staffeln-db-sync-qghft subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=4efcf849-58fc-4c52-9e50-932d01274a3e k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=4efcf849-58fc-4c52-9e50-932d01274a3e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=e91be8f3f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1959 identity=1143 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/staffeln-db-sync-qghft subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 53e0b42a-a72c-455c-9912-eee1b24d9d30 default }" containerID=1a226c578170a2ed6482e806256e09ed63f3ab65a31a0b3e08b46348fd1e94a8 datapathConfiguration="&{false false false false false }" interface=lxc62b45de4c667 k8sPodName=local-path-storage/helper-pod-create-pvc-2aacdb71-bef4-40ed-aefb-55ad56b1e9bd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1a226c5781 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2aacdb71-bef4-40ed-aefb-55ad56b1e9bd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1a226c5781 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2aacdb71-bef4-40ed-aefb-55ad56b1e9bd subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1a226c5781 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 identity=1424 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2aacdb71-bef4-40ed-aefb-55ad56b1e9bd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1a226c5781 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 identity=1424 ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2aacdb71-bef4-40ed-aefb-55ad56b1e9bd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1a226c5781 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=285 identity=1424 ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2aacdb71-bef4-40ed-aefb-55ad56b1e9bd subsys=endpoint level=info msg="Successful endpoint creation" containerID=1a226c5781 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=285 identity=1424 ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2aacdb71-bef4-40ed-aefb-55ad56b1e9bd subsys=daemon level=info msg="Delete endpoint request" containerID=1a226c5781 endpointID=285 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2aacdb71-bef4-40ed-aefb-55ad56b1e9bd subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1a226c5781 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=285 identity=1424 ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2aacdb71-bef4-40ed-aefb-55ad56b1e9bd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 cc3ef09d-9169-4171-a1a1-c5b2c15ec5dc default }" containerID=d00cb0100e6d91389bd3d17fdd8745140b71569ae67ae82d07b785b1ef419b30 datapathConfiguration="&{false false false false false }" interface=lxcce201bb4aa75 k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d00cb0100e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d00cb0100e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d00cb0100e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 identity=25791 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d00cb0100e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 identity=25791 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d00cb0100e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=593 identity=25791 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d00cb0100e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=593 identity=25791 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.35 13d88efc-b26e-4cee-9409-5850b8eab0e3 default }" containerID=98ff9390fcffb2bc4df978cf3e381c2372ce2f6483dc6974b5183763d7b27da7 datapathConfiguration="&{false false false false false }" interface=lxcdc4df4c14b0e k8sPodName=openstack/cinder-api-5b484f9fb-s6227 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98ff9390fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2196 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/cinder-api-5b484f9fb-s6227 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98ff9390fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2196 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/cinder-api-5b484f9fb-s6227 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98ff9390fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2196 identity=42578 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/cinder-api-5b484f9fb-s6227 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=98ff9390fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2196 identity=42578 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/cinder-api-5b484f9fb-s6227 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 a575b302-dde8-45b9-a163-d3dc8f6f8282 default }" containerID=4376cdf2f15005aa2ea59d6e1143065596d054b4aace5f5c3a2f1ae0fa5da64c datapathConfiguration="&{false false false false false }" interface=lxcc460ab7c823e k8sPodName=openstack/cinder-scheduler-598f8469d4-z4tgj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4376cdf2f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3204 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/cinder-scheduler-598f8469d4-z4tgj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4376cdf2f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3204 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/cinder-scheduler-598f8469d4-z4tgj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4376cdf2f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3204 identity=64579 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/cinder-scheduler-598f8469d4-z4tgj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4376cdf2f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3204 identity=64579 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/cinder-scheduler-598f8469d4-z4tgj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=98ff9390fc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2196 identity=42578 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/cinder-api-5b484f9fb-s6227 subsys=endpoint level=info msg="Successful endpoint creation" containerID=98ff9390fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2196 identity=42578 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/cinder-api-5b484f9fb-s6227 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.233 aefb47c5-eeec-4f12-9bbd-065dad0f8fb4 default }" containerID=036c88a1d627e12536c4f37d0b2cf797de30311ec3d34c9dfa1c8058533d72ba datapathConfiguration="&{false false false false false }" interface=lxcc20f264ae3aa k8sPodName=openstack/cinder-db-init-9mb5f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=036c88a1d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-db-init-9mb5f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=036c88a1d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=65edc705-fc3d-474c-b55a-d7c4f866470e,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=65edc705-fc3d-474c-b55a-d7c4f866470e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-db-init-9mb5f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=65edc705-fc3d-474c-b55a-d7c4f866470e;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=65edc705-fc3d-474c-b55a-d7c4f866470e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=036c88a1d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 identity=12815 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=65edc705-fc3d-474c-b55a-d7c4f866470e,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=65edc705-fc3d-474c-b55a-d7c4f866470e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-db-init-9mb5f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=036c88a1d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 identity=12815 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-db-init-9mb5f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4376cdf2f1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3204 identity=64579 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/cinder-scheduler-598f8469d4-z4tgj subsys=endpoint level=info msg="Successful endpoint creation" containerID=4376cdf2f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3204 identity=64579 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/cinder-scheduler-598f8469d4-z4tgj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=036c88a1d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=381 identity=12815 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-db-init-9mb5f subsys=endpoint level=info msg="Successful endpoint creation" containerID=036c88a1d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=381 identity=12815 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-db-init-9mb5f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=036c88a1d6 endpointID=381 k8sNamespace=openstack k8sPodName=cinder-db-init-9mb5f subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=65edc705-fc3d-474c-b55a-d7c4f866470e k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=65edc705-fc3d-474c-b55a-d7c4f866470e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=036c88a1d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=381 identity=12815 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-db-init-9mb5f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 2d833a5d-211d-4380-ab76-1049a68472cf default }" containerID=00c3d01c14494501f03f17b29c3bc59fb769bcc63adcbf27f8bf04fe955edf61 datapathConfiguration="&{false false false false false }" interface=lxc8c3b3bef83f8 k8sPodName=openstack/cinder-db-sync-zzqvt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00c3d01c14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=437 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/cinder-db-sync-zzqvt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00c3d01c14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=437 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1f0762a2-f036-41e3-9d8a-5898b2df6de2,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=1f0762a2-f036-41e3-9d8a-5898b2df6de2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/cinder-db-sync-zzqvt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=00c3d01c14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=437 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.124 ipv6= k8sPodName=openstack/cinder-db-sync-zzqvt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=1f0762a2-f036-41e3-9d8a-5898b2df6de2;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=1f0762a2-f036-41e3-9d8a-5898b2df6de2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=00c3d01c14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=437 identity=28828 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1f0762a2-f036-41e3-9d8a-5898b2df6de2,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=1f0762a2-f036-41e3-9d8a-5898b2df6de2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/cinder-db-sync-zzqvt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=00c3d01c14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=437 identity=28828 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/cinder-db-sync-zzqvt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=00c3d01c14 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=437 identity=28828 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/cinder-db-sync-zzqvt subsys=endpoint level=info msg="Successful endpoint creation" containerID=00c3d01c14 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=437 identity=28828 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/cinder-db-sync-zzqvt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=00c3d01c14 endpointID=437 k8sNamespace=openstack k8sPodName=cinder-db-sync-zzqvt subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=1f0762a2-f036-41e3-9d8a-5898b2df6de2 k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=1f0762a2-f036-41e3-9d8a-5898b2df6de2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=00c3d01c14 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=437 identity=28828 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/cinder-db-sync-zzqvt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.88 a0b59710-9131-46ba-91fe-c42092fd34fe default }" containerID=795c330a46c640e0572a06175abea751b6206f004a575aa3b4159ca46472f2ae datapathConfiguration="&{false false false false false }" interface=lxc2f085663a77e k8sPodName=openstack/cinder-rabbit-init-j42ls labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=795c330a46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/cinder-rabbit-init-j42ls subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=795c330a46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1c31b731-bbe9-480b-8b65-a7dfcdc4a0e1,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1c31b731-bbe9-480b-8b65-a7dfcdc4a0e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/cinder-rabbit-init-j42ls subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=1c31b731-bbe9-480b-8b65-a7dfcdc4a0e1;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=1c31b731-bbe9-480b-8b65-a7dfcdc4a0e1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=795c330a46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 identity=15996 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1c31b731-bbe9-480b-8b65-a7dfcdc4a0e1,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1c31b731-bbe9-480b-8b65-a7dfcdc4a0e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/cinder-rabbit-init-j42ls oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=795c330a46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 identity=15996 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/cinder-rabbit-init-j42ls subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=795c330a46 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=572 identity=15996 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/cinder-rabbit-init-j42ls subsys=endpoint level=info msg="Successful endpoint creation" containerID=795c330a46 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=572 identity=15996 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/cinder-rabbit-init-j42ls subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=795c330a46 endpointID=572 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-j42ls subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=1c31b731-bbe9-480b-8b65-a7dfcdc4a0e1 k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=1c31b731-bbe9-480b-8b65-a7dfcdc4a0e1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=795c330a46 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=572 identity=15996 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/cinder-rabbit-init-j42ls subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.177 698bb263-c69a-47fc-8055-a10fb81641bd default }" containerID=f872658902eb43ce6164ad529447b526d825d9c95b64501c13f130099dccb6ce datapathConfiguration="&{false false false false false }" interface=lxc21f1bcc0a3f1 k8sPodName=openstack/cinder-ks-service-wxm8x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f872658902 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1344 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/cinder-ks-service-wxm8x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f872658902 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1344 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=9da7c31c-e92f-4247-8622-eb43605f71ef,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=9da7c31c-e92f-4247-8622-eb43605f71ef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/cinder-ks-service-wxm8x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=9da7c31c-e92f-4247-8622-eb43605f71ef;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=9da7c31c-e92f-4247-8622-eb43605f71ef;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f872658902 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1344 identity=8036 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=9da7c31c-e92f-4247-8622-eb43605f71ef,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=9da7c31c-e92f-4247-8622-eb43605f71ef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/cinder-ks-service-wxm8x oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f872658902 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1344 identity=8036 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/cinder-ks-service-wxm8x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f872658902 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1344 identity=8036 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/cinder-ks-service-wxm8x subsys=endpoint level=info msg="Successful endpoint creation" containerID=f872658902 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1344 identity=8036 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/cinder-ks-service-wxm8x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f872658902 endpointID=1344 k8sNamespace=openstack k8sPodName=cinder-ks-service-wxm8x subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=9da7c31c-e92f-4247-8622-eb43605f71ef k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=9da7c31c-e92f-4247-8622-eb43605f71ef k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=f872658902 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1344 identity=8036 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/cinder-ks-service-wxm8x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 f2b72842-23f3-4b86-bdb0-68035d939ee1 default }" containerID=fea868be59456723b79827013930b0d9ce8ca3c8c15083f349481a9afd3ebaab datapathConfiguration="&{false false false false false }" interface=lxcef89a1c7d359 k8sPodName=openstack/cinder-ks-endpoints-rjk5z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fea868be59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2263 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rjk5z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fea868be59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2263 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=87a8d82f-8d37-4777-b134-799a91dfadb3,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=87a8d82f-8d37-4777-b134-799a91dfadb3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rjk5z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fea868be59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2263 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.144 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rjk5z line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=87a8d82f-8d37-4777-b134-799a91dfadb3;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=87a8d82f-8d37-4777-b134-799a91dfadb3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fea868be59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2263 identity=5326 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=87a8d82f-8d37-4777-b134-799a91dfadb3,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=87a8d82f-8d37-4777-b134-799a91dfadb3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rjk5z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fea868be59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2263 identity=5326 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rjk5z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fea868be59 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2263 identity=5326 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rjk5z subsys=endpoint level=info msg="Successful endpoint creation" containerID=fea868be59 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2263 identity=5326 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rjk5z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fea868be59 endpointID=2263 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-rjk5z subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=87a8d82f-8d37-4777-b134-799a91dfadb3 k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=87a8d82f-8d37-4777-b134-799a91dfadb3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=fea868be59 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2263 identity=5326 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rjk5z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.135 3844bd36-eb88-4beb-a286-1ef9f73007a1 default }" containerID=46f81fdc1af038a157f1cf9b81d077417346143a2fb29f5ec1d7a3330870e94f datapathConfiguration="&{false false false false false }" interface=lxcce7fff1e42fb k8sPodName=openstack/cinder-ks-user-jkh4l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=46f81fdc1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/cinder-ks-user-jkh4l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=46f81fdc1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=2a935930-623e-4220-bd81-18b2cceee78e,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=2a935930-623e-4220-bd81-18b2cceee78e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/cinder-ks-user-jkh4l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=2a935930-623e-4220-bd81-18b2cceee78e;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=2a935930-623e-4220-bd81-18b2cceee78e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=46f81fdc1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.135 ipv6= k8sPodName=openstack/cinder-ks-user-jkh4l line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=46f81fdc1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 identity=56641 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=2a935930-623e-4220-bd81-18b2cceee78e,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=2a935930-623e-4220-bd81-18b2cceee78e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/cinder-ks-user-jkh4l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=46f81fdc1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 identity=56641 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/cinder-ks-user-jkh4l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=46f81fdc1a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1584 identity=56641 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/cinder-ks-user-jkh4l subsys=endpoint level=info msg="Successful endpoint creation" containerID=46f81fdc1a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1584 identity=56641 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/cinder-ks-user-jkh4l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=46f81fdc1a endpointID=1584 k8sNamespace=openstack k8sPodName=cinder-ks-user-jkh4l subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=2a935930-623e-4220-bd81-18b2cceee78e k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=2a935930-623e-4220-bd81-18b2cceee78e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=46f81fdc1a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1584 identity=56641 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/cinder-ks-user-jkh4l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 ad0d9f75-bee0-4b3a-a045-1204552db1cc default }" containerID=21b64647d418c97deb6198fa6641b50996760f205906d795f674e42ebd2687fd datapathConfiguration="&{false false false false false }" interface=lxc1c1515cd451d k8sPodName=openstack/cinder-backup-storage-init-c726q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=21b64647d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2237 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/cinder-backup-storage-init-c726q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=21b64647d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2237 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=4b642913-aa2a-4bfb-a094-4198b396bccf,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=4b642913-aa2a-4bfb-a094-4198b396bccf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/cinder-backup-storage-init-c726q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=4b642913-aa2a-4bfb-a094-4198b396bccf;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=4b642913-aa2a-4bfb-a094-4198b396bccf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=21b64647d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2237 identity=20339 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=4b642913-aa2a-4bfb-a094-4198b396bccf,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=4b642913-aa2a-4bfb-a094-4198b396bccf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/cinder-backup-storage-init-c726q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=21b64647d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2237 identity=20339 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/cinder-backup-storage-init-c726q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=21b64647d4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2237 identity=20339 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/cinder-backup-storage-init-c726q subsys=endpoint level=info msg="Successful endpoint creation" containerID=21b64647d4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2237 identity=20339 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/cinder-backup-storage-init-c726q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=21b64647d4 endpointID=2237 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-c726q subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=4b642913-aa2a-4bfb-a094-4198b396bccf k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=4b642913-aa2a-4bfb-a094-4198b396bccf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=21b64647d4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2237 identity=20339 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/cinder-backup-storage-init-c726q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 92d709d9-0b31-4c9b-8f2e-1bdbc43ec22f default }" containerID=b991c8ccacae860bad9e3a05e30e211d183dd10a36ac9b8f0982e63907a21d4c datapathConfiguration="&{false false false false false }" interface=lxc2c3b4b57cbf0 k8sPodName=openstack/cinder-create-internal-tenant-tfv7f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b991c8ccac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=206 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-tfv7f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b991c8ccac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=206 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=aa11391a-6d69-4a79-b36f-53b44f7af719,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=aa11391a-6d69-4a79-b36f-53b44f7af719,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-tfv7f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b991c8ccac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=206 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-tfv7f line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=aa11391a-6d69-4a79-b36f-53b44f7af719;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=aa11391a-6d69-4a79-b36f-53b44f7af719;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b991c8ccac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=206 identity=34269 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=aa11391a-6d69-4a79-b36f-53b44f7af719,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=aa11391a-6d69-4a79-b36f-53b44f7af719,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-tfv7f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b991c8ccac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=206 identity=34269 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-tfv7f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b991c8ccac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=206 identity=34269 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-tfv7f subsys=endpoint level=info msg="Successful endpoint creation" containerID=b991c8ccac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=206 identity=34269 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-tfv7f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b991c8ccac endpointID=206 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-tfv7f subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=aa11391a-6d69-4a79-b36f-53b44f7af719 k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=aa11391a-6d69-4a79-b36f-53b44f7af719 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=b991c8ccac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=206 identity=34269 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-tfv7f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.97 6ae51edf-f263-448d-8388-9f1cc22a20f2 default }" containerID=15dde4fec761483949f897501671ca2142c77bdeedc80eb82b8db348c1e9aa06 datapathConfiguration="&{false false false false false }" interface=lxc198b2bcb1df2 k8sPodName=openstack/cinder-storage-init-sd7t2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15dde4fec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1843 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/cinder-storage-init-sd7t2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15dde4fec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1843 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=2e43b534-f79a-4b82-8482-b77ec162ade4,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=2e43b534-f79a-4b82-8482-b77ec162ade4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/cinder-storage-init-sd7t2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=2e43b534-f79a-4b82-8482-b77ec162ade4;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=2e43b534-f79a-4b82-8482-b77ec162ade4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15dde4fec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1843 identity=51713 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=2e43b534-f79a-4b82-8482-b77ec162ade4,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=2e43b534-f79a-4b82-8482-b77ec162ade4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/cinder-storage-init-sd7t2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15dde4fec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1843 identity=51713 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/cinder-storage-init-sd7t2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=15dde4fec7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1843 identity=51713 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/cinder-storage-init-sd7t2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=15dde4fec7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1843 identity=51713 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/cinder-storage-init-sd7t2 subsys=daemon level=info msg="Delete endpoint request" containerID=15dde4fec7 endpointID=1843 k8sNamespace=openstack k8sPodName=cinder-storage-init-sd7t2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=2e43b534-f79a-4b82-8482-b77ec162ade4 k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=2e43b534-f79a-4b82-8482-b77ec162ade4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=15dde4fec7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1843 identity=51713 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/cinder-storage-init-sd7t2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 93905240-f01b-459a-adb1-0d58223a3d92 default }" containerID=d16860ac704a2f06a852864a9241347c54cf2b298d91b03e5fe159577ed054df datapathConfiguration="&{false false false false false }" interface=lxc710bce30d821 k8sPodName=openstack/cinder-bootstrap-sdbvs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d16860ac70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=68 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/cinder-bootstrap-sdbvs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d16860ac70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=68 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c82e5a6c-6d2a-4f57-b4a1-5d7566a10804,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=c82e5a6c-6d2a-4f57-b4a1-5d7566a10804,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/cinder-bootstrap-sdbvs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=c82e5a6c-6d2a-4f57-b4a1-5d7566a10804;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=c82e5a6c-6d2a-4f57-b4a1-5d7566a10804;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d16860ac70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=68 identity=7713 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c82e5a6c-6d2a-4f57-b4a1-5d7566a10804,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=c82e5a6c-6d2a-4f57-b4a1-5d7566a10804,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/cinder-bootstrap-sdbvs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d16860ac70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=68 identity=7713 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/cinder-bootstrap-sdbvs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d16860ac70 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=68 identity=7713 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/cinder-bootstrap-sdbvs subsys=endpoint level=info msg="Successful endpoint creation" containerID=d16860ac70 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=68 identity=7713 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/cinder-bootstrap-sdbvs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.250 f2a9f38e-15ff-4941-a5f1-e1f8a86a43de default }" containerID=c78f0ef939f32e370a264e685d9065e5592c50d0fdf14a6801f2d334c98fa3eb datapathConfiguration="&{false false false false false }" interface=lxc10ecad279038 k8sPodName=openstack/cinder-volume-7f974f9fc4-ffl6w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c78f0ef939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=840 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-volume-7f974f9fc4-ffl6w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c78f0ef939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=840 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-volume-7f974f9fc4-ffl6w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c78f0ef939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=840 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-volume-7f974f9fc4-ffl6w line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c78f0ef939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=840 identity=62584 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-volume-7f974f9fc4-ffl6w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c78f0ef939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=840 identity=62584 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-volume-7f974f9fc4-ffl6w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c78f0ef939 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=840 identity=62584 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-volume-7f974f9fc4-ffl6w subsys=endpoint level=info msg="Successful endpoint creation" containerID=c78f0ef939 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=840 identity=62584 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-volume-7f974f9fc4-ffl6w subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.153 59d37c4c-8bda-4920-9954-18bb245a1741 default }" containerID=ec5f87212191b9c21e737f5b114181de9f332b5dce0921d413321ca11dbc14b7 datapathConfiguration="&{false false false false false }" interface=lxc7fe957e658fd k8sPodName=openstack/cinder-backup-f5c6c8776-q6w2t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec5f872121 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=577 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/cinder-backup-f5c6c8776-q6w2t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec5f872121 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=577 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/cinder-backup-f5c6c8776-q6w2t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec5f872121 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=577 identity=34938 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/cinder-backup-f5c6c8776-q6w2t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec5f872121 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=577 identity=34938 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/cinder-backup-f5c6c8776-q6w2t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ec5f872121 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=577 identity=34938 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/cinder-backup-f5c6c8776-q6w2t subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec5f872121 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=577 identity=34938 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/cinder-backup-f5c6c8776-q6w2t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d16860ac70 endpointID=68 k8sNamespace=openstack k8sPodName=cinder-bootstrap-sdbvs subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=c82e5a6c-6d2a-4f57-b4a1-5d7566a10804 k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=c82e5a6c-6d2a-4f57-b4a1-5d7566a10804 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=d16860ac70 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=68 identity=7713 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/cinder-bootstrap-sdbvs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.24 ca44f3df-6007-4c4a-8091-bd5f9d472dfd default }" containerID=ff597f4c80e8757ad923ccea7fc17fbad3fdab2b147eef39cbb9dc8b8d859ee3 datapathConfiguration="&{false false false false false }" interface=lxcd664a42728ff k8sPodName=openstack/placement-api-74974758d6-c9b8z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff597f4c80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/placement-api-74974758d6-c9b8z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff597f4c80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/placement-api-74974758d6-c9b8z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ff597f4c80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.24 ipv6= k8sPodName=openstack/placement-api-74974758d6-c9b8z line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff597f4c80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 identity=3900 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/placement-api-74974758d6-c9b8z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ff597f4c80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 identity=3900 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/placement-api-74974758d6-c9b8z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ff597f4c80 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=431 identity=3900 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/placement-api-74974758d6-c9b8z subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff597f4c80 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=431 identity=3900 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/placement-api-74974758d6-c9b8z subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.57 e877782b-82d6-4c94-87ee-b1a0a65ecb81 default }" containerID=18dde994500c691c9f11752f4f0d7c68548b46fb29c817ebde20944e4ad44dd9 datapathConfiguration="&{false false false false false }" interface=lxc43ced6cab517 k8sPodName=openstack/placement-db-init-62297 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18dde99450 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1594 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-db-init-62297 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18dde99450 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1594 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=a26f1826-6190-4814-a0c9-1b1472b419dd,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=a26f1826-6190-4814-a0c9-1b1472b419dd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-db-init-62297 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=a26f1826-6190-4814-a0c9-1b1472b419dd;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=a26f1826-6190-4814-a0c9-1b1472b419dd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=18dde99450 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1594 identity=8287 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=a26f1826-6190-4814-a0c9-1b1472b419dd,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=a26f1826-6190-4814-a0c9-1b1472b419dd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-db-init-62297 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=18dde99450 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1594 identity=8287 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-db-init-62297 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=18dde99450 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1594 identity=8287 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-db-init-62297 subsys=endpoint level=info msg="Successful endpoint creation" containerID=18dde99450 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1594 identity=8287 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-db-init-62297 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=18dde99450 endpointID=1594 k8sNamespace=openstack k8sPodName=placement-db-init-62297 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=a26f1826-6190-4814-a0c9-1b1472b419dd k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=a26f1826-6190-4814-a0c9-1b1472b419dd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=18dde99450 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1594 identity=8287 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-db-init-62297 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.88 14d5cd72-370e-4797-a8fe-14f95facef30 default }" containerID=208b2d2ae5b3a3cd79c961bf8d114d196880d4ea759f55abb828b76166e08430 datapathConfiguration="&{false false false false false }" interface=lxcfad70810c457 k8sPodName=openstack/placement-db-sync-cjhns labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=208b2d2ae5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1055 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/placement-db-sync-cjhns subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=208b2d2ae5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1055 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=e9446a5a-474a-4908-b14d-e7fee73ef8b7,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=e9446a5a-474a-4908-b14d-e7fee73ef8b7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/placement-db-sync-cjhns subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=e9446a5a-474a-4908-b14d-e7fee73ef8b7;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=e9446a5a-474a-4908-b14d-e7fee73ef8b7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=208b2d2ae5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1055 identity=44838 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=e9446a5a-474a-4908-b14d-e7fee73ef8b7,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=e9446a5a-474a-4908-b14d-e7fee73ef8b7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/placement-db-sync-cjhns oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=208b2d2ae5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1055 identity=44838 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/placement-db-sync-cjhns subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=208b2d2ae5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1055 identity=44838 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/placement-db-sync-cjhns subsys=endpoint level=info msg="Successful endpoint creation" containerID=208b2d2ae5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1055 identity=44838 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/placement-db-sync-cjhns subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=208b2d2ae5 endpointID=1055 k8sNamespace=openstack k8sPodName=placement-db-sync-cjhns subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=e9446a5a-474a-4908-b14d-e7fee73ef8b7 k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=e9446a5a-474a-4908-b14d-e7fee73ef8b7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=208b2d2ae5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1055 identity=44838 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/placement-db-sync-cjhns subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 c642aa8e-79e1-466a-8fd4-047e01e1fb0a default }" containerID=9469b99aad1b184ff8757f985758f671c35a706fb440dc947ea5bf91e8478b5b datapathConfiguration="&{false false false false false }" interface=lxc3016e2c7f711 k8sPodName=openstack/placement-ks-service-5zpd5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9469b99aad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/placement-ks-service-5zpd5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9469b99aad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=cfaed0fe-e098-4aba-8b70-50e33ae42cb7,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=cfaed0fe-e098-4aba-8b70-50e33ae42cb7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/placement-ks-service-5zpd5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=cfaed0fe-e098-4aba-8b70-50e33ae42cb7;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=cfaed0fe-e098-4aba-8b70-50e33ae42cb7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9469b99aad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identity=59471 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=cfaed0fe-e098-4aba-8b70-50e33ae42cb7,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=cfaed0fe-e098-4aba-8b70-50e33ae42cb7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/placement-ks-service-5zpd5 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9469b99aad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=613 identity=59471 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/placement-ks-service-5zpd5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9469b99aad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=613 identity=59471 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/placement-ks-service-5zpd5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9469b99aad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=613 identity=59471 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/placement-ks-service-5zpd5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9469b99aad endpointID=613 k8sNamespace=openstack k8sPodName=placement-ks-service-5zpd5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=cfaed0fe-e098-4aba-8b70-50e33ae42cb7 k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=cfaed0fe-e098-4aba-8b70-50e33ae42cb7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=9469b99aad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=613 identity=59471 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/placement-ks-service-5zpd5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 0fc9b316-757e-4b95-a9f6-d539b3b17a70 default }" containerID=4db5e3bcc70522dca0cfc74596743890469d9374d3522c0162c705a1b257da29 datapathConfiguration="&{false false false false false }" interface=lxcaada9babb30d k8sPodName=openstack/placement-ks-user-2bjnb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4db5e3bcc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=513 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/placement-ks-user-2bjnb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4db5e3bcc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=513 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=ea61caf9-290f-486c-ab3f-82f4bca3bc33,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=ea61caf9-290f-486c-ab3f-82f4bca3bc33,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/placement-ks-user-2bjnb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=ea61caf9-290f-486c-ab3f-82f4bca3bc33;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=ea61caf9-290f-486c-ab3f-82f4bca3bc33;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4db5e3bcc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=513 identity=20912 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=ea61caf9-290f-486c-ab3f-82f4bca3bc33,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=ea61caf9-290f-486c-ab3f-82f4bca3bc33,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/placement-ks-user-2bjnb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4db5e3bcc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=513 identity=20912 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/placement-ks-user-2bjnb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4db5e3bcc7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=513 identity=20912 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/placement-ks-user-2bjnb subsys=endpoint level=info msg="Successful endpoint creation" containerID=4db5e3bcc7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=513 identity=20912 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/placement-ks-user-2bjnb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4db5e3bcc7 endpointID=513 k8sNamespace=openstack k8sPodName=placement-ks-user-2bjnb subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=ea61caf9-290f-486c-ab3f-82f4bca3bc33 k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=ea61caf9-290f-486c-ab3f-82f4bca3bc33 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=4db5e3bcc7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=513 identity=20912 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/placement-ks-user-2bjnb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 b0be6870-aede-4303-9905-6450c9c3abd9 default }" containerID=ebd566c39408a8dd9d2905e582dfd2105114cee2638dc1b514e4f4b078f55261 datapathConfiguration="&{false false false false false }" interface=lxc9b7c84e28971 k8sPodName=openstack/placement-ks-endpoints-5r6tj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ebd566c394 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3449 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/placement-ks-endpoints-5r6tj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ebd566c394 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3449 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=9b1225a0-d060-4bf8-96c6-fb0f19e98a11,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=9b1225a0-d060-4bf8-96c6-fb0f19e98a11,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/placement-ks-endpoints-5r6tj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ebd566c394 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3449 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.178 ipv6= k8sPodName=openstack/placement-ks-endpoints-5r6tj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=9b1225a0-d060-4bf8-96c6-fb0f19e98a11;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=9b1225a0-d060-4bf8-96c6-fb0f19e98a11;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ebd566c394 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3449 identity=55250 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=9b1225a0-d060-4bf8-96c6-fb0f19e98a11,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=9b1225a0-d060-4bf8-96c6-fb0f19e98a11,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/placement-ks-endpoints-5r6tj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ebd566c394 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3449 identity=55250 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/placement-ks-endpoints-5r6tj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ebd566c394 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3449 identity=55250 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/placement-ks-endpoints-5r6tj subsys=endpoint level=info msg="Successful endpoint creation" containerID=ebd566c394 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3449 identity=55250 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/placement-ks-endpoints-5r6tj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ebd566c394 endpointID=3449 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-5r6tj subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=9b1225a0-d060-4bf8-96c6-fb0f19e98a11 k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=9b1225a0-d060-4bf8-96c6-fb0f19e98a11 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=ebd566c394 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3449 identity=55250 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/placement-ks-endpoints-5r6tj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 670294e0-d7bd-48f3-a361-b081d27b26dc default }" containerID=538b9936ca4eb51232ddae17bf88c4d819ab693cb0f8f786e48cf7d23eba6e4e datapathConfiguration="&{false false false false false }" interface=lxc115d1eb21c14 k8sPodName=openstack/neutron-coredns-7dd4958666-vsztp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=538b9936ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3334 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-vsztp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=538b9936ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3334 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-vsztp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=neutron-coredns;k8s:app.kubernetes.io/name=coredns;k8s:application=neutron;k8s:component=coredns;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=538b9936ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3334 identity=34688 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-vsztp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=538b9936ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3334 identity=34688 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-vsztp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=538b9936ca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3334 identity=34688 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-vsztp subsys=endpoint level=info msg="Successful endpoint creation" containerID=538b9936ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3334 identity=34688 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-vsztp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.223 ec498bc0-9119-45d0-b610-f15c2e6735e8 default }" containerID=aed7a6c1feaf0cc50917e7c79b1ed190fb9bdc1266224611ee9779055d898b7f datapathConfiguration="&{false false false false false }" interface=lxc18643caffa61 k8sPodName=local-path-storage/helper-pod-create-pvc-0ff20626-7abc-4871-83ca-1122df9b3796 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aed7a6c1fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1703 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0ff20626-7abc-4871-83ca-1122df9b3796 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aed7a6c1fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1703 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0ff20626-7abc-4871-83ca-1122df9b3796 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aed7a6c1fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1703 identity=1424 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0ff20626-7abc-4871-83ca-1122df9b3796 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aed7a6c1fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1703 identity=1424 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0ff20626-7abc-4871-83ca-1122df9b3796 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aed7a6c1fe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1703 identity=1424 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0ff20626-7abc-4871-83ca-1122df9b3796 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aed7a6c1fe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1703 identity=1424 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0ff20626-7abc-4871-83ca-1122df9b3796 subsys=daemon level=info msg="Delete endpoint request" containerID=aed7a6c1fe endpointID=1703 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0ff20626-7abc-4871-83ca-1122df9b3796 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=aed7a6c1fe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1703 identity=1424 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0ff20626-7abc-4871-83ca-1122df9b3796 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 3a26ec62-a942-4a50-8def-836ea5213bf2 default }" containerID=782eb9d1d72d9154e7ee668456dfaf95658db27ca327d046540e218622801b4f datapathConfiguration="&{false false false false false }" interface=lxce5625c17340a k8sPodName=openstack/rabbitmq-nova-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=782eb9d1d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1913 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=782eb9d1d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1913 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-nova;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=782eb9d1d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1913 identity=32307 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=782eb9d1d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1913 identity=32307 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=782eb9d1d7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1913 identity=32307 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=782eb9d1d7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1913 identity=32307 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.155 bad45711-f221-4ca6-b310-690f731e54d8 default }" containerID=97b4b552fb18f4987749c20e70ec53ad6dd3a95ea04c303d9a0b8836ede8638d datapathConfiguration="&{false false false false false }" interface=lxc0a72815e2681 k8sPodName=openstack/nova-conductor-5ff89ccd99-j9br7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=97b4b552fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=873 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/nova-conductor-5ff89ccd99-j9br7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=97b4b552fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=873 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/nova-conductor-5ff89ccd99-j9br7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.199 78eb114e-0104-4bbc-90c3-307b03ea93bf default }" containerID=3f2e637face05595d736a257d0cc84d4e85cbd0c402a5d8bfd462081ec51a95d datapathConfiguration="&{false false false false false }" interface=lxca92324b54793 k8sPodName=openstack/nova-api-metadata-6c78885969-7mnvw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3f2e637fac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=231 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/nova-api-metadata-6c78885969-7mnvw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3f2e637fac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=231 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/nova-api-metadata-6c78885969-7mnvw subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=97b4b552fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=873 identity=5560 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/nova-conductor-5ff89ccd99-j9br7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=97b4b552fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=873 identity=5560 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/nova-conductor-5ff89ccd99-j9br7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3f2e637fac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=231 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.199 ipv6= k8sPodName=openstack/nova-api-metadata-6c78885969-7mnvw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=metadata;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3f2e637fac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=231 identity=9088 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/nova-api-metadata-6c78885969-7mnvw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3f2e637fac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=231 identity=9088 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/nova-api-metadata-6c78885969-7mnvw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.240 94b1dda3-8261-41d2-af41-35a989644231 default }" containerID=ad091e5bd3664245ec8b76e9a830aee4d5a1f20f1c97eb4958fd01ec104121d1 datapathConfiguration="&{false false false false false }" interface=lxc814818a16036 k8sPodName=openstack/nova-scheduler-867c6cf547-pf75p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad091e5bd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3388 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/nova-scheduler-867c6cf547-pf75p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad091e5bd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3388 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/nova-scheduler-867c6cf547-pf75p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad091e5bd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3388 identity=5476 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/nova-scheduler-867c6cf547-pf75p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad091e5bd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3388 identity=5476 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/nova-scheduler-867c6cf547-pf75p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 83fada21-e056-4be9-a655-5dcb7475bd23 default }" containerID=be15769520190b0564c7c664f67453ebe66b28ae2bf418184977f0dfee09d9d6 datapathConfiguration="&{false false false false false }" interface=lxc477ca30ee984 k8sPodName=openstack/nova-db-init-ljm47 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=be15769520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2868 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/nova-db-init-ljm47 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=be15769520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2868 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=f6625dba-6a8d-4ba1-b309-1227ef6e0728,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=f6625dba-6a8d-4ba1-b309-1227ef6e0728,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/nova-db-init-ljm47 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=f6625dba-6a8d-4ba1-b309-1227ef6e0728;k8s:batch.kubernetes.io/job-name=nova-db-init;k8s:component=db-init;k8s:controller-uid=f6625dba-6a8d-4ba1-b309-1227ef6e0728;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=be15769520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2868 identity=21092 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=f6625dba-6a8d-4ba1-b309-1227ef6e0728,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=f6625dba-6a8d-4ba1-b309-1227ef6e0728,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/nova-db-init-ljm47 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=be15769520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2868 identity=21092 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/nova-db-init-ljm47 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=97b4b552fb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=873 identity=5560 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/nova-conductor-5ff89ccd99-j9br7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=97b4b552fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=873 identity=5560 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/nova-conductor-5ff89ccd99-j9br7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3f2e637fac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=231 identity=9088 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/nova-api-metadata-6c78885969-7mnvw subsys=endpoint level=info msg="Successful endpoint creation" containerID=3f2e637fac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=231 identity=9088 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/nova-api-metadata-6c78885969-7mnvw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ad091e5bd3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3388 identity=5476 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/nova-scheduler-867c6cf547-pf75p subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad091e5bd3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3388 identity=5476 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/nova-scheduler-867c6cf547-pf75p subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.221 3b4cb147-9a93-4ee1-ac0b-a370b879e02a default }" containerID=82d13fa421193ef53a244c13354b9192b2e8144c55b2df801a3e7f6906b9e6b3 datapathConfiguration="&{false false false false false }" interface=lxc6a5d7558ec6d k8sPodName=openstack/nova-api-osapi-78fd755db9-njmzh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=82d13fa421 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3608 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/nova-api-osapi-78fd755db9-njmzh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=82d13fa421 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3608 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/nova-api-osapi-78fd755db9-njmzh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=os-api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=82d13fa421 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3608 identity=10387 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/nova-api-osapi-78fd755db9-njmzh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=82d13fa421 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3608 identity=10387 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/nova-api-osapi-78fd755db9-njmzh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=be15769520 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2868 identity=21092 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/nova-db-init-ljm47 subsys=endpoint level=info msg="Successful endpoint creation" containerID=be15769520 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2868 identity=21092 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/nova-db-init-ljm47 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.115 f507d454-a5d4-4885-958a-e5c0cd84db3a default }" containerID=523cb49bbe950917e2ca1fd9e694ecc6432b1daa21c6105d51ceedbdfb285dc7 datapathConfiguration="&{false false false false false }" interface=lxcb7925b58875e k8sPodName=openstack/nova-cell-setup-vv282 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=523cb49bbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3256 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/nova-cell-setup-vv282 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=523cb49bbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3256 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=79fd23d4-a4e2-4a72-b882-bc1e8dd901cb,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=79fd23d4-a4e2-4a72-b882-bc1e8dd901cb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/nova-cell-setup-vv282 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.25 e5924837-0f5c-449d-9c17-2f58627f6e5b default }" containerID=57707da40c4afa097ba4761616d197cae7d17951f4af223e12b3e2dc4faf5e3f datapathConfiguration="&{false false false false false }" interface=lxcde2d714225e0 k8sPodName=openstack/nova-bootstrap-fct8h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57707da40c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=371 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/nova-bootstrap-fct8h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57707da40c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=371 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=e59ccd94-8dab-4e35-b3c1-e3a764cad236,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=e59ccd94-8dab-4e35-b3c1-e3a764cad236,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/nova-bootstrap-fct8h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=82d13fa421 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3608 identity=10387 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/nova-api-osapi-78fd755db9-njmzh subsys=endpoint level=info msg="Successful endpoint creation" containerID=82d13fa421 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3608 identity=10387 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/nova-api-osapi-78fd755db9-njmzh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=523cb49bbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3256 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.115 ipv6= k8sPodName=openstack/nova-cell-setup-vv282 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=57707da40c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=371 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.25 ipv6= k8sPodName=openstack/nova-bootstrap-fct8h line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=79fd23d4-a4e2-4a72-b882-bc1e8dd901cb;k8s:batch.kubernetes.io/job-name=nova-cell-setup;k8s:component=cell-setup;k8s:controller-uid=79fd23d4-a4e2-4a72-b882-bc1e8dd901cb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=523cb49bbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3256 identity=28687 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=79fd23d4-a4e2-4a72-b882-bc1e8dd901cb,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=79fd23d4-a4e2-4a72-b882-bc1e8dd901cb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/nova-cell-setup-vv282 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=523cb49bbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3256 identity=28687 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/nova-cell-setup-vv282 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=523cb49bbe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3256 identity=28687 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/nova-cell-setup-vv282 subsys=endpoint level=info msg="Successful endpoint creation" containerID=523cb49bbe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3256 identity=28687 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/nova-cell-setup-vv282 subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=e59ccd94-8dab-4e35-b3c1-e3a764cad236;k8s:batch.kubernetes.io/job-name=nova-bootstrap;k8s:component=bootstrap;k8s:controller-uid=e59ccd94-8dab-4e35-b3c1-e3a764cad236;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-bootstrap;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=57707da40c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=371 identity=18564 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=e59ccd94-8dab-4e35-b3c1-e3a764cad236,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=e59ccd94-8dab-4e35-b3c1-e3a764cad236,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/nova-bootstrap-fct8h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=57707da40c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=371 identity=18564 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/nova-bootstrap-fct8h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=57707da40c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=371 identity=18564 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/nova-bootstrap-fct8h subsys=endpoint level=info msg="Successful endpoint creation" containerID=57707da40c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=371 identity=18564 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/nova-bootstrap-fct8h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.49 eb52f662-236a-4359-a69f-6ea0d18f3769 default }" containerID=e86d52296026972e23b171b189b2cc9bc0cd3214fb4faa3b1f35e5eed3bb1612 datapathConfiguration="&{false false false false false }" interface=lxc36ef8d12cd87 k8sPodName=openstack/nova-novncproxy-85d6fd8db6-j749p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e86d522960 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/nova-novncproxy-85d6fd8db6-j749p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e86d522960 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/nova-novncproxy-85d6fd8db6-j749p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=novnc-proxy;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e86d522960 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identity=1271 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/nova-novncproxy-85d6fd8db6-j749p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e86d522960 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identity=1271 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/nova-novncproxy-85d6fd8db6-j749p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e86d522960 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=45 identity=1271 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/nova-novncproxy-85d6fd8db6-j749p subsys=endpoint level=info msg="Successful endpoint creation" containerID=e86d522960 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=45 identity=1271 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/nova-novncproxy-85d6fd8db6-j749p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=be15769520 endpointID=2868 k8sNamespace=openstack k8sPodName=nova-db-init-ljm47 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=f6625dba-6a8d-4ba1-b309-1227ef6e0728 k8s:batch.kubernetes.io/job-name=nova-db-init k8s:component=db-init k8s:controller-uid=f6625dba-6a8d-4ba1-b309-1227ef6e0728 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=be15769520 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2868 identity=21092 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/nova-db-init-ljm47 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.135 7932eb5b-889d-446f-9787-89cf2aefe02f default }" containerID=8af5f87a5ae349f428afce5156f03f0e2b7de2a3bf2d85aa5082b857e330947b datapathConfiguration="&{false false false false false }" interface=lxc8c5c7f54e63e k8sPodName=openstack/nova-db-sync-kshhl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8af5f87a5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/nova-db-sync-kshhl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8af5f87a5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=3af17af4-415a-4299-ae59-b9213c7c4736,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=3af17af4-415a-4299-ae59-b9213c7c4736,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/nova-db-sync-kshhl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=3af17af4-415a-4299-ae59-b9213c7c4736;k8s:batch.kubernetes.io/job-name=nova-db-sync;k8s:component=db-sync;k8s:controller-uid=3af17af4-415a-4299-ae59-b9213c7c4736;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-sync;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8af5f87a5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 identity=21919 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=3af17af4-415a-4299-ae59-b9213c7c4736,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=3af17af4-415a-4299-ae59-b9213c7c4736,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/nova-db-sync-kshhl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8af5f87a5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 identity=21919 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/nova-db-sync-kshhl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8af5f87a5a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=351 identity=21919 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/nova-db-sync-kshhl subsys=endpoint level=info msg="Successful endpoint creation" containerID=8af5f87a5a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=351 identity=21919 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/nova-db-sync-kshhl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8af5f87a5a endpointID=351 k8sNamespace=openstack k8sPodName=nova-db-sync-kshhl subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=3af17af4-415a-4299-ae59-b9213c7c4736 k8s:batch.kubernetes.io/job-name=nova-db-sync k8s:component=db-sync k8s:controller-uid=3af17af4-415a-4299-ae59-b9213c7c4736 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-sync k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=8af5f87a5a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=351 identity=21919 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/nova-db-sync-kshhl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 8d61dfef-af1f-4eb3-9eff-fef0ceab08e3 default }" containerID=389cedf7397e83fc336690b326c6e66acf62cc4d14b8f40cdd176a20523836e4 datapathConfiguration="&{false false false false false }" interface=lxc77535142f745 k8sPodName=openstack/nova-rabbit-init-dtsbx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=389cedf739 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2077 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/nova-rabbit-init-dtsbx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=389cedf739 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2077 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=0851dae3-cbe9-49d6-bbb2-73da2394adc8,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0851dae3-cbe9-49d6-bbb2-73da2394adc8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/nova-rabbit-init-dtsbx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=0851dae3-cbe9-49d6-bbb2-73da2394adc8;k8s:batch.kubernetes.io/job-name=nova-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=0851dae3-cbe9-49d6-bbb2-73da2394adc8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-rabbit-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=389cedf739 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2077 identity=13745 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=0851dae3-cbe9-49d6-bbb2-73da2394adc8,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0851dae3-cbe9-49d6-bbb2-73da2394adc8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/nova-rabbit-init-dtsbx oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=389cedf739 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2077 identity=13745 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/nova-rabbit-init-dtsbx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=389cedf739 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2077 identity=13745 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/nova-rabbit-init-dtsbx subsys=endpoint level=info msg="Successful endpoint creation" containerID=389cedf739 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2077 identity=13745 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/nova-rabbit-init-dtsbx subsys=daemon level=info msg="Delete endpoint request" containerID=389cedf739 endpointID=2077 k8sNamespace=openstack k8sPodName=nova-rabbit-init-dtsbx subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=0851dae3-cbe9-49d6-bbb2-73da2394adc8 k8s:batch.kubernetes.io/job-name=nova-rabbit-init k8s:component=rabbit-init k8s:controller-uid=0851dae3-cbe9-49d6-bbb2-73da2394adc8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-rabbit-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=389cedf739 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2077 identity=13745 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/nova-rabbit-init-dtsbx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.167 f5bd9358-f427-4abc-8199-b3f7ca5375e1 default }" containerID=8bad781c3b303c29f8256288a333f6021483e69533c48defd9a45314a6284f88 datapathConfiguration="&{false false false false false }" interface=lxc66e82230dc70 k8sPodName=openstack/nova-ks-service-7mhqs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8bad781c3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1233 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/nova-ks-service-7mhqs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8bad781c3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1233 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=59636048-3719-4d11-9f79-e4b594a46ddc,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=59636048-3719-4d11-9f79-e4b594a46ddc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/nova-ks-service-7mhqs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=59636048-3719-4d11-9f79-e4b594a46ddc;k8s:batch.kubernetes.io/job-name=nova-ks-service;k8s:component=ks-service;k8s:controller-uid=59636048-3719-4d11-9f79-e4b594a46ddc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-service;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8bad781c3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1233 identity=61314 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=59636048-3719-4d11-9f79-e4b594a46ddc,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=59636048-3719-4d11-9f79-e4b594a46ddc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/nova-ks-service-7mhqs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8bad781c3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1233 identity=61314 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/nova-ks-service-7mhqs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8bad781c3b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1233 identity=61314 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/nova-ks-service-7mhqs subsys=endpoint level=info msg="Successful endpoint creation" containerID=8bad781c3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1233 identity=61314 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/nova-ks-service-7mhqs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8bad781c3b endpointID=1233 k8sNamespace=openstack k8sPodName=nova-ks-service-7mhqs subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=59636048-3719-4d11-9f79-e4b594a46ddc k8s:batch.kubernetes.io/job-name=nova-ks-service k8s:component=ks-service k8s:controller-uid=59636048-3719-4d11-9f79-e4b594a46ddc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-service k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=8bad781c3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1233 identity=61314 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/nova-ks-service-7mhqs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 7397771d-729a-417e-a295-d213a4fcf120 default }" containerID=ed25bb057b5d28152695b35478da0036212345186929b87778c0d840d3bfa62f datapathConfiguration="&{false false false false false }" interface=lxc11cffe9ff6c2 k8sPodName=openstack/nova-ks-endpoints-n4s74 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed25bb057b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=464 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/nova-ks-endpoints-n4s74 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed25bb057b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=464 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=2f127219-eb73-4742-b6f4-0a2507ae6789,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=2f127219-eb73-4742-b6f4-0a2507ae6789,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/nova-ks-endpoints-n4s74 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ed25bb057b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=464 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.16 ipv6= k8sPodName=openstack/nova-ks-endpoints-n4s74 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=2f127219-eb73-4742-b6f4-0a2507ae6789;k8s:batch.kubernetes.io/job-name=nova-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=2f127219-eb73-4742-b6f4-0a2507ae6789;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-endpoints;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed25bb057b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=464 identity=10948 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=2f127219-eb73-4742-b6f4-0a2507ae6789,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=2f127219-eb73-4742-b6f4-0a2507ae6789,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/nova-ks-endpoints-n4s74 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed25bb057b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=464 identity=10948 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/nova-ks-endpoints-n4s74 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ed25bb057b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=464 identity=10948 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/nova-ks-endpoints-n4s74 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed25bb057b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=464 identity=10948 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/nova-ks-endpoints-n4s74 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ed25bb057b endpointID=464 k8sNamespace=openstack k8sPodName=nova-ks-endpoints-n4s74 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=2f127219-eb73-4742-b6f4-0a2507ae6789 k8s:batch.kubernetes.io/job-name=nova-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=2f127219-eb73-4742-b6f4-0a2507ae6789 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-endpoints k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=ed25bb057b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=464 identity=10948 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/nova-ks-endpoints-n4s74 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.52 1c6358a6-689a-4390-a92a-22d40c210727 default }" containerID=0b03e5a0018962fd05b1bd7a7b5129037a526716eb81fe08ac11fad7a768ab56 datapathConfiguration="&{false false false false false }" interface=lxc6eb0468ef874 k8sPodName=openstack/nova-ks-user-tsdzs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b03e5a001 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/nova-ks-user-tsdzs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b03e5a001 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=524d0fd1-3a0e-40b3-b13b-d4e4d277b8fd,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=524d0fd1-3a0e-40b3-b13b-d4e4d277b8fd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/nova-ks-user-tsdzs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=524d0fd1-3a0e-40b3-b13b-d4e4d277b8fd;k8s:batch.kubernetes.io/job-name=nova-ks-user;k8s:component=ks-user;k8s:controller-uid=524d0fd1-3a0e-40b3-b13b-d4e4d277b8fd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-user;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b03e5a001 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identity=42894 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=524d0fd1-3a0e-40b3-b13b-d4e4d277b8fd,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=524d0fd1-3a0e-40b3-b13b-d4e4d277b8fd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/nova-ks-user-tsdzs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b03e5a001 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identity=42894 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/nova-ks-user-tsdzs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0b03e5a001 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1479 identity=42894 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/nova-ks-user-tsdzs subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b03e5a001 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1479 identity=42894 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/nova-ks-user-tsdzs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0b03e5a001 endpointID=1479 k8sNamespace=openstack k8sPodName=nova-ks-user-tsdzs subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=524d0fd1-3a0e-40b3-b13b-d4e4d277b8fd k8s:batch.kubernetes.io/job-name=nova-ks-user k8s:component=ks-user k8s:controller-uid=524d0fd1-3a0e-40b3-b13b-d4e4d277b8fd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-user k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=0b03e5a001 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1479 identity=42894 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/nova-ks-user-tsdzs subsys=endpoint level=info msg="Delete endpoint request" containerID=57707da40c endpointID=371 k8sNamespace=openstack k8sPodName=nova-bootstrap-fct8h subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=e59ccd94-8dab-4e35-b3c1-e3a764cad236 k8s:batch.kubernetes.io/job-name=nova-bootstrap k8s:component=bootstrap k8s:controller-uid=e59ccd94-8dab-4e35-b3c1-e3a764cad236 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-bootstrap k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=57707da40c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=371 identity=18564 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/nova-bootstrap-fct8h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 9b2a82d0-2ae5-4bfa-b2d4-8fe7d444a956 default }" containerID=830acd9742ddedc9f459955c040512b8233879c1694c75908f293c7d279dee84 datapathConfiguration="&{false false false false false }" interface=lxc5bf06794b60f k8sPodName=local-path-storage/helper-pod-create-pvc-557cabfc-62ef-4827-92bb-b674052b2129 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=830acd9742 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3225 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-557cabfc-62ef-4827-92bb-b674052b2129 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=830acd9742 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3225 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-557cabfc-62ef-4827-92bb-b674052b2129 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=830acd9742 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3225 identity=1424 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-557cabfc-62ef-4827-92bb-b674052b2129 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=830acd9742 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3225 identity=1424 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-557cabfc-62ef-4827-92bb-b674052b2129 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=830acd9742 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3225 identity=1424 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-557cabfc-62ef-4827-92bb-b674052b2129 subsys=endpoint level=info msg="Successful endpoint creation" containerID=830acd9742 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3225 identity=1424 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-557cabfc-62ef-4827-92bb-b674052b2129 subsys=daemon level=info msg="Delete endpoint request" containerID=830acd9742 endpointID=3225 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-557cabfc-62ef-4827-92bb-b674052b2129 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=830acd9742 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3225 identity=1424 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-557cabfc-62ef-4827-92bb-b674052b2129 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 cbeb543a-6c95-4fce-b901-823708b86f73 default }" containerID=9996e6a298dd3b1669765789313836079e7179a5b9bf0967bb2fd3f234bf7094 datapathConfiguration="&{false false false false false }" interface=lxc2d7fc0afd831 k8sPodName=openstack/rabbitmq-neutron-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9996e6a298 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9996e6a298 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-neutron;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9996e6a298 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 identity=19968 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9996e6a298 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 identity=19968 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9996e6a298 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=589 identity=19968 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9996e6a298 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=589 identity=19968 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.246 8b35b17c-aabf-42d7-b474-7f279fdd7309 default }" containerID=3a1b84649c0ed4d09aaccb3f499d8f0a4a6f76749bf085b69fe5707d17a7de07 datapathConfiguration="&{false false false false false }" interface=lxcf6c4dfbe8fdb k8sPodName=openstack/neutron-rpc-server-7f9f67c5f8-vjrcm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3a1b84649c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=321 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/neutron-rpc-server-7f9f67c5f8-vjrcm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a1b84649c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=321 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/neutron-rpc-server-7f9f67c5f8-vjrcm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=rpc_server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a1b84649c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=321 identity=36497 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/neutron-rpc-server-7f9f67c5f8-vjrcm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a1b84649c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=321 identity=36497 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/neutron-rpc-server-7f9f67c5f8-vjrcm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.185 a7400a9e-296c-4441-8d5e-705f48e2ef64 default }" containerID=84eec262b1a52b7225cdec1b0532f4fd058cbc78993d6e56497efb4143660876 datapathConfiguration="&{false false false false false }" interface=lxc6ece03624874 k8sPodName=openstack/neutron-server-7d8f674dd9-hx996 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=84eec262b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1742 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/neutron-server-7d8f674dd9-hx996 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=84eec262b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1742 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/neutron-server-7d8f674dd9-hx996 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=84eec262b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1742 identity=50768 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/neutron-server-7d8f674dd9-hx996 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=84eec262b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1742 identity=50768 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/neutron-server-7d8f674dd9-hx996 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.96 408329e9-8265-4d17-b621-ec3feb52f26f default }" containerID=f838c5f381fcde5cead0ef76d70802254922c561ec79f97720b683f0ab8ffb4d datapathConfiguration="&{false false false false false }" interface=lxce7eb4170efc9 k8sPodName=openstack/neutron-db-init-8d9bw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f838c5f381 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/neutron-db-init-8d9bw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f838c5f381 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=d5015b3e-9771-487f-8ec9-bd6c274caa80,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=d5015b3e-9771-487f-8ec9-bd6c274caa80,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/neutron-db-init-8d9bw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=d5015b3e-9771-487f-8ec9-bd6c274caa80;k8s:batch.kubernetes.io/job-name=neutron-db-init;k8s:component=db-init;k8s:controller-uid=d5015b3e-9771-487f-8ec9-bd6c274caa80;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f838c5f381 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identity=45944 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=d5015b3e-9771-487f-8ec9-bd6c274caa80,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=d5015b3e-9771-487f-8ec9-bd6c274caa80,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/neutron-db-init-8d9bw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f838c5f381 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identity=45944 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/neutron-db-init-8d9bw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3a1b84649c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=321 identity=36497 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/neutron-rpc-server-7f9f67c5f8-vjrcm subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a1b84649c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=321 identity=36497 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/neutron-rpc-server-7f9f67c5f8-vjrcm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f838c5f381 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=560 identity=45944 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/neutron-db-init-8d9bw subsys=endpoint level=info msg="Successful endpoint creation" containerID=f838c5f381 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=560 identity=45944 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/neutron-db-init-8d9bw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=84eec262b1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1742 identity=50768 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/neutron-server-7d8f674dd9-hx996 subsys=endpoint level=info msg="Successful endpoint creation" containerID=84eec262b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1742 identity=50768 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/neutron-server-7d8f674dd9-hx996 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f838c5f381 endpointID=560 k8sNamespace=openstack k8sPodName=neutron-db-init-8d9bw subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=d5015b3e-9771-487f-8ec9-bd6c274caa80 k8s:batch.kubernetes.io/job-name=neutron-db-init k8s:component=db-init k8s:controller-uid=d5015b3e-9771-487f-8ec9-bd6c274caa80 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=f838c5f381 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=560 identity=45944 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/neutron-db-init-8d9bw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 b891f2ac-0f08-4e0f-9432-21c1767fb3b9 default }" containerID=89b5a9d37ba73698c312c40f035bb6cd4c5ee48fb4534f2ed0a824fc1fe89b6c datapathConfiguration="&{false false false false false }" interface=lxcad4343ab3eff k8sPodName=openstack/neutron-db-sync-j6jrm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=89b5a9d37b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/neutron-db-sync-j6jrm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=89b5a9d37b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=03776b99-3090-4bcb-9f9b-7f18000e4047,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=03776b99-3090-4bcb-9f9b-7f18000e4047,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/neutron-db-sync-j6jrm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=89b5a9d37b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.72 ipv6= k8sPodName=openstack/neutron-db-sync-j6jrm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=03776b99-3090-4bcb-9f9b-7f18000e4047;k8s:batch.kubernetes.io/job-name=neutron-db-sync;k8s:component=db-sync;k8s:controller-uid=03776b99-3090-4bcb-9f9b-7f18000e4047;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-sync;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=89b5a9d37b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 identity=6460 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=03776b99-3090-4bcb-9f9b-7f18000e4047,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=03776b99-3090-4bcb-9f9b-7f18000e4047,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/neutron-db-sync-j6jrm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=89b5a9d37b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 identity=6460 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/neutron-db-sync-j6jrm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=89b5a9d37b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=824 identity=6460 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/neutron-db-sync-j6jrm subsys=endpoint level=info msg="Successful endpoint creation" containerID=89b5a9d37b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=824 identity=6460 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/neutron-db-sync-j6jrm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=89b5a9d37b endpointID=824 k8sNamespace=openstack k8sPodName=neutron-db-sync-j6jrm subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=03776b99-3090-4bcb-9f9b-7f18000e4047 k8s:batch.kubernetes.io/job-name=neutron-db-sync k8s:component=db-sync k8s:controller-uid=03776b99-3090-4bcb-9f9b-7f18000e4047 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-sync k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=89b5a9d37b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=824 identity=6460 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/neutron-db-sync-j6jrm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.52 0de4d738-adfd-47fe-aa7d-d0c8d68df761 default }" containerID=eb9ea56e20d6d4d9c49d0d57a2989fcd45434bb897554d25386978f4bed03a74 datapathConfiguration="&{false false false false false }" interface=lxcbfd16af917fe k8sPodName=openstack/neutron-rabbit-init-z4xjn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb9ea56e20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=179 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/neutron-rabbit-init-z4xjn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb9ea56e20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=179 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=fb7f01e0-c830-4142-85ae-139d3fc7fef0,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=fb7f01e0-c830-4142-85ae-139d3fc7fef0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/neutron-rabbit-init-z4xjn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=fb7f01e0-c830-4142-85ae-139d3fc7fef0;k8s:batch.kubernetes.io/job-name=neutron-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=fb7f01e0-c830-4142-85ae-139d3fc7fef0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-rabbit-init;k8s:release_group=neutron;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=eb9ea56e20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=179 identity=44206 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=fb7f01e0-c830-4142-85ae-139d3fc7fef0,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=fb7f01e0-c830-4142-85ae-139d3fc7fef0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/neutron-rabbit-init-z4xjn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eb9ea56e20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=179 identity=44206 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/neutron-rabbit-init-z4xjn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eb9ea56e20 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=179 identity=44206 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/neutron-rabbit-init-z4xjn subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb9ea56e20 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=179 identity=44206 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/neutron-rabbit-init-z4xjn subsys=daemon level=info msg="Delete endpoint request" containerID=eb9ea56e20 endpointID=179 k8sNamespace=openstack k8sPodName=neutron-rabbit-init-z4xjn subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=fb7f01e0-c830-4142-85ae-139d3fc7fef0 k8s:batch.kubernetes.io/job-name=neutron-rabbit-init k8s:component=rabbit-init k8s:controller-uid=fb7f01e0-c830-4142-85ae-139d3fc7fef0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-rabbit-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=eb9ea56e20 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=179 identity=44206 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/neutron-rabbit-init-z4xjn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 73c0a15e-d964-4307-8aa8-b0b96709c57e default }" containerID=fb5905ca0fce3ced3e5759f95c0c8c2097760448eac81fa21d97e9dc4aeb97ea datapathConfiguration="&{false false false false false }" interface=lxc7317d477ce9e k8sPodName=openstack/neutron-ks-service-278j5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb5905ca0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2575 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/neutron-ks-service-278j5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb5905ca0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2575 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=859ea34a-73aa-4a9c-896d-a702b385e0e6,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=859ea34a-73aa-4a9c-896d-a702b385e0e6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/neutron-ks-service-278j5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=859ea34a-73aa-4a9c-896d-a702b385e0e6;k8s:batch.kubernetes.io/job-name=neutron-ks-service;k8s:component=ks-service;k8s:controller-uid=859ea34a-73aa-4a9c-896d-a702b385e0e6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-service;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb5905ca0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2575 identity=37230 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=859ea34a-73aa-4a9c-896d-a702b385e0e6,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=859ea34a-73aa-4a9c-896d-a702b385e0e6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/neutron-ks-service-278j5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fb5905ca0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2575 identity=37230 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/neutron-ks-service-278j5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fb5905ca0f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2575 identity=37230 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/neutron-ks-service-278j5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb5905ca0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2575 identity=37230 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/neutron-ks-service-278j5 subsys=daemon level=info msg="Delete endpoint request" containerID=fb5905ca0f endpointID=2575 k8sNamespace=openstack k8sPodName=neutron-ks-service-278j5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=859ea34a-73aa-4a9c-896d-a702b385e0e6 k8s:batch.kubernetes.io/job-name=neutron-ks-service k8s:component=ks-service k8s:controller-uid=859ea34a-73aa-4a9c-896d-a702b385e0e6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-service k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=fb5905ca0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2575 identity=37230 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/neutron-ks-service-278j5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 5babc6b2-59d6-4e80-bdc3-fc27e2d9a61f default }" containerID=61fddc4c883e6998a0e28a141469908e140b7bab63c025b97326a30aec05c007 datapathConfiguration="&{false false false false false }" interface=lxc3dfae629bce1 k8sPodName=openstack/neutron-ks-endpoints-clbsv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=61fddc4c88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1570 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/neutron-ks-endpoints-clbsv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=61fddc4c88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1570 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=d16daa0d-6c99-48f7-87de-85d7eacbd906,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=d16daa0d-6c99-48f7-87de-85d7eacbd906,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/neutron-ks-endpoints-clbsv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=d16daa0d-6c99-48f7-87de-85d7eacbd906;k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=d16daa0d-6c99-48f7-87de-85d7eacbd906;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-endpoints;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=61fddc4c88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1570 identity=11884 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=d16daa0d-6c99-48f7-87de-85d7eacbd906,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=d16daa0d-6c99-48f7-87de-85d7eacbd906,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/neutron-ks-endpoints-clbsv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=61fddc4c88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1570 identity=11884 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/neutron-ks-endpoints-clbsv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=61fddc4c88 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1570 identity=11884 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/neutron-ks-endpoints-clbsv subsys=endpoint level=info msg="Successful endpoint creation" containerID=61fddc4c88 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1570 identity=11884 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/neutron-ks-endpoints-clbsv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=61fddc4c88 endpointID=1570 k8sNamespace=openstack k8sPodName=neutron-ks-endpoints-clbsv subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=d16daa0d-6c99-48f7-87de-85d7eacbd906 k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=d16daa0d-6c99-48f7-87de-85d7eacbd906 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-endpoints k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=61fddc4c88 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1570 identity=11884 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/neutron-ks-endpoints-clbsv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.222 af899acc-11a4-4912-8020-970722db3637 default }" containerID=1544a92f4202d7e4484b0e2adc746feee4f0f63fd27824a2cb5ebed779764218 datapathConfiguration="&{false false false false false }" interface=lxcb5336e2df87e k8sPodName=openstack/neutron-ks-user-prq6v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1544a92f42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3877 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/neutron-ks-user-prq6v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1544a92f42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3877 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=cebfb64f-9ce1-4c70-9b51-b417ecb8f7e4,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=cebfb64f-9ce1-4c70-9b51-b417ecb8f7e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/neutron-ks-user-prq6v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=cebfb64f-9ce1-4c70-9b51-b417ecb8f7e4;k8s:batch.kubernetes.io/job-name=neutron-ks-user;k8s:component=ks-user;k8s:controller-uid=cebfb64f-9ce1-4c70-9b51-b417ecb8f7e4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-user;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1544a92f42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3877 identity=32323 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=cebfb64f-9ce1-4c70-9b51-b417ecb8f7e4,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=cebfb64f-9ce1-4c70-9b51-b417ecb8f7e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/neutron-ks-user-prq6v oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1544a92f42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3877 identity=32323 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/neutron-ks-user-prq6v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1544a92f42 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3877 identity=32323 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/neutron-ks-user-prq6v subsys=endpoint level=info msg="Successful endpoint creation" containerID=1544a92f42 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3877 identity=32323 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/neutron-ks-user-prq6v subsys=daemon level=info msg="Delete endpoint request" containerID=1544a92f42 endpointID=3877 k8sNamespace=openstack k8sPodName=neutron-ks-user-prq6v subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=cebfb64f-9ce1-4c70-9b51-b417ecb8f7e4 k8s:batch.kubernetes.io/job-name=neutron-ks-user k8s:component=ks-user k8s:controller-uid=cebfb64f-9ce1-4c70-9b51-b417ecb8f7e4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-user k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=1544a92f42 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3877 identity=32323 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/neutron-ks-user-prq6v subsys=endpoint