level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.151038ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="57.251µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.117027ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="5.13µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=96.695113ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="10.951µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="16.521µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="81.212µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="70.191µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="78.472µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="442.941µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.15µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.016818ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.669035ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="32.801µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="33.111µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="210.075µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="85.722µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="66.982µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=49.903481ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="119.593µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="15.38µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.88µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.44.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=105.069903ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="10.2µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.064832ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="6.13µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.520808ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="5.911µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.06µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="6.06µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.49µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="28.541µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="30.4µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="14.041µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="78.592µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="334.099µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.561µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="33.821µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="478.382µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration=1.032496ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.307914ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.37µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="23.59µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.44 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.44 ipAddr.ipv6="" k8sNodeIP=199.204.45.44 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.44" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.146" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.44" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.44} {CiliumInternalIP 10.0.0.146}] 10.0.0.0/24 [] [] 10.0.0.19 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:41231" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.427784675s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="17.79µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="9.31µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="38.881µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="34.651µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3496 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3496 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3496 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.380916976s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=298.74372ms file-path=/var/run/cilium/state/templates/1ad7c5c75bc12e471af461776f4efffc2d9e0f4c00a3b1e48c840ce090fd66a2/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3496 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 cf1db36e-bac4-4a23-a2d6-211f452a423e default }" containerID=db2c90e159f4ef525de264ac609fca1e149324d6cb4260041f5922883fdafaaf datapathConfiguration="&{false false false false false }" interface=lxcb353cc80574d k8sPodName=kube-system/coredns-7c96b6546b-wsnfm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=db2c90e159 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 ipv4=10.0.0.32 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wsnfm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=db2c90e159 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.32 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wsnfm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.142 97ac2617-8647-498a-8041-1ec112d99deb default }" containerID=2647b9070727c5d931a159695c1f2b4928e172493f4baeb71327501f0641ecee datapathConfiguration="&{false false false false false }" interface=lxc150da3d99583 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-vq5fc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2647b90707 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3121 ipv4=10.0.0.142 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-vq5fc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2647b90707 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3121 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=f7c726af-cb23-43e0-b6b6-e5e39f22c82f,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=f7c726af-cb23-43e0-b6b6-e5e39f22c82f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.142 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-vq5fc subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1893 ipv4=10.0.0.19 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1893 identityLabels="reserved:health" ipv4=10.0.0.19 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1893 identity=4 identityLabels="reserved:health" ipv4=10.0.0.19 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=db2c90e159 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 identity=52958 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.32 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wsnfm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=db2c90e159 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 identity=52958 ipv4=10.0.0.32 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wsnfm subsys=endpoint level=info msg="Invalid state transition skipped" containerID=2647b90707 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3121 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.142 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-vq5fc line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=f7c726af-cb23-43e0-b6b6-e5e39f22c82f;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=f7c726af-cb23-43e0-b6b6-e5e39f22c82f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2647b90707 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3121 identity=17559 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=f7c726af-cb23-43e0-b6b6-e5e39f22c82f,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=f7c726af-cb23-43e0-b6b6-e5e39f22c82f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.142 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-vq5fc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2647b90707 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3121 identity=17559 ipv4=10.0.0.142 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-vq5fc subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.075422255s file-path=/var/run/cilium/state/templates/f62e74d9e175876506aa6bb13ee1024c1641349a6d62377d15350536417f0cfd/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1893 identity=4 ipv4=10.0.0.19 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=db2c90e159 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1920 identity=52958 ipv4=10.0.0.32 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wsnfm subsys=endpoint level=info msg="Successful endpoint creation" containerID=db2c90e159 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1920 identity=52958 ipv4=10.0.0.32 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wsnfm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2647b90707 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3121 identity=17559 ipv4=10.0.0.142 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-vq5fc subsys=endpoint level=info msg="Successful endpoint creation" containerID=2647b90707 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3121 identity=17559 ipv4=10.0.0.142 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-vq5fc subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2647b90707 endpointID=3121 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-vq5fc subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=f7c726af-cb23-43e0-b6b6-e5e39f22c82f k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=f7c726af-cb23-43e0-b6b6-e5e39f22c82f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=2647b90707 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3121 identity=17559 ipv4=10.0.0.142 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-vq5fc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.63 6b867d41-53b2-49fd-8991-6c5635388b14 default }" containerID=dc3aca17f7024e162f10832bc931498a6bf4cf6f8606c1f1877801447d00fe5d datapathConfiguration="&{false false false false false }" interface=lxc9604b6d55650 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wvrkk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc3aca17f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2236 ipv4=10.0.0.63 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wvrkk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc3aca17f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2236 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.63 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wvrkk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dc3aca17f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2236 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.63 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wvrkk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc3aca17f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2236 identity=41203 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.63 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wvrkk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc3aca17f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2236 identity=41203 ipv4=10.0.0.63 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wvrkk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dc3aca17f7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2236 identity=41203 ipv4=10.0.0.63 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wvrkk subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc3aca17f7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2236 identity=41203 ipv4=10.0.0.63 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wvrkk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3496 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03496 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03496 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03496 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03496:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3496 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 a8bc8612-443b-46fe-8bd5-bc05296553ee default }" containerID=c4a05ea866396aca4b6af0e396186e25978daa18bb41fb1d20b717aba916d46c datapathConfiguration="&{false false false false false }" interface=lxceb6bc4496944 k8sPodName=kube-system/coredns-67659f764b-8pr98 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c4a05ea866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=989 ipv4=10.0.0.156 ipv6= k8sPodName=kube-system/coredns-67659f764b-8pr98 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 31f4e286-b85a-40e7-843e-61493017c5cf default }" containerID=a73466cfd9a00c47d450905e08cd89bbb47782b1d1a9f4598e7686dc40580d7f datapathConfiguration="&{false false false false false }" interface=lxc99d366c1ca71 k8sPodName=kube-system/coredns-67659f764b-wq5br labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=c4a05ea866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=989 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.156 ipv6= k8sPodName=kube-system/coredns-67659f764b-8pr98 subsys=endpoint level=info msg="New endpoint" containerID=a73466cfd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 ipv4=10.0.0.202 ipv6= k8sPodName=kube-system/coredns-67659f764b-wq5br subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c4a05ea866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=989 identity=52958 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.156 ipv6= k8sPodName=kube-system/coredns-67659f764b-8pr98 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c4a05ea866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=989 identity=52958 ipv4=10.0.0.156 ipv6= k8sPodName=kube-system/coredns-67659f764b-8pr98 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a73466cfd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.202 ipv6= k8sPodName=kube-system/coredns-67659f764b-wq5br subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a73466cfd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 identity=52958 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.202 ipv6= k8sPodName=kube-system/coredns-67659f764b-wq5br oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a73466cfd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 identity=52958 ipv4=10.0.0.202 ipv6= k8sPodName=kube-system/coredns-67659f764b-wq5br subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c4a05ea866 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=989 identity=52958 ipv4=10.0.0.156 ipv6= k8sPodName=kube-system/coredns-67659f764b-8pr98 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4a05ea866 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=989 identity=52958 ipv4=10.0.0.156 ipv6= k8sPodName=kube-system/coredns-67659f764b-8pr98 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a73466cfd9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1767 identity=52958 ipv4=10.0.0.202 ipv6= k8sPodName=kube-system/coredns-67659f764b-wq5br subsys=endpoint level=info msg="Successful endpoint creation" containerID=a73466cfd9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1767 identity=52958 ipv4=10.0.0.202 ipv6= k8sPodName=kube-system/coredns-67659f764b-wq5br subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.67 0f8de1ed-2bb3-4ccf-b4e8-85d834a5b6d3 default }" containerID=2d63c218e1fa2d613ad9ac21d09ddf5e2a3bf15b956b8e275621b9f7a53bf5a8 datapathConfiguration="&{false false false false false }" interface=lxcf0a3831a2ad7 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-d88wf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d63c218e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-d88wf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d63c218e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-d88wf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d63c218e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 identity=769 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-d88wf oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2d63c218e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 identity=769 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-d88wf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2d63c218e1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=612 identity=769 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-d88wf subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d63c218e1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=612 identity=769 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-d88wf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=db2c90e159 endpointID=1920 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-wsnfm subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=db2c90e159 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1920 identity=52958 ipv4=10.0.0.32 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wsnfm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 0cee1076-eccf-4930-b1cc-3b3040f25d02 default }" containerID=c08d1edfb50c881a4359f5bf94d7b5d5700f88a90bd3d338098e445738200dc6 datapathConfiguration="&{false false false false false }" interface=lxc37cabe7b46c4 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-58bl9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c08d1edfb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2272 ipv4=10.0.0.26 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-58bl9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c08d1edfb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2272 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.26 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-58bl9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c08d1edfb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2272 identity=33314 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.26 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-58bl9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c08d1edfb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2272 identity=33314 ipv4=10.0.0.26 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-58bl9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 51954a91-123f-47b3-9bcf-3761d91b83da default }" containerID=b9b6f4c1edb70345a9f7b27ec659387e74b8167de03453ddad01516d47d39272 datapathConfiguration="&{false false false false false }" interface=lxc5f5a09b4c7d5 k8sPodName=cert-manager/cert-manager-75c4c745bc-76jcz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b9b6f4c1ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1503 ipv4=10.0.0.163 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-76jcz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b9b6f4c1ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1503 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.163 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-76jcz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b9b6f4c1ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1503 identity=44051 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.163 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-76jcz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b9b6f4c1ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1503 identity=44051 ipv4=10.0.0.163 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-76jcz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.161 a5957edd-dd1c-4d81-8aa0-db00db3ec394 default }" containerID=cf1fdb6dc9f1d51793d5b3e5a6b071eee01f9a6bff05e5eb65939f71a1824433 datapathConfiguration="&{false false false false false }" interface=lxc2d8c45d53bed k8sPodName=cert-manager/cert-manager-webhook-548949fc64-k4w6d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf1fdb6dc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-k4w6d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf1fdb6dc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-k4w6d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cf1fdb6dc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 identity=27228 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-k4w6d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cf1fdb6dc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 identity=27228 ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-k4w6d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c08d1edfb5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2272 identity=33314 ipv4=10.0.0.26 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-58bl9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c08d1edfb5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2272 identity=33314 ipv4=10.0.0.26 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-58bl9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b9b6f4c1ed datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1503 identity=44051 ipv4=10.0.0.163 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-76jcz subsys=endpoint level=info msg="Successful endpoint creation" containerID=b9b6f4c1ed datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1503 identity=44051 ipv4=10.0.0.163 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-76jcz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.128 1c2b03dd-10ae-4d42-9197-e2dd7e612fc0 default }" containerID=c35da0bfe22e9e583bab95d934080aa96ecac22cdd551661ba98b20f994496b0 datapathConfiguration="&{false false false false false }" interface=lxc488901f0c567 k8sPodName=cert-manager/cert-manager-startupapicheck-q5664 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c35da0bfe2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-q5664 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c35da0bfe2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=a5c8acef-5994-47ad-8e2b-358cd0f83a87,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=a5c8acef-5994-47ad-8e2b-358cd0f83a87,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-q5664 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=a5c8acef-5994-47ad-8e2b-358cd0f83a87;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=a5c8acef-5994-47ad-8e2b-358cd0f83a87;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c35da0bfe2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 identity=499 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=a5c8acef-5994-47ad-8e2b-358cd0f83a87,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=a5c8acef-5994-47ad-8e2b-358cd0f83a87,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-q5664 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c35da0bfe2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 identity=499 ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-q5664 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cf1fdb6dc9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=56 identity=27228 ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-k4w6d subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf1fdb6dc9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=56 identity=27228 ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-k4w6d subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c35da0bfe2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=715 identity=499 ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-q5664 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c35da0bfe2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=715 identity=499 ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-q5664 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c35da0bfe2 endpointID=715 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-q5664 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=a5c8acef-5994-47ad-8e2b-358cd0f83a87 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=a5c8acef-5994-47ad-8e2b-358cd0f83a87 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=c35da0bfe2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=715 identity=499 ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-q5664 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 c807b85c-6bee-4aef-b62b-06e88952fa1f default }" containerID=fb4f1a2c4bd79327807ade3efd00a86a095f2e6e4740fb44ab27c8d582fd2eed datapathConfiguration="&{false false false false false }" interface=lxc07b0210781ba k8sPodName=ingress-nginx/ingress-nginx-admission-create-mp4wc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb4f1a2c4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 ipv4=10.0.0.213 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-mp4wc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb4f1a2c4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=306b5cfd-4b85-4590-b97e-7eac33062fc8,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=306b5cfd-4b85-4590-b97e-7eac33062fc8,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.213 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-mp4wc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=306b5cfd-4b85-4590-b97e-7eac33062fc8;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=306b5cfd-4b85-4590-b97e-7eac33062fc8;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb4f1a2c4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 identity=9163 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=306b5cfd-4b85-4590-b97e-7eac33062fc8,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=306b5cfd-4b85-4590-b97e-7eac33062fc8,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.213 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-mp4wc oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fb4f1a2c4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 identity=9163 ipv4=10.0.0.213 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-mp4wc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fb4f1a2c4b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=382 identity=9163 ipv4=10.0.0.213 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-mp4wc subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb4f1a2c4b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=382 identity=9163 ipv4=10.0.0.213 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-mp4wc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fb4f1a2c4b endpointID=382 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-mp4wc subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=306b5cfd-4b85-4590-b97e-7eac33062fc8 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=306b5cfd-4b85-4590-b97e-7eac33062fc8 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=fb4f1a2c4b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=382 identity=9163 ipv4=10.0.0.213 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-mp4wc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.250 2a46ec4d-03fc-4a77-b2a0-dc94e32676e7 default }" containerID=6b31709d9331068e5ee0d5cfa92c9edb555282b6be006950cb6fd37b5196f386 datapathConfiguration="&{false false false false false }" interface=lxc11317dff5a4b k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-94fnz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b31709d93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2253 ipv4=10.0.0.250 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-94fnz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b31709d93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2253 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.250 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-94fnz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6b31709d93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2253 identity=32027 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.250 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-94fnz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6b31709d93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2253 identity=32027 ipv4=10.0.0.250 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-94fnz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6b31709d93 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2253 identity=32027 ipv4=10.0.0.250 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-94fnz subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b31709d93 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2253 identity=32027 ipv4=10.0.0.250 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-94fnz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.175 c167bbb0-4ef0-4485-bb38-9beff67a822f default }" containerID=b07d51450c34522a70818faa09377041a4f00fab66f405ad3b14d331a257cf4f datapathConfiguration="&{false false false false false }" interface=lxcbf8d97fe3d30 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-2wr4p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b07d51450c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=55 ipv4=10.0.0.175 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-2wr4p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b07d51450c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=55 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=b5c2c1f6-a606-42e1-b044-d9ecc73ea80c,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=b5c2c1f6-a606-42e1-b044-d9ecc73ea80c,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.175 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-2wr4p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=b5c2c1f6-a606-42e1-b044-d9ecc73ea80c;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=b5c2c1f6-a606-42e1-b044-d9ecc73ea80c;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b07d51450c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=55 identity=55714 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=b5c2c1f6-a606-42e1-b044-d9ecc73ea80c,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=b5c2c1f6-a606-42e1-b044-d9ecc73ea80c,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.175 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-2wr4p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b07d51450c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=55 identity=55714 ipv4=10.0.0.175 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-2wr4p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b07d51450c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=55 identity=55714 ipv4=10.0.0.175 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-2wr4p subsys=endpoint level=info msg="Successful endpoint creation" containerID=b07d51450c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=55 identity=55714 ipv4=10.0.0.175 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-2wr4p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b07d51450c endpointID=55 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-2wr4p subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=b5c2c1f6-a606-42e1-b044-d9ecc73ea80c k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=b5c2c1f6-a606-42e1-b044-d9ecc73ea80c k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=b07d51450c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=55 identity=55714 ipv4=10.0.0.175 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-2wr4p subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=94b31d61-6332-493d-ab0a-e9a3b20241f2] Description:}]" policyAddRequest=c716c53b-dc4c-4167-864e-f8082dc6d5c0 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=c716c53b-dc4c-4167-864e-f8082dc6d5c0 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=fb6d7ddf-3438-449f-95fe-e7d603479303] Description:}]" policyAddRequest=24d2af80-a9d6-4edc-896d-3790c22fddeb subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=24d2af80-a9d6-4edc-896d-3790c22fddeb policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.13 685f4ad7-8021-494a-8aef-af4cc35f5c88 default }" containerID=3e2cc3ccf5ba835b894462f403b75e68c51fe45302e259c24f4ae44bbde443ad datapathConfiguration="&{false false false false false }" interface=lxcf6d0653a1710 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-6tkw9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e2cc3ccf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-6tkw9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 2f59c37e-989b-483e-b75b-7e7005e28cd2 default }" containerID=db2e6a25ea17ddf7e33500862988ac321124887f74c217c7b2a470424df2814e datapathConfiguration="&{false false false false false }" interface=lxcd2ba722ecff5 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-tsbpj labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=3e2cc3ccf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-6tkw9 subsys=endpoint level=info msg="New endpoint" containerID=db2e6a25ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1383 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-tsbpj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=db2e6a25ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1383 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-tsbpj subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=3e2cc3ccf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 identity=18180 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-6tkw9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e2cc3ccf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 identity=18180 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-6tkw9 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=db2e6a25ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1383 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-tsbpj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=db2e6a25ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1383 identity=22671 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-tsbpj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=db2e6a25ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1383 identity=22671 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-tsbpj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=db2e6a25ea datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1383 identity=22671 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-tsbpj subsys=endpoint level=info msg="Successful endpoint creation" containerID=db2e6a25ea datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1383 identity=22671 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-tsbpj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3e2cc3ccf5 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=620 identity=18180 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-6tkw9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e2cc3ccf5 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=620 identity=18180 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-6tkw9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.100 d496b8d1-d92f-4395-9d73-0aadc7cdcb9b default }" containerID=4fc8cfa183c796017ca6357e564df67e19c95d93f5bd501add508fea76ba354a datapathConfiguration="&{false false false false false }" interface=lxc51833d33d631 k8sPodName=openstack/pxc-operator-69cb5bbdb9-9t5sc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4fc8cfa183 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2348 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9t5sc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4fc8cfa183 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2348 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9t5sc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=4fc8cfa183 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2348 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.100 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9t5sc line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4fc8cfa183 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2348 identity=5413 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9t5sc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4fc8cfa183 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2348 identity=5413 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9t5sc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4fc8cfa183 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2348 identity=5413 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9t5sc subsys=endpoint level=info msg="Successful endpoint creation" containerID=4fc8cfa183 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2348 identity=5413 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9t5sc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.101 5bec0fc8-168c-452c-812a-8c72ad44914b default }" containerID=7827b64516279b94a2d7e4303699cf1bf3e468669e38cca86950cc56ae94d1e8 datapathConfiguration="&{false false false false false }" interface=lxc5930360d6e57 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7827b64516 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7827b64516 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7827b64516 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 identity=4682 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7827b64516 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 identity=4682 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7827b64516 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1204 identity=4682 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7827b64516 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1204 identity=4682 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.227 492f34bf-e7ed-47f9-be7a-03b568a87e00 default }" containerID=e2bbd5aa4eddcf2365a7b77be7c69ef7f5bb8d50421d44bb0a5d8a25a623989e datapathConfiguration="&{false false false false false }" interface=lxc71918d390a1e k8sPodName=local-path-storage/helper-pod-create-pvc-2c8dfe78-8b9f-406a-9919-e865d6ffa749 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e2bbd5aa4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2459 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2c8dfe78-8b9f-406a-9919-e865d6ffa749 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e2bbd5aa4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2459 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2c8dfe78-8b9f-406a-9919-e865d6ffa749 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e2bbd5aa4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2459 identity=10594 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2c8dfe78-8b9f-406a-9919-e865d6ffa749 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e2bbd5aa4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2459 identity=10594 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2c8dfe78-8b9f-406a-9919-e865d6ffa749 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e2bbd5aa4e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2459 identity=10594 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2c8dfe78-8b9f-406a-9919-e865d6ffa749 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e2bbd5aa4e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2459 identity=10594 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2c8dfe78-8b9f-406a-9919-e865d6ffa749 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e2bbd5aa4e endpointID=2459 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2c8dfe78-8b9f-406a-9919-e865d6ffa749 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e2bbd5aa4e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2459 identity=10594 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2c8dfe78-8b9f-406a-9919-e865d6ffa749 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 415c2e0f-a620-4ea0-93ad-df64acf421eb default }" containerID=b269a8c341dc4966d15cd339673c8ac7dac15637e5589bd671d58b28082be424 datapathConfiguration="&{false false false false false }" interface=lxca943b42389e5 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b269a8c341 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2918 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b269a8c341 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2918 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b269a8c341 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2918 identity=27789 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b269a8c341 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2918 identity=27789 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b269a8c341 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2918 identity=27789 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b269a8c341 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2918 identity=27789 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=f3635d9b-e0a9-487e-b3eb-0a0a0c86cefd] Description:}]" policyAddRequest=0f85b4e7-8131-45c9-8d72-997c58be6356 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=0f85b4e7-8131-45c9-8d72-997c58be6356 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.129 d6544856-b885-4743-a830-f94a61293693 default }" containerID=4388fd1d9583847e369ad7b416fb3bcf7f52bccd1997409a75245febc4064e7b datapathConfiguration="&{false false false false false }" interface=lxc0e357cca1f1d k8sPodName=local-path-storage/helper-pod-create-pvc-b103952b-e7a8-4f28-9fe4-9ad064c6a726 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4388fd1d95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2294 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b103952b-e7a8-4f28-9fe4-9ad064c6a726 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4388fd1d95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2294 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b103952b-e7a8-4f28-9fe4-9ad064c6a726 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4388fd1d95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2294 identity=10594 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b103952b-e7a8-4f28-9fe4-9ad064c6a726 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4388fd1d95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2294 identity=10594 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b103952b-e7a8-4f28-9fe4-9ad064c6a726 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4388fd1d95 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2294 identity=10594 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b103952b-e7a8-4f28-9fe4-9ad064c6a726 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4388fd1d95 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2294 identity=10594 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b103952b-e7a8-4f28-9fe4-9ad064c6a726 subsys=daemon level=info msg="Delete endpoint request" containerID=4388fd1d95 endpointID=2294 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b103952b-e7a8-4f28-9fe4-9ad064c6a726 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4388fd1d95 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2294 identity=10594 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b103952b-e7a8-4f28-9fe4-9ad064c6a726 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 66eaf7be-c616-4339-b70a-2e4527c23df0 default }" containerID=b63ffa8a0bba2e983e1395efd258c2efe8bc2941e1f48dfdc3dd6df62932e339 datapathConfiguration="&{false false false false false }" interface=lxc28d4c4cd07c3 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b63ffa8a0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1522 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b63ffa8a0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1522 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b63ffa8a0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1522 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.21 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b63ffa8a0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1522 identity=5965 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b63ffa8a0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1522 identity=5965 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b63ffa8a0b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1522 identity=5965 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b63ffa8a0b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1522 identity=5965 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=e37e4fd7-ef6a-40b7-b2b9-1a8603bdd638] Description:}]" policyAddRequest=0596fbc5-b32c-4091-aa68-7c99baa1dcf0 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=0596fbc5-b32c-4091-aa68-7c99baa1dcf0 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.189 0c77d764-2f46-4fcb-9800-0c41d94c855f default }" containerID=2e5393cda206ee8b29c6e1bbb4f17a3de5ec3232ab40e1a5a8c517dbd93f098b datapathConfiguration="&{false false false false false }" interface=lxc27c55a863105 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2e5393cda2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 ipv4=10.0.0.189 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2e5393cda2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.189 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2e5393cda2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 identity=37475 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.189 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2e5393cda2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 identity=37475 ipv4=10.0.0.189 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2e5393cda2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=490 identity=37475 ipv4=10.0.0.189 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2e5393cda2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=490 identity=37475 ipv4=10.0.0.189 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.011004098637845442 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.166 373931ec-12bd-4052-b8fb-e73251ebf6d7 default }" containerID=1a6a16e391174f00e90073fbaebdeadc76af343c4aaefb76517b564482454ed5 datapathConfiguration="&{false false false false false }" interface=lxc720291347d13 k8sPodName=monitoring/node-feature-discovery-worker-gclxm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1a6a16e391 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4011 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-gclxm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1a6a16e391 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4011 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-gclxm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1a6a16e391 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4011 identity=10724 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-gclxm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1a6a16e391 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4011 identity=10724 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-gclxm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1a6a16e391 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4011 identity=10724 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-gclxm subsys=endpoint level=info msg="Successful endpoint creation" containerID=1a6a16e391 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4011 identity=10724 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-gclxm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.14 78c6b7b5-e607-4b3d-8ad7-694f0843f323 default }" containerID=0caa75c06d94cba3cd81e146a45352e07129d63847a08f381a94031634a2e464 datapathConfiguration="&{false false false false false }" interface=lxcd366f084fde3 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-z4trm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0caa75c06d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=520 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-z4trm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0caa75c06d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=520 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-z4trm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.31 7a64839b-2464-484c-83c5-92bf87b20b88 default }" containerID=7965d1d2e309dcbed658cab9add11ef0aa175b4479fd33742c916039116c278c datapathConfiguration="&{false false false false false }" interface=lxc7dac5b93bbfe k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-q2v8b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7965d1d2e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3281 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-q2v8b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7965d1d2e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3281 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-q2v8b subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=0caa75c06d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=520 identity=46853 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-z4trm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0caa75c06d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=520 identity=46853 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-z4trm subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7965d1d2e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3281 identity=19183 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-q2v8b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7965d1d2e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3281 identity=19183 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-q2v8b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0caa75c06d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=520 identity=46853 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-z4trm subsys=endpoint level=info msg="Successful endpoint creation" containerID=0caa75c06d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=520 identity=46853 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-z4trm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7965d1d2e3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3281 identity=19183 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-q2v8b subsys=endpoint level=info msg="Successful endpoint creation" containerID=7965d1d2e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3281 identity=19183 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-q2v8b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.162 1cfafe55-9a81-493e-86a2-b5d996fb54df default }" containerID=994b37a87b87c34fd8b21926a8c47ae0efe9217f208c3d276740f360441fc7fb datapathConfiguration="&{false false false false false }" interface=lxc5a40575b8381 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-48qdj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=994b37a87b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=835 ipv4=10.0.0.162 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-48qdj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=994b37a87b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=835 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.162 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-48qdj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=994b37a87b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=835 identity=22185 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.162 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-48qdj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=994b37a87b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=835 identity=22185 ipv4=10.0.0.162 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-48qdj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=994b37a87b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=835 identity=22185 ipv4=10.0.0.162 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-48qdj subsys=endpoint level=info msg="Successful endpoint creation" containerID=994b37a87b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=835 identity=22185 ipv4=10.0.0.162 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-48qdj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3496 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03496 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03496 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03496 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03496:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3496 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 0ac5e15b-2922-4bee-8cda-ea340d3ce181 default }" containerID=a2fae8a3ed7b9aeafb65b0c7bbafe03da582f5f7d81c25659fc2fdfcdc9352cd datapathConfiguration="&{false false false false false }" interface=lxc31f6015d0297 k8sPodName=monitoring/kube-prometheus-stack-admission-create-7l8p8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2fae8a3ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3033 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7l8p8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2fae8a3ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3033 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=e7d83c49-c6c2-497b-bd17-fc6496438cbc,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=e7d83c49-c6c2-497b-bd17-fc6496438cbc,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7l8p8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=e7d83c49-c6c2-497b-bd17-fc6496438cbc;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=e7d83c49-c6c2-497b-bd17-fc6496438cbc;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a2fae8a3ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3033 identity=1678 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=e7d83c49-c6c2-497b-bd17-fc6496438cbc,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=e7d83c49-c6c2-497b-bd17-fc6496438cbc,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7l8p8 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a2fae8a3ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3033 identity=1678 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7l8p8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a2fae8a3ed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3033 identity=1678 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7l8p8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2fae8a3ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3033 identity=1678 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7l8p8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a2fae8a3ed endpointID=3033 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-7l8p8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=e7d83c49-c6c2-497b-bd17-fc6496438cbc k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=e7d83c49-c6c2-497b-bd17-fc6496438cbc k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=a2fae8a3ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3033 identity=1678 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7l8p8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 d807e5c2-2727-431f-933d-b5bd37eebe7f default }" containerID=b01db9a52ee89061d981fa25714f2418b18f5be906ff1be3b20f623cedd8bbdb datapathConfiguration="&{false false false false false }" interface=lxc99abfd83c272 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-74clv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b01db9a52e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2916 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-74clv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b01db9a52e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2916 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-74clv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b01db9a52e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2916 identity=47898 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-74clv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b01db9a52e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2916 identity=47898 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-74clv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b01db9a52e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2916 identity=47898 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-74clv subsys=endpoint level=info msg="Successful endpoint creation" containerID=b01db9a52e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2916 identity=47898 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-74clv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.178 12d1b564-a21c-4ee7-9c98-2dd2f090eea6 default }" containerID=7f2ffdc3f166bea5c884022e183ca7b03dc0c8628fef621041ae30e1265276af datapathConfiguration="&{false false false false false }" interface=lxc270a68c70e3d k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-m4m9n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f2ffdc3f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3217 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-m4m9n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.233 c2b5ca93-892c-486c-b028-23e284405cb4 default }" containerID=6211e1e1b7db4ab7bd41748f051771c4ea731ba3133abce757e10f426c858f3a datapathConfiguration="&{false false false false false }" interface=lxc7ad90f8b19e3 k8sPodName=monitoring/kube-prometheus-stack-grafana-84677cffc4-9z468 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6211e1e1b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2609 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-84677cffc4-9z468 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f2ffdc3f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3217 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-m4m9n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=6211e1e1b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2609 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-84677cffc4-9z468 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f2ffdc3f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3217 identity=41104 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-m4m9n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f2ffdc3f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3217 identity=41104 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-m4m9n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6211e1e1b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2609 identity=56538 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-84677cffc4-9z468 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6211e1e1b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2609 identity=56538 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-84677cffc4-9z468 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7f2ffdc3f1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3217 identity=41104 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-m4m9n subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f2ffdc3f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3217 identity=41104 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-m4m9n subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6211e1e1b7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2609 identity=56538 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-84677cffc4-9z468 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6211e1e1b7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2609 identity=56538 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-84677cffc4-9z468 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.235 fac96f60-2bfd-4f27-9811-ba44a84f9a13 default }" containerID=97d59162266bd1323a7da8c830ad08a5ad6fd22f4dd2827e81b6c729d8cceea1 datapathConfiguration="&{false false false false false }" interface=lxca5c4046e0f3e k8sPodName=monitoring/kube-prometheus-stack-admission-patch-m84xr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=97d5916226 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-m84xr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=97d5916226 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=9cb525a1-3fcb-4bb2-a39d-e9ba395c4ae2,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=9cb525a1-3fcb-4bb2-a39d-e9ba395c4ae2,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-m84xr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=9cb525a1-3fcb-4bb2-a39d-e9ba395c4ae2;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=9cb525a1-3fcb-4bb2-a39d-e9ba395c4ae2;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=97d5916226 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 identity=45739 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=9cb525a1-3fcb-4bb2-a39d-e9ba395c4ae2,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=9cb525a1-3fcb-4bb2-a39d-e9ba395c4ae2,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-m84xr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=97d5916226 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 identity=45739 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-m84xr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=97d5916226 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=127 identity=45739 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-m84xr subsys=endpoint level=info msg="Successful endpoint creation" containerID=97d5916226 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=127 identity=45739 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-m84xr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=97d5916226 endpointID=127 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-m84xr subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=9cb525a1-3fcb-4bb2-a39d-e9ba395c4ae2 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=9cb525a1-3fcb-4bb2-a39d-e9ba395c4ae2 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=97d5916226 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=127 identity=45739 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-m84xr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 fab84108-9276-4dee-8093-08a40eca3898 default }" containerID=4222bfa09e979072e2dc9f1fd67572606fa3b562d5848191991cf50d9a6a71f1 datapathConfiguration="&{false false false false false }" interface=lxc76a252388331 k8sPodName=local-path-storage/helper-pod-create-pvc-0ae7b7eb-4c40-4cdc-ae62-5ba976687622 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4222bfa09e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2199 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0ae7b7eb-4c40-4cdc-ae62-5ba976687622 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4222bfa09e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2199 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0ae7b7eb-4c40-4cdc-ae62-5ba976687622 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4222bfa09e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2199 identity=10594 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0ae7b7eb-4c40-4cdc-ae62-5ba976687622 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4222bfa09e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2199 identity=10594 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0ae7b7eb-4c40-4cdc-ae62-5ba976687622 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4222bfa09e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2199 identity=10594 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0ae7b7eb-4c40-4cdc-ae62-5ba976687622 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4222bfa09e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2199 identity=10594 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0ae7b7eb-4c40-4cdc-ae62-5ba976687622 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.8 d2e52be1-8669-43fa-b577-9c5915cc84dd default }" containerID=0711c49a4a91b1bd289bca7a7e7c3800f6d454899d6b546a429b7af115bb3df8 datapathConfiguration="&{false false false false false }" interface=lxc8eda3cfe0802 k8sPodName=local-path-storage/helper-pod-create-pvc-c310d463-8b1a-481c-a41f-0073ed853944 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0711c49a4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c310d463-8b1a-481c-a41f-0073ed853944 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0711c49a4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c310d463-8b1a-481c-a41f-0073ed853944 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0711c49a4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 identity=10594 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c310d463-8b1a-481c-a41f-0073ed853944 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0711c49a4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 identity=10594 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c310d463-8b1a-481c-a41f-0073ed853944 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0711c49a4a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=75 identity=10594 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c310d463-8b1a-481c-a41f-0073ed853944 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0711c49a4a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=75 identity=10594 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c310d463-8b1a-481c-a41f-0073ed853944 subsys=daemon level=info msg="Delete endpoint request" containerID=4222bfa09e endpointID=2199 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0ae7b7eb-4c40-4cdc-ae62-5ba976687622 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=0711c49a4a endpointID=75 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c310d463-8b1a-481c-a41f-0073ed853944 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4222bfa09e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2199 identity=10594 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0ae7b7eb-4c40-4cdc-ae62-5ba976687622 subsys=endpoint level=info msg="Removed endpoint" containerID=0711c49a4a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=75 identity=10594 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c310d463-8b1a-481c-a41f-0073ed853944 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 167ce08b-0489-4a87-8a56-eb81d1478c56 default }" containerID=60220fff04e30f059994550181597c82be6e360dcc2469c33c89b7cf2744d776 datapathConfiguration="&{false false false false false }" interface=lxcaa5e2b0b8429 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60220fff04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=470 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60220fff04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=470 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60220fff04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=470 identity=7467 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=60220fff04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=470 identity=7467 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=60220fff04 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=470 identity=7467 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=60220fff04 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=470 identity=7467 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.141 3b1dcb19-4cd2-49be-a454-506858cdbc75 default }" containerID=7b3841791da3303ea5a4d4acad008d1da14189e2be98a9d0646ca53e1bb8bde1 datapathConfiguration="&{false false false false false }" interface=lxc0a02cc1b2a7c k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7b3841791d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2716 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7b3841791d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2716 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7b3841791d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2716 identity=36104 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7b3841791d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2716 identity=36104 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7b3841791d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2716 identity=36104 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7b3841791d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2716 identity=36104 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.243 449c6d53-d51c-4248-a7d3-07ad4d45c218 default }" containerID=d8683f7170e62f9466eea26d55c5d9c70ee92006d4c4428989607b4dbf89f02d datapathConfiguration="&{false false false false false }" interface=lxc65f919b2d226 k8sPodName=monitoring/loki-gateway-cf54cb88c-srmf7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d8683f7170 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-srmf7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d8683f7170 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-srmf7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d8683f7170 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 identity=6441 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-srmf7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d8683f7170 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 identity=6441 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-srmf7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 cd08a6c0-ba9f-43de-b8f2-6b19352e292a default }" containerID=f9224694d3f3d3d0336828583644d7484a5e18f15cf3861a360be74bdf09cb2f datapathConfiguration="&{false false false false false }" interface=lxce406d9f8f26e k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9224694d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3831 ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9224694d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3831 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.34 2827d302-585a-4046-bbee-faf94821a016 default }" containerID=1d72b4dac0d3be1bdc4da742d5f431fb7690f65e9e504cc02f430c05674d72eb datapathConfiguration="&{false false false false false }" interface=lxc6c47d4ab180f k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d72b4dac0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=111 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d72b4dac0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=111 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f9224694d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3831 identity=1703 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9224694d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3831 identity=1703 ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d72b4dac0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=111 identity=42033 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d72b4dac0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=111 identity=42033 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d8683f7170 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1103 identity=6441 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-srmf7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d8683f7170 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1103 identity=6441 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-srmf7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f9224694d3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3831 identity=1703 ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9224694d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3831 identity=1703 ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1d72b4dac0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=111 identity=42033 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d72b4dac0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=111 identity=42033 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.238 5cf980f2-3511-47ac-af2e-ead5bf3adf67 default }" containerID=c578d4c68678c314695df43e0f1d373028958c03cb2bb921f55484eaab158760 datapathConfiguration="&{false false false false false }" interface=lxc3ffa37e2d268 k8sPodName=local-path-storage/helper-pod-create-pvc-322b268e-7245-4298-a3be-a5f8646272da labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c578d4c686 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3085 ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-322b268e-7245-4298-a3be-a5f8646272da subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c578d4c686 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3085 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-322b268e-7245-4298-a3be-a5f8646272da subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c578d4c686 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3085 identity=10594 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-322b268e-7245-4298-a3be-a5f8646272da oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c578d4c686 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3085 identity=10594 ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-322b268e-7245-4298-a3be-a5f8646272da subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c578d4c686 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3085 identity=10594 ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-322b268e-7245-4298-a3be-a5f8646272da subsys=endpoint level=info msg="Successful endpoint creation" containerID=c578d4c686 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3085 identity=10594 ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-322b268e-7245-4298-a3be-a5f8646272da subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.64 e1e2ad63-4d82-4df9-a528-56a35278bf8f default }" containerID=34c14b6d28701c2e72332b7b0bd9f59f253acb51174ddb5c769ec054d597f6f7 datapathConfiguration="&{false false false false false }" interface=lxc9f8f1505a817 k8sPodName=monitoring/vector-6sc9v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34c14b6d28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2881 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/vector-6sc9v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34c14b6d28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2881 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/vector-6sc9v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34c14b6d28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2881 identity=9603 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/vector-6sc9v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34c14b6d28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2881 identity=9603 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/vector-6sc9v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=34c14b6d28 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2881 identity=9603 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/vector-6sc9v subsys=endpoint level=info msg="Successful endpoint creation" containerID=34c14b6d28 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2881 identity=9603 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/vector-6sc9v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c578d4c686 endpointID=3085 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-322b268e-7245-4298-a3be-a5f8646272da subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c578d4c686 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3085 identity=10594 ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-322b268e-7245-4298-a3be-a5f8646272da subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.235 b3b7e562-400e-4baf-bf2c-c09890818745 default }" containerID=d168e6c33cfb0f13f7fdc16316d912f9423ad07d6aa790b63f14e4e91b9ccb6c datapathConfiguration="&{false false false false false }" interface=lxc62c6842350fa k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vf5t8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d168e6c33c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vf5t8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d168e6c33c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vf5t8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d168e6c33c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 identity=29472 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vf5t8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d168e6c33c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 identity=29472 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vf5t8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d168e6c33c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=81 identity=29472 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vf5t8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d168e6c33c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=81 identity=29472 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vf5t8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.114 d4f23751-adf9-45dc-8e3d-b1e50fe4668c default }" containerID=19a1182bfbd8f1f7b8f005ecf1ed257874c272bba641864c57a8197dfb61eb5a datapathConfiguration="&{false false false false false }" interface=lxc244f07e7f19c k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19a1182bfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1579 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19a1182bfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1579 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19a1182bfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1579 identity=32126 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19a1182bfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1579 identity=32126 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=19a1182bfb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1579 identity=32126 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=19a1182bfb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1579 identity=32126 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.75 c1001c08-b214-49e8-876d-af00505a87c5 default }" containerID=1d37c7afeefe630d9da4d2f40bdb8b037029a667a3e834c59674230a73328975 datapathConfiguration="&{false false false false false }" interface=lxc7c4b6877b368 k8sPodName=openstack/memcached-memcached-6479589586-xdqp6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d37c7afee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=570 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-xdqp6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d37c7afee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=570 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-xdqp6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=1d37c7afee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=570 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.75 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-xdqp6 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1d37c7afee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=570 identity=7413 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-xdqp6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d37c7afee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=570 identity=7413 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-xdqp6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d37c7afee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=570 identity=7413 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-xdqp6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d37c7afee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=570 identity=7413 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-xdqp6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.93 2fca293a-57bc-44a4-b010-c625ef9ba2d1 default }" containerID=1def00e1c0c37bd3507290aeb876d8a75308161218efda3531d526a6e8681309 datapathConfiguration="&{false false false false false }" interface=lxcf676cff8a0db k8sPodName=local-path-storage/helper-pod-create-pvc-c8dc5be4-e9b7-4b12-99e5-7bc9e20ed920 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1def00e1c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c8dc5be4-e9b7-4b12-99e5-7bc9e20ed920 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1def00e1c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c8dc5be4-e9b7-4b12-99e5-7bc9e20ed920 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1def00e1c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 identity=10594 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c8dc5be4-e9b7-4b12-99e5-7bc9e20ed920 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1def00e1c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 identity=10594 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c8dc5be4-e9b7-4b12-99e5-7bc9e20ed920 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1def00e1c0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=395 identity=10594 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c8dc5be4-e9b7-4b12-99e5-7bc9e20ed920 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1def00e1c0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=395 identity=10594 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c8dc5be4-e9b7-4b12-99e5-7bc9e20ed920 subsys=daemon level=info msg="Delete endpoint request" containerID=1def00e1c0 endpointID=395 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c8dc5be4-e9b7-4b12-99e5-7bc9e20ed920 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1def00e1c0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=395 identity=10594 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c8dc5be4-e9b7-4b12-99e5-7bc9e20ed920 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 78f6a4f7-881d-437b-b669-8d608f7d9340 default }" containerID=f5f48a7839b17e1f09c917cf3183ab4c6e7861772f689dd96c9f2b04588cfd62 datapathConfiguration="&{false false false false false }" interface=lxc51045d35e9a5 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5f48a7839 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2922 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5f48a7839 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2922 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f5f48a7839 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2922 identity=17190 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f5f48a7839 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2922 identity=17190 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f5f48a7839 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2922 identity=17190 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5f48a7839 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2922 identity=17190 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.17 12bf523b-76d9-4b63-a3d6-9433756800dd default }" containerID=e267ddf1c67fd3176365f278d211bddafa414b6ceea044160019fa74e949cdfc datapathConfiguration="&{false false false false false }" interface=lxcc8d3edbd8fef k8sPodName=openstack/keystone-api-84db859cf6-s4l8p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e267ddf1c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-api-84db859cf6-s4l8p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e267ddf1c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-api-84db859cf6-s4l8p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e267ddf1c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 identity=39453 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-api-84db859cf6-s4l8p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e267ddf1c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 identity=39453 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-api-84db859cf6-s4l8p subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.216 721fc923-540e-400c-8e40-e2939774901e default }" containerID=eccb19fff161cc77caf84feac5dde9cbe812857ab13bd57f92fd00aa2e0e52d0 datapathConfiguration="&{false false false false false }" interface=lxc46b8aec9a205 k8sPodName=openstack/keystone-credential-setup-jrb5j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eccb19fff1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-credential-setup-jrb5j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eccb19fff1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=44f1c5a6-41ca-4a00-9909-5996abaf07c2,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=44f1c5a6-41ca-4a00-9909-5996abaf07c2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-credential-setup-jrb5j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=44f1c5a6-41ca-4a00-9909-5996abaf07c2;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=44f1c5a6-41ca-4a00-9909-5996abaf07c2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eccb19fff1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identity=17172 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=44f1c5a6-41ca-4a00-9909-5996abaf07c2,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=44f1c5a6-41ca-4a00-9909-5996abaf07c2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-credential-setup-jrb5j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eccb19fff1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identity=17172 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-credential-setup-jrb5j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e267ddf1c6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=587 identity=39453 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-api-84db859cf6-s4l8p subsys=endpoint level=info msg="Successful endpoint creation" containerID=e267ddf1c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=587 identity=39453 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-api-84db859cf6-s4l8p subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=eccb19fff1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=29 identity=17172 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-credential-setup-jrb5j subsys=endpoint level=info msg="Successful endpoint creation" containerID=eccb19fff1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=29 identity=17172 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-credential-setup-jrb5j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eccb19fff1 endpointID=29 k8sNamespace=openstack k8sPodName=keystone-credential-setup-jrb5j subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=44f1c5a6-41ca-4a00-9909-5996abaf07c2 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=44f1c5a6-41ca-4a00-9909-5996abaf07c2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=eccb19fff1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=29 identity=17172 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-credential-setup-jrb5j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 16bcefb4-87e2-4b38-88ea-ee934b5506db default }" containerID=f115b036612a25c92ef7f951506b4b75c99fb343cc130f2808f36e96ef63c86f datapathConfiguration="&{false false false false false }" interface=lxc51fa6f0c4ce2 k8sPodName=openstack/keystone-db-init-5jjkv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f115b03661 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=795 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/keystone-db-init-5jjkv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f115b03661 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=795 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bdb7adb7-7fcd-4bcc-90a9-a2f27540bfae,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=bdb7adb7-7fcd-4bcc-90a9-a2f27540bfae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/keystone-db-init-5jjkv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bdb7adb7-7fcd-4bcc-90a9-a2f27540bfae;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=bdb7adb7-7fcd-4bcc-90a9-a2f27540bfae;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f115b03661 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=795 identity=61965 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bdb7adb7-7fcd-4bcc-90a9-a2f27540bfae,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=bdb7adb7-7fcd-4bcc-90a9-a2f27540bfae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/keystone-db-init-5jjkv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f115b03661 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=795 identity=61965 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/keystone-db-init-5jjkv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f115b03661 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=795 identity=61965 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/keystone-db-init-5jjkv subsys=endpoint level=info msg="Successful endpoint creation" containerID=f115b03661 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=795 identity=61965 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/keystone-db-init-5jjkv subsys=daemon level=info msg="Delete endpoint request" containerID=f115b03661 endpointID=795 k8sNamespace=openstack k8sPodName=keystone-db-init-5jjkv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bdb7adb7-7fcd-4bcc-90a9-a2f27540bfae k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=bdb7adb7-7fcd-4bcc-90a9-a2f27540bfae k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f115b03661 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=795 identity=61965 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/keystone-db-init-5jjkv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.199 f5394a5b-e5a3-4a20-9f38-b5d07fda1540 default }" containerID=d6bcedce5bc1355a5eec8fd51735c0007d45d25e36424b577391466c9470133f datapathConfiguration="&{false false false false false }" interface=lxcc3a03986440c k8sPodName=openstack/keystone-fernet-setup-x7lsz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d6bcedce5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1047 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-fernet-setup-x7lsz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d6bcedce5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1047 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e0cc6cc8-0bbf-473e-84c7-79158c689a90,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=e0cc6cc8-0bbf-473e-84c7-79158c689a90,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-fernet-setup-x7lsz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e0cc6cc8-0bbf-473e-84c7-79158c689a90;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=e0cc6cc8-0bbf-473e-84c7-79158c689a90;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d6bcedce5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1047 identity=4525 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e0cc6cc8-0bbf-473e-84c7-79158c689a90,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=e0cc6cc8-0bbf-473e-84c7-79158c689a90,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-fernet-setup-x7lsz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d6bcedce5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1047 identity=4525 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-fernet-setup-x7lsz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d6bcedce5b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1047 identity=4525 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-fernet-setup-x7lsz subsys=endpoint level=info msg="Successful endpoint creation" containerID=d6bcedce5b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1047 identity=4525 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-fernet-setup-x7lsz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d6bcedce5b endpointID=1047 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-x7lsz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e0cc6cc8-0bbf-473e-84c7-79158c689a90 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=e0cc6cc8-0bbf-473e-84c7-79158c689a90 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d6bcedce5b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1047 identity=4525 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-fernet-setup-x7lsz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 7917fc03-59ec-42eb-ba9b-d9f8ea0b6681 default }" containerID=0bffd44ecaa38be0630e9757cb7b41244fbac1ff52ddc0c553410b5c07127029 datapathConfiguration="&{false false false false false }" interface=lxc92c7e716f50e k8sPodName=openstack/keystone-db-sync-2s9dw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0bffd44eca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3586 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-db-sync-2s9dw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0bffd44eca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3586 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=15948963-4038-4d81-92c2-f1ff981e81e6,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=15948963-4038-4d81-92c2-f1ff981e81e6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-db-sync-2s9dw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0bffd44eca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3586 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-db-sync-2s9dw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=15948963-4038-4d81-92c2-f1ff981e81e6;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=15948963-4038-4d81-92c2-f1ff981e81e6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0bffd44eca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3586 identity=14975 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=15948963-4038-4d81-92c2-f1ff981e81e6,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=15948963-4038-4d81-92c2-f1ff981e81e6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-db-sync-2s9dw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0bffd44eca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3586 identity=14975 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-db-sync-2s9dw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0bffd44eca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3586 identity=14975 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-db-sync-2s9dw subsys=endpoint level=info msg="Successful endpoint creation" containerID=0bffd44eca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3586 identity=14975 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-db-sync-2s9dw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0bffd44eca endpointID=3586 k8sNamespace=openstack k8sPodName=keystone-db-sync-2s9dw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=15948963-4038-4d81-92c2-f1ff981e81e6 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=15948963-4038-4d81-92c2-f1ff981e81e6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0bffd44eca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3586 identity=14975 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-db-sync-2s9dw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 f6de56ad-7106-4f58-b2cf-25ea2f11ff9d default }" containerID=aa4f9473a7ae4390152196200e0bc1317dd161f16bcb8a3ab3a359ccd9aa6099 datapathConfiguration="&{false false false false false }" interface=lxc55fc7ea57b5b k8sPodName=openstack/keystone-rabbit-init-ssx84 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa4f9473a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2409 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-rabbit-init-ssx84 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa4f9473a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2409 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4aa22234-d59b-424e-9791-d495e40996bc,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4aa22234-d59b-424e-9791-d495e40996bc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-rabbit-init-ssx84 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4aa22234-d59b-424e-9791-d495e40996bc;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=4aa22234-d59b-424e-9791-d495e40996bc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa4f9473a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2409 identity=11883 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4aa22234-d59b-424e-9791-d495e40996bc,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4aa22234-d59b-424e-9791-d495e40996bc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-rabbit-init-ssx84 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa4f9473a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2409 identity=11883 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-rabbit-init-ssx84 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aa4f9473a7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2409 identity=11883 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-rabbit-init-ssx84 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa4f9473a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2409 identity=11883 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-rabbit-init-ssx84 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aa4f9473a7 endpointID=2409 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-ssx84 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4aa22234-d59b-424e-9791-d495e40996bc k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=4aa22234-d59b-424e-9791-d495e40996bc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=aa4f9473a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2409 identity=11883 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-rabbit-init-ssx84 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 2bce11c7-b217-4362-a5a7-97f7a3ca01e0 default }" containerID=0b66f75c0f54d34020f377e83cf32574d49a40bb4d88983baaff397cdf1dd5fc datapathConfiguration="&{false false false false false }" interface=lxc017aa14dcc8d k8sPodName=openstack/keystone-domain-manage-9jxqs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b66f75c0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2705 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-domain-manage-9jxqs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b66f75c0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2705 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3067fda6-0efd-420f-b89a-7bb30d81b10d,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=3067fda6-0efd-420f-b89a-7bb30d81b10d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-domain-manage-9jxqs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0b66f75c0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2705 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-domain-manage-9jxqs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3067fda6-0efd-420f-b89a-7bb30d81b10d;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=3067fda6-0efd-420f-b89a-7bb30d81b10d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b66f75c0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2705 identity=45969 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3067fda6-0efd-420f-b89a-7bb30d81b10d,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=3067fda6-0efd-420f-b89a-7bb30d81b10d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-domain-manage-9jxqs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b66f75c0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2705 identity=45969 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-domain-manage-9jxqs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0b66f75c0f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2705 identity=45969 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-domain-manage-9jxqs subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b66f75c0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2705 identity=45969 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-domain-manage-9jxqs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0b66f75c0f endpointID=2705 k8sNamespace=openstack k8sPodName=keystone-domain-manage-9jxqs subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3067fda6-0efd-420f-b89a-7bb30d81b10d k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=3067fda6-0efd-420f-b89a-7bb30d81b10d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0b66f75c0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2705 identity=45969 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-domain-manage-9jxqs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 ac80e5b9-037f-4922-b080-6cc8d95bca2c default }" containerID=5a8f52e1b578bfa1f85456fb4c3c03d9b9734288b6ef17484003fff2fc35cb31 datapathConfiguration="&{false false false false false }" interface=lxca231e3fd6d8e k8sPodName=openstack/keystone-bootstrap-f59wx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a8f52e1b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=375 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-bootstrap-f59wx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a8f52e1b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=375 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=60d5905f-4d37-42c7-b2c3-f031a220b014,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=60d5905f-4d37-42c7-b2c3-f031a220b014,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-bootstrap-f59wx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=60d5905f-4d37-42c7-b2c3-f031a220b014;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=60d5905f-4d37-42c7-b2c3-f031a220b014;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a8f52e1b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=375 identity=42834 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=60d5905f-4d37-42c7-b2c3-f031a220b014,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=60d5905f-4d37-42c7-b2c3-f031a220b014,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-bootstrap-f59wx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a8f52e1b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=375 identity=42834 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-bootstrap-f59wx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5a8f52e1b5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=375 identity=42834 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-bootstrap-f59wx subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a8f52e1b5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=375 identity=42834 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-bootstrap-f59wx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5a8f52e1b5 endpointID=375 k8sNamespace=openstack k8sPodName=keystone-bootstrap-f59wx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=60d5905f-4d37-42c7-b2c3-f031a220b014 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=60d5905f-4d37-42c7-b2c3-f031a220b014 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5a8f52e1b5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=375 identity=42834 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-bootstrap-f59wx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 892625a6-bf58-4b93-9d30-33208af503b0 default }" containerID=0561d4371376f82148508a94a01a0e73016ee55f80fd71964254fc7673f02ebb datapathConfiguration="&{false false false false false }" interface=lxc83d164b5e604 k8sPodName=local-path-storage/helper-pod-create-pvc-b74b1dcf-387a-412d-8b91-39b010bd8a8f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0561d43713 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3799 ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b74b1dcf-387a-412d-8b91-39b010bd8a8f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0561d43713 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3799 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b74b1dcf-387a-412d-8b91-39b010bd8a8f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0561d43713 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3799 identity=10594 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b74b1dcf-387a-412d-8b91-39b010bd8a8f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0561d43713 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3799 identity=10594 ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b74b1dcf-387a-412d-8b91-39b010bd8a8f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0561d43713 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3799 identity=10594 ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b74b1dcf-387a-412d-8b91-39b010bd8a8f subsys=endpoint level=info msg="Successful endpoint creation" containerID=0561d43713 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3799 identity=10594 ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b74b1dcf-387a-412d-8b91-39b010bd8a8f subsys=daemon level=info msg="Delete endpoint request" containerID=0561d43713 endpointID=3799 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b74b1dcf-387a-412d-8b91-39b010bd8a8f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0561d43713 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3799 identity=10594 ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b74b1dcf-387a-412d-8b91-39b010bd8a8f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 1d6a8b33-4203-46cc-9a95-dc96abab2b72 default }" containerID=3b199fc3f3aa5ff329023bca6766a0c3c34648fc5c9cd5ea2a3cdb8c6a87617d datapathConfiguration="&{false false false false false }" interface=lxc9dece0b5cdc7 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b199fc3f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1682 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b199fc3f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1682 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=3b199fc3f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1682 identity=46653 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b199fc3f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1682 identity=46653 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3b199fc3f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1682 identity=46653 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b199fc3f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1682 identity=46653 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.82 fa2840a9-19c4-4830-b6f2-82198e9f999c default }" containerID=94ea5244c90d834fbdf96de36296da8da0d608cb03d121b479ff104cb4a195cb datapathConfiguration="&{false false false false false }" interface=lxcdc094abb9d09 k8sPodName=openstack/barbican-api-7dc867bf4b-69g48 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94ea5244c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3257 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/barbican-api-7dc867bf4b-69g48 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94ea5244c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3257 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/barbican-api-7dc867bf4b-69g48 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=94ea5244c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3257 identity=13939 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/barbican-api-7dc867bf4b-69g48 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=94ea5244c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3257 identity=13939 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/barbican-api-7dc867bf4b-69g48 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.219 7446bac7-f88d-43fe-976d-310477719e02 default }" containerID=472ee8c861fa5498a59c5f922ae76529f018602781cb91f937050484d615a1a6 datapathConfiguration="&{false false false false false }" interface=lxcafe88966940e k8sPodName=openstack/barbican-db-init-lfxwk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=472ee8c861 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3739 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-init-lfxwk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=472ee8c861 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3739 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=425ad7a1-bd97-44b2-ae95-4126a0f611e6,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=425ad7a1-bd97-44b2-ae95-4126a0f611e6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-init-lfxwk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=425ad7a1-bd97-44b2-ae95-4126a0f611e6;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=425ad7a1-bd97-44b2-ae95-4126a0f611e6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=472ee8c861 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3739 identity=2377 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=425ad7a1-bd97-44b2-ae95-4126a0f611e6,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=425ad7a1-bd97-44b2-ae95-4126a0f611e6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-init-lfxwk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=472ee8c861 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3739 identity=2377 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-init-lfxwk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=94ea5244c9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3257 identity=13939 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/barbican-api-7dc867bf4b-69g48 subsys=endpoint level=info msg="Successful endpoint creation" containerID=94ea5244c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3257 identity=13939 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/barbican-api-7dc867bf4b-69g48 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=472ee8c861 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3739 identity=2377 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-init-lfxwk subsys=endpoint level=info msg="Successful endpoint creation" containerID=472ee8c861 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3739 identity=2377 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-init-lfxwk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=472ee8c861 endpointID=3739 k8sNamespace=openstack k8sPodName=barbican-db-init-lfxwk subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=425ad7a1-bd97-44b2-ae95-4126a0f611e6 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=425ad7a1-bd97-44b2-ae95-4126a0f611e6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=472ee8c861 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3739 identity=2377 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-init-lfxwk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.88 2e487cde-c4c8-4933-81e4-915bffe4f096 default }" containerID=7d22a26ebba9ddab10a7d21b41e3eabb1d97c34457e66c0e8cff19e2d7da2976 datapathConfiguration="&{false false false false false }" interface=lxc845ad98855d7 k8sPodName=openstack/barbican-db-sync-lbkrg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7d22a26ebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1770 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-db-sync-lbkrg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7d22a26ebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1770 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=755073a6-5178-4cf4-8807-baef2bac6f14,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=755073a6-5178-4cf4-8807-baef2bac6f14,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-db-sync-lbkrg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=755073a6-5178-4cf4-8807-baef2bac6f14;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=755073a6-5178-4cf4-8807-baef2bac6f14;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7d22a26ebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1770 identity=9402 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=755073a6-5178-4cf4-8807-baef2bac6f14,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=755073a6-5178-4cf4-8807-baef2bac6f14,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-db-sync-lbkrg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7d22a26ebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1770 identity=9402 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-db-sync-lbkrg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7d22a26ebb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1770 identity=9402 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-db-sync-lbkrg subsys=endpoint level=info msg="Successful endpoint creation" containerID=7d22a26ebb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1770 identity=9402 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-db-sync-lbkrg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7d22a26ebb endpointID=1770 k8sNamespace=openstack k8sPodName=barbican-db-sync-lbkrg subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=755073a6-5178-4cf4-8807-baef2bac6f14 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=755073a6-5178-4cf4-8807-baef2bac6f14 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=7d22a26ebb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1770 identity=9402 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-db-sync-lbkrg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 79cc6ea1-fbe9-4bf5-942f-5d2c50ef5af7 default }" containerID=c1155191e7f9f80b152ded65cc6a4ee10f5314f2e674639904c479c853716533 datapathConfiguration="&{false false false false false }" interface=lxcf3d429632ee6 k8sPodName=openstack/barbican-rabbit-init-gld6g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1155191e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1512 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-rabbit-init-gld6g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1155191e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1512 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=23e777dc-13d0-4a90-b771-0312039a9f1c,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=23e777dc-13d0-4a90-b771-0312039a9f1c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-rabbit-init-gld6g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c1155191e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1512 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-rabbit-init-gld6g line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=23e777dc-13d0-4a90-b771-0312039a9f1c;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=23e777dc-13d0-4a90-b771-0312039a9f1c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1155191e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1512 identity=18806 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=23e777dc-13d0-4a90-b771-0312039a9f1c,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=23e777dc-13d0-4a90-b771-0312039a9f1c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-rabbit-init-gld6g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1155191e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1512 identity=18806 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-rabbit-init-gld6g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c1155191e7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1512 identity=18806 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-rabbit-init-gld6g subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1155191e7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1512 identity=18806 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-rabbit-init-gld6g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c1155191e7 endpointID=1512 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-gld6g subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=23e777dc-13d0-4a90-b771-0312039a9f1c k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=23e777dc-13d0-4a90-b771-0312039a9f1c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c1155191e7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1512 identity=18806 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-rabbit-init-gld6g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 1baa5af0-d40f-458c-a1cb-8eccdbf38e94 default }" containerID=f4c8ac00f53ba094783276575f4dc2758b895d2feb1cfeb0ade14ee7de8d541a datapathConfiguration="&{false false false false false }" interface=lxc2211cab67da3 k8sPodName=openstack/barbican-ks-service-bdkvp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f4c8ac00f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1163 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/barbican-ks-service-bdkvp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f4c8ac00f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1163 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5cdce0e3-f71a-4a74-b5ff-91022a2f25c3,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=5cdce0e3-f71a-4a74-b5ff-91022a2f25c3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/barbican-ks-service-bdkvp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5cdce0e3-f71a-4a74-b5ff-91022a2f25c3;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=5cdce0e3-f71a-4a74-b5ff-91022a2f25c3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f4c8ac00f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1163 identity=705 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5cdce0e3-f71a-4a74-b5ff-91022a2f25c3,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=5cdce0e3-f71a-4a74-b5ff-91022a2f25c3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/barbican-ks-service-bdkvp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f4c8ac00f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1163 identity=705 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/barbican-ks-service-bdkvp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f4c8ac00f5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1163 identity=705 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/barbican-ks-service-bdkvp subsys=endpoint level=info msg="Successful endpoint creation" containerID=f4c8ac00f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1163 identity=705 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/barbican-ks-service-bdkvp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.036394010307465474 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=f4c8ac00f5 endpointID=1163 k8sNamespace=openstack k8sPodName=barbican-ks-service-bdkvp subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5cdce0e3-f71a-4a74-b5ff-91022a2f25c3 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=5cdce0e3-f71a-4a74-b5ff-91022a2f25c3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f4c8ac00f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1163 identity=705 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/barbican-ks-service-bdkvp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.147 47d380b3-e88f-4708-8c08-873bb11b5010 default }" containerID=d55cbb7c06b4ff7d80d4f275580235731bce18695a8f11e6e0c40af86847e360 datapathConfiguration="&{false false false false false }" interface=lxcd9b9192502d2 k8sPodName=openstack/barbican-ks-endpoints-xbmgf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d55cbb7c06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-ks-endpoints-xbmgf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d55cbb7c06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8df9b703-5952-4dc3-9f94-893df38c6748,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=8df9b703-5952-4dc3-9f94-893df38c6748,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-ks-endpoints-xbmgf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=8df9b703-5952-4dc3-9f94-893df38c6748;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=8df9b703-5952-4dc3-9f94-893df38c6748;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d55cbb7c06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 identity=2735 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8df9b703-5952-4dc3-9f94-893df38c6748,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=8df9b703-5952-4dc3-9f94-893df38c6748,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-ks-endpoints-xbmgf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d55cbb7c06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 identity=2735 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-ks-endpoints-xbmgf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d55cbb7c06 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=434 identity=2735 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-ks-endpoints-xbmgf subsys=endpoint level=info msg="Successful endpoint creation" containerID=d55cbb7c06 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=434 identity=2735 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-ks-endpoints-xbmgf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d55cbb7c06 endpointID=434 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-xbmgf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=8df9b703-5952-4dc3-9f94-893df38c6748 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=8df9b703-5952-4dc3-9f94-893df38c6748 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d55cbb7c06 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=434 identity=2735 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-ks-endpoints-xbmgf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 9fc49203-091e-4f6f-a162-4e90e0f9d324 default }" containerID=02b12af8665179428775d6536c8a20cdaad350831b70a860066358ed3d37e9aa datapathConfiguration="&{false false false false false }" interface=lxc7f1ef2d618b3 k8sPodName=openstack/barbican-ks-user-64nwq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=02b12af866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/barbican-ks-user-64nwq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=02b12af866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=27b4f751-a38f-45a5-8c1b-eb899aa12193,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=27b4f751-a38f-45a5-8c1b-eb899aa12193,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/barbican-ks-user-64nwq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=27b4f751-a38f-45a5-8c1b-eb899aa12193;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=27b4f751-a38f-45a5-8c1b-eb899aa12193;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=02b12af866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 identity=42089 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=27b4f751-a38f-45a5-8c1b-eb899aa12193,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=27b4f751-a38f-45a5-8c1b-eb899aa12193,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/barbican-ks-user-64nwq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=02b12af866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 identity=42089 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/barbican-ks-user-64nwq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=02b12af866 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=879 identity=42089 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/barbican-ks-user-64nwq subsys=endpoint level=info msg="Successful endpoint creation" containerID=02b12af866 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=879 identity=42089 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/barbican-ks-user-64nwq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=02b12af866 endpointID=879 k8sNamespace=openstack k8sPodName=barbican-ks-user-64nwq subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=27b4f751-a38f-45a5-8c1b-eb899aa12193 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=27b4f751-a38f-45a5-8c1b-eb899aa12193 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=02b12af866 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=879 identity=42089 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/barbican-ks-user-64nwq subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.211 626576d0-322b-452d-90d4-acf10c0d918f default }" containerID=255fc36afa23d3ed7fc41b036efbeafe8cdb326966886f12cb4a0675210ab5a4 datapathConfiguration="&{false false false false false }" interface=lxc79556b181c6b k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kjvqk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=255fc36afa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=566 ipv4=10.0.0.211 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kjvqk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=255fc36afa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=566 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.211 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kjvqk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=255fc36afa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=566 identity=18203 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.211 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kjvqk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=255fc36afa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=566 identity=18203 ipv4=10.0.0.211 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kjvqk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=255fc36afa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=566 identity=18203 ipv4=10.0.0.211 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kjvqk subsys=endpoint level=info msg="Successful endpoint creation" containerID=255fc36afa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=566 identity=18203 ipv4=10.0.0.211 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kjvqk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.11 27480938-e8a3-4c8c-8d83-d743141f8d45 default }" containerID=9e3a722baad628e252411cef708b1ee69b6f4783cb8522d3520d680537e15cc2 datapathConfiguration="&{false false false false false }" interface=lxc0fef6b661911 k8sPodName=openstack/rook-ceph-detect-version-fl9mb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e3a722baa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2432 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rook-ceph-detect-version-fl9mb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e3a722baa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2432 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=6a70a559-8206-47a7-814f-380e225d28f9,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=6a70a559-8206-47a7-814f-380e225d28f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rook-ceph-detect-version-fl9mb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=6a70a559-8206-47a7-814f-380e225d28f9;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=6a70a559-8206-47a7-814f-380e225d28f9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e3a722baa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2432 identity=61262 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=6a70a559-8206-47a7-814f-380e225d28f9,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=6a70a559-8206-47a7-814f-380e225d28f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rook-ceph-detect-version-fl9mb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e3a722baa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2432 identity=61262 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rook-ceph-detect-version-fl9mb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9e3a722baa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2432 identity=61262 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rook-ceph-detect-version-fl9mb subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e3a722baa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2432 identity=61262 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rook-ceph-detect-version-fl9mb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9e3a722baa endpointID=2432 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-fl9mb subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=6a70a559-8206-47a7-814f-380e225d28f9 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=6a70a559-8206-47a7-814f-380e225d28f9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=9e3a722baa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2432 identity=61262 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rook-ceph-detect-version-fl9mb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 75d18a90-0199-487e-bf4e-93fbcf3bf8d5 default }" containerID=25e0e57eac40ac3cee3e54b336f85a24260044b468845f57dd12afdb029a32f9 datapathConfiguration="&{false false false false false }" interface=lxc9da8c19bfffc k8sPodName=openstack/ceph-object-controller-detect-version-fq8wm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=25e0e57eac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-fq8wm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=25e0e57eac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=680491f3-fa0d-476f-9355-e0e50170ecbe,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=680491f3-fa0d-476f-9355-e0e50170ecbe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-fq8wm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=680491f3-fa0d-476f-9355-e0e50170ecbe;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=680491f3-fa0d-476f-9355-e0e50170ecbe;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=25e0e57eac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.71 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-fq8wm line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=25e0e57eac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 identity=4180 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=680491f3-fa0d-476f-9355-e0e50170ecbe,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=680491f3-fa0d-476f-9355-e0e50170ecbe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-fq8wm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=25e0e57eac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 identity=4180 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-fq8wm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=25e0e57eac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1830 identity=4180 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-fq8wm subsys=endpoint level=info msg="Successful endpoint creation" containerID=25e0e57eac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1830 identity=4180 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-fq8wm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=25e0e57eac endpointID=1830 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-fq8wm subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=680491f3-fa0d-476f-9355-e0e50170ecbe k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=680491f3-fa0d-476f-9355-e0e50170ecbe k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=25e0e57eac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1830 identity=4180 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-fq8wm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 8ddfb2aa-a30d-411a-89ef-d3edccf1f69d default }" containerID=c96d5b48da4c8e611da4a152892b5ab90a08b7cf889d01c8ae190706e618333c datapathConfiguration="&{false false false false false }" interface=lxc9956069e5f0c k8sPodName=local-path-storage/helper-pod-create-pvc-a98087fb-3719-4e5d-85e2-cd18531a878f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c96d5b48da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=474 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a98087fb-3719-4e5d-85e2-cd18531a878f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c96d5b48da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=474 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a98087fb-3719-4e5d-85e2-cd18531a878f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c96d5b48da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=474 identity=10594 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a98087fb-3719-4e5d-85e2-cd18531a878f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c96d5b48da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=474 identity=10594 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a98087fb-3719-4e5d-85e2-cd18531a878f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c96d5b48da datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=474 identity=10594 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a98087fb-3719-4e5d-85e2-cd18531a878f subsys=endpoint level=info msg="Successful endpoint creation" containerID=c96d5b48da datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=474 identity=10594 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a98087fb-3719-4e5d-85e2-cd18531a878f subsys=daemon level=info msg="Delete endpoint request" containerID=c96d5b48da endpointID=474 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a98087fb-3719-4e5d-85e2-cd18531a878f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c96d5b48da datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=474 identity=10594 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a98087fb-3719-4e5d-85e2-cd18531a878f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 52141344-7708-49c9-8688-14da210c7a0a default }" containerID=e4ea6584da256ff27813439955491fff3d2069a2ee062dfdd1aa7eccbccbdeac datapathConfiguration="&{false false false false false }" interface=lxc01b83971009e k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4ea6584da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=821 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4ea6584da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=821 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e4ea6584da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=821 identity=30967 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4ea6584da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=821 identity=30967 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e4ea6584da datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=821 identity=30967 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4ea6584da datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=821 identity=30967 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.37 2d08a1f7-27ff-4093-bef8-6e7d0573d6eb default }" containerID=d9f1a844d5e3d73172ebb6753fc06bb8f7fad1ab2d0e4b579d5ebd7a3b3c0ba8 datapathConfiguration="&{false false false false false }" interface=lxc9dad5f989feb k8sPodName=openstack/glance-db-init-chq7l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d9f1a844d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2856 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-db-init-chq7l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d9f1a844d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2856 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6f4c4b32-e39c-4d0f-aeaf-45e1e01e8b5e,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=6f4c4b32-e39c-4d0f-aeaf-45e1e01e8b5e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-db-init-chq7l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d9f1a844d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2856 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-db-init-chq7l line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6f4c4b32-e39c-4d0f-aeaf-45e1e01e8b5e;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=6f4c4b32-e39c-4d0f-aeaf-45e1e01e8b5e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d9f1a844d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2856 identity=13658 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6f4c4b32-e39c-4d0f-aeaf-45e1e01e8b5e,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=6f4c4b32-e39c-4d0f-aeaf-45e1e01e8b5e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-db-init-chq7l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d9f1a844d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2856 identity=13658 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-db-init-chq7l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d9f1a844d5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2856 identity=13658 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-db-init-chq7l subsys=endpoint level=info msg="Successful endpoint creation" containerID=d9f1a844d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2856 identity=13658 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-db-init-chq7l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.44 778f5b94-bb1d-4984-a4bf-1df59234ff1f default }" containerID=cef8993a71e5e3084e0df75197a2ae118be2f2adbd6ec7722daae5bfbf1b03cd datapathConfiguration="&{false false false false false }" interface=lxcbcf63ec97322 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-b5jqb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cef8993a71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1213 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-b5jqb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cef8993a71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1213 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-b5jqb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cef8993a71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1213 identity=49149 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-b5jqb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=cef8993a71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1213 identity=49149 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-b5jqb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 e0d1b252-2a05-40d6-b487-13fc4b79c6d8 default }" containerID=e0ab4f391ba40e0e690a3c1d44c5768ed84dc5f9a4fa70e41cc27704d0e36bfd datapathConfiguration="&{false false false false false }" interface=lxc174a595e4424 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-t6wb6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e0ab4f391b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1388 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-t6wb6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e0ab4f391b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1388 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-t6wb6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e0ab4f391b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1388 identity=6028 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-t6wb6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e0ab4f391b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1388 identity=6028 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-t6wb6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cef8993a71 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1213 identity=49149 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-b5jqb subsys=endpoint level=info msg="Successful endpoint creation" containerID=cef8993a71 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1213 identity=49149 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-b5jqb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e0ab4f391b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1388 identity=6028 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-t6wb6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e0ab4f391b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1388 identity=6028 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-t6wb6 subsys=daemon level=info msg="Delete endpoint request" containerID=d9f1a844d5 endpointID=2856 k8sNamespace=openstack k8sPodName=glance-db-init-chq7l subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6f4c4b32-e39c-4d0f-aeaf-45e1e01e8b5e k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=6f4c4b32-e39c-4d0f-aeaf-45e1e01e8b5e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d9f1a844d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2856 identity=13658 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-db-init-chq7l subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.158 cf3ad2a2-b6b1-4197-a5a5-6b010ce9b79d default }" containerID=d433e941c86a831619e72c746a8f5720e0a5555b386b09876782da887a94a88d datapathConfiguration="&{false false false false false }" interface=lxc74b3089bb8f6 k8sPodName=openstack/glance-db-sync-4sbsc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d433e941c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1308 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-db-sync-4sbsc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d433e941c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1308 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d85f6a6d-02f0-47c3-a842-f4e6abb3d7d7,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=d85f6a6d-02f0-47c3-a842-f4e6abb3d7d7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-db-sync-4sbsc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d85f6a6d-02f0-47c3-a842-f4e6abb3d7d7;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=d85f6a6d-02f0-47c3-a842-f4e6abb3d7d7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d433e941c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1308 identity=22993 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d85f6a6d-02f0-47c3-a842-f4e6abb3d7d7,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=d85f6a6d-02f0-47c3-a842-f4e6abb3d7d7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-db-sync-4sbsc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d433e941c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1308 identity=22993 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-db-sync-4sbsc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d433e941c8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1308 identity=22993 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-db-sync-4sbsc subsys=endpoint level=info msg="Successful endpoint creation" containerID=d433e941c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1308 identity=22993 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-db-sync-4sbsc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d433e941c8 endpointID=1308 k8sNamespace=openstack k8sPodName=glance-db-sync-4sbsc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d85f6a6d-02f0-47c3-a842-f4e6abb3d7d7 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=d85f6a6d-02f0-47c3-a842-f4e6abb3d7d7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d433e941c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1308 identity=22993 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-db-sync-4sbsc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 6ff907c2-6fa7-4df8-813b-45d024419ab4 default }" containerID=f1f6f521e10f461dbe78e46903d9d8ca3a0557db8d5840f98ca0fe9de35ad29b datapathConfiguration="&{false false false false false }" interface=lxce424d9766ad9 k8sPodName=openstack/glance-rabbit-init-pcx42 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f1f6f521e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1524 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-rabbit-init-pcx42 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f1f6f521e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1524 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c50feaf1-3407-4944-bafd-af5db1a0c458,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c50feaf1-3407-4944-bafd-af5db1a0c458,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-rabbit-init-pcx42 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f1f6f521e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1524 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-rabbit-init-pcx42 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c50feaf1-3407-4944-bafd-af5db1a0c458;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=c50feaf1-3407-4944-bafd-af5db1a0c458;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f1f6f521e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1524 identity=21043 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c50feaf1-3407-4944-bafd-af5db1a0c458,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c50feaf1-3407-4944-bafd-af5db1a0c458,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-rabbit-init-pcx42 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f1f6f521e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1524 identity=21043 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-rabbit-init-pcx42 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f1f6f521e1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1524 identity=21043 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-rabbit-init-pcx42 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f1f6f521e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1524 identity=21043 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-rabbit-init-pcx42 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f1f6f521e1 endpointID=1524 k8sNamespace=openstack k8sPodName=glance-rabbit-init-pcx42 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c50feaf1-3407-4944-bafd-af5db1a0c458 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=c50feaf1-3407-4944-bafd-af5db1a0c458 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f1f6f521e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1524 identity=21043 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-rabbit-init-pcx42 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 eb3c34d2-9bf4-4f78-a88f-3a945c788246 default }" containerID=107b0907f4c22ddb523bc59a2addd85ac145cd9b1db260b6549030e7228f432b datapathConfiguration="&{false false false false false }" interface=lxccb1abcb70b61 k8sPodName=openstack/glance-ks-service-b7g2z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=107b0907f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/glance-ks-service-b7g2z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=107b0907f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=aad6cdee-da5a-425e-97ce-64a379ef724b,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=aad6cdee-da5a-425e-97ce-64a379ef724b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/glance-ks-service-b7g2z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=107b0907f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.164 ipv6= k8sPodName=openstack/glance-ks-service-b7g2z line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=aad6cdee-da5a-425e-97ce-64a379ef724b;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=aad6cdee-da5a-425e-97ce-64a379ef724b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=107b0907f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 identity=1586 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=aad6cdee-da5a-425e-97ce-64a379ef724b,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=aad6cdee-da5a-425e-97ce-64a379ef724b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/glance-ks-service-b7g2z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=107b0907f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 identity=1586 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/glance-ks-service-b7g2z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=107b0907f4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=891 identity=1586 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/glance-ks-service-b7g2z subsys=endpoint level=info msg="Successful endpoint creation" containerID=107b0907f4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=891 identity=1586 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/glance-ks-service-b7g2z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=107b0907f4 endpointID=891 k8sNamespace=openstack k8sPodName=glance-ks-service-b7g2z subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=aad6cdee-da5a-425e-97ce-64a379ef724b k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=aad6cdee-da5a-425e-97ce-64a379ef724b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=107b0907f4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=891 identity=1586 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/glance-ks-service-b7g2z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.167 92eb8d36-e003-4eda-8cb7-0979be196ca6 default }" containerID=721c5b9b0f1c2717df41cdf81ecfa8f00bbba055d2047c251cfcbd0b1763d140 datapathConfiguration="&{false false false false false }" interface=lxc43e5edacf205 k8sPodName=openstack/glance-ks-endpoints-qnt79 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=721c5b9b0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=369 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/glance-ks-endpoints-qnt79 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=721c5b9b0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=369 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f61144b0-9070-4bfe-8970-e28eca9c41ea,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f61144b0-9070-4bfe-8970-e28eca9c41ea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/glance-ks-endpoints-qnt79 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=721c5b9b0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=369 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.167 ipv6= k8sPodName=openstack/glance-ks-endpoints-qnt79 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f61144b0-9070-4bfe-8970-e28eca9c41ea;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=f61144b0-9070-4bfe-8970-e28eca9c41ea;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=721c5b9b0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=369 identity=56932 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f61144b0-9070-4bfe-8970-e28eca9c41ea,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f61144b0-9070-4bfe-8970-e28eca9c41ea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/glance-ks-endpoints-qnt79 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=721c5b9b0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=369 identity=56932 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/glance-ks-endpoints-qnt79 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=721c5b9b0f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=369 identity=56932 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/glance-ks-endpoints-qnt79 subsys=endpoint level=info msg="Successful endpoint creation" containerID=721c5b9b0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=369 identity=56932 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/glance-ks-endpoints-qnt79 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=721c5b9b0f endpointID=369 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-qnt79 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f61144b0-9070-4bfe-8970-e28eca9c41ea k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=f61144b0-9070-4bfe-8970-e28eca9c41ea k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=721c5b9b0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=369 identity=56932 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/glance-ks-endpoints-qnt79 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 bd36073e-3dde-4889-809f-77f6d2ba238a default }" containerID=12b4f2c56aaee77c3ee023f4267ddb83b0c4df94f4dfdf1afe8fc76ea9222fae datapathConfiguration="&{false false false false false }" interface=lxc197020fc4d12 k8sPodName=openstack/glance-ks-user-xdk9n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=12b4f2c56a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2442 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-ks-user-xdk9n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=12b4f2c56a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2442 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0f29b30c-dcc9-4311-abc9-d28fc065c460,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=0f29b30c-dcc9-4311-abc9-d28fc065c460,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-ks-user-xdk9n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0f29b30c-dcc9-4311-abc9-d28fc065c460;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=0f29b30c-dcc9-4311-abc9-d28fc065c460;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=12b4f2c56a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2442 identity=30395 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0f29b30c-dcc9-4311-abc9-d28fc065c460,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=0f29b30c-dcc9-4311-abc9-d28fc065c460,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-ks-user-xdk9n oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=12b4f2c56a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2442 identity=30395 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-ks-user-xdk9n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=12b4f2c56a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2442 identity=30395 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-ks-user-xdk9n subsys=endpoint level=info msg="Successful endpoint creation" containerID=12b4f2c56a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2442 identity=30395 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-ks-user-xdk9n subsys=daemon level=info msg="Delete endpoint request" containerID=12b4f2c56a endpointID=2442 k8sNamespace=openstack k8sPodName=glance-ks-user-xdk9n subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0f29b30c-dcc9-4311-abc9-d28fc065c460 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=0f29b30c-dcc9-4311-abc9-d28fc065c460 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=12b4f2c56a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2442 identity=30395 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-ks-user-xdk9n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 e20cabe4-f0fb-4b13-aa8e-7b65aaa33935 default }" containerID=94f1b1d3114bd2352a4000c203018d8efb035323a4100b3d082edcc5aa267469 datapathConfiguration="&{false false false false false }" interface=lxcf7a7d0eec56e k8sPodName=openstack/glance-metadefs-load-kzqsp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94f1b1d311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3156 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-metadefs-load-kzqsp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94f1b1d311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3156 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=37096fc2-4723-496a-a524-f49aee272608,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=37096fc2-4723-496a-a524-f49aee272608,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-metadefs-load-kzqsp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=37096fc2-4723-496a-a524-f49aee272608;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=37096fc2-4723-496a-a524-f49aee272608;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=94f1b1d311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3156 identity=17611 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=37096fc2-4723-496a-a524-f49aee272608,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=37096fc2-4723-496a-a524-f49aee272608,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-metadefs-load-kzqsp oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=94f1b1d311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3156 identity=17611 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-metadefs-load-kzqsp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=94f1b1d311 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3156 identity=17611 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-metadefs-load-kzqsp subsys=endpoint level=info msg="Successful endpoint creation" containerID=94f1b1d311 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3156 identity=17611 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-metadefs-load-kzqsp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=94f1b1d311 endpointID=3156 k8sNamespace=openstack k8sPodName=glance-metadefs-load-kzqsp subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=37096fc2-4723-496a-a524-f49aee272608 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=37096fc2-4723-496a-a524-f49aee272608 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=94f1b1d311 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3156 identity=17611 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-metadefs-load-kzqsp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.177 7c50f6a9-7cb7-445b-9b6c-7d41af9f27fa default }" containerID=6d55f839db668e9af312aa699ae481d7e01f734f80fb0dbf945afb30596feea5 datapathConfiguration="&{false false false false false }" interface=lxc9e0a19b7987f k8sPodName=openstack/glance-storage-init-xtbnm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d55f839db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2084 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-storage-init-xtbnm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d55f839db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2084 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=491af4eb-b19a-4e69-ba62-8f12be27f8db,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=491af4eb-b19a-4e69-ba62-8f12be27f8db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-storage-init-xtbnm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=491af4eb-b19a-4e69-ba62-8f12be27f8db;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=491af4eb-b19a-4e69-ba62-8f12be27f8db;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d55f839db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2084 identity=57092 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=491af4eb-b19a-4e69-ba62-8f12be27f8db,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=491af4eb-b19a-4e69-ba62-8f12be27f8db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-storage-init-xtbnm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6d55f839db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2084 identity=57092 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-storage-init-xtbnm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6d55f839db datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2084 identity=57092 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-storage-init-xtbnm subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d55f839db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2084 identity=57092 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-storage-init-xtbnm subsys=daemon level=info msg="Delete endpoint request" containerID=6d55f839db endpointID=2084 k8sNamespace=openstack k8sPodName=glance-storage-init-xtbnm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=491af4eb-b19a-4e69-ba62-8f12be27f8db k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=491af4eb-b19a-4e69-ba62-8f12be27f8db k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6d55f839db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2084 identity=57092 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-storage-init-xtbnm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 04447556-fb84-4274-9f6c-3203b928880f default }" containerID=9e7950382f7f00e65d48d9abd1ab3a9c2ff6fba29e9458fbd090072bc15d2279 datapathConfiguration="&{false false false false false }" interface=lxcd4a740e7282c k8sPodName=openstack/glance-api-7f897f5d64-9x8zg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e7950382f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3890 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-api-7f897f5d64-9x8zg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e7950382f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3890 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-api-7f897f5d64-9x8zg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9e7950382f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3890 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-api-7f897f5d64-9x8zg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e7950382f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3890 identity=26408 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-api-7f897f5d64-9x8zg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e7950382f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3890 identity=26408 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-api-7f897f5d64-9x8zg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e7950382f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3890 identity=26408 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-api-7f897f5d64-9x8zg subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e7950382f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3890 identity=26408 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-api-7f897f5d64-9x8zg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.176 5bd8af8f-64e2-42a2-b459-b4de33e62616 default }" containerID=16e9998e6090e5df988aabeeefaec5791acd7faf2869ea94f7fe4ebd9a95cbf9 datapathConfiguration="&{false false false false false }" interface=lxc95128740e079 k8sPodName=openstack/staffeln-api-7b479b7c67-25bh5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=16e9998e60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1214 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/staffeln-api-7b479b7c67-25bh5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=16e9998e60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1214 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/staffeln-api-7b479b7c67-25bh5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.130 95d556e1-f7cc-4782-baac-821bf53ce7d5 default }" containerID=ab9212515adc06032366b3db724a2af0fb4ec4500162eaa955fbe891268a3dd8 datapathConfiguration="&{false false false false false }" interface=lxc603a84d3117a k8sPodName=openstack/staffeln-conductor-76cb7b7ccb-7fqtg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ab9212515a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1434 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/staffeln-conductor-76cb7b7ccb-7fqtg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab9212515a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1434 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/staffeln-conductor-76cb7b7ccb-7fqtg subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=16e9998e60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1214 identity=6450 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/staffeln-api-7b479b7c67-25bh5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=16e9998e60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1214 identity=6450 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/staffeln-api-7b479b7c67-25bh5 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=ab9212515a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1434 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.130 ipv6= k8sPodName=openstack/staffeln-conductor-76cb7b7ccb-7fqtg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ab9212515a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1434 identity=6507 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/staffeln-conductor-76cb7b7ccb-7fqtg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ab9212515a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1434 identity=6507 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/staffeln-conductor-76cb7b7ccb-7fqtg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 a4fcec36-fcc2-4950-818f-f758589a9a50 default }" containerID=5f0c080706c5039db6e85cb3fbcdcc18a28c6fed0b34441c46770816dd2075d9 datapathConfiguration="&{false false false false false }" interface=lxc9c4f9e787f1f k8sPodName=openstack/staffeln-db-init-mqh29 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f0c080706 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2768 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/staffeln-db-init-mqh29 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f0c080706 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2768 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=21eaf7a4-7a61-450d-bb92-8e828fe35835,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=21eaf7a4-7a61-450d-bb92-8e828fe35835,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/staffeln-db-init-mqh29 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=21eaf7a4-7a61-450d-bb92-8e828fe35835;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=21eaf7a4-7a61-450d-bb92-8e828fe35835;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5f0c080706 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2768 identity=7619 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=21eaf7a4-7a61-450d-bb92-8e828fe35835,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=21eaf7a4-7a61-450d-bb92-8e828fe35835,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/staffeln-db-init-mqh29 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f0c080706 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2768 identity=7619 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/staffeln-db-init-mqh29 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ab9212515a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1434 identity=6507 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/staffeln-conductor-76cb7b7ccb-7fqtg subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab9212515a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1434 identity=6507 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/staffeln-conductor-76cb7b7ccb-7fqtg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=16e9998e60 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1214 identity=6450 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/staffeln-api-7b479b7c67-25bh5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=16e9998e60 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1214 identity=6450 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/staffeln-api-7b479b7c67-25bh5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5f0c080706 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2768 identity=7619 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/staffeln-db-init-mqh29 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f0c080706 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2768 identity=7619 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/staffeln-db-init-mqh29 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5f0c080706 endpointID=2768 k8sNamespace=openstack k8sPodName=staffeln-db-init-mqh29 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=21eaf7a4-7a61-450d-bb92-8e828fe35835 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=21eaf7a4-7a61-450d-bb92-8e828fe35835 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=5f0c080706 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2768 identity=7619 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/staffeln-db-init-mqh29 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 bf0851f6-80d4-45a3-9d8c-3d40fd06cb1c default }" containerID=d859c568e6aeb419357532b2da1e7cbcb0c2937f47a3d34aeedbce5b6cc5165e datapathConfiguration="&{false false false false false }" interface=lxc9b2e2b25e252 k8sPodName=openstack/staffeln-db-sync-q6fkj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d859c568e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/staffeln-db-sync-q6fkj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d859c568e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=9f5d288c-4b02-404e-8d70-a9b031f692b3,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=9f5d288c-4b02-404e-8d70-a9b031f692b3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/staffeln-db-sync-q6fkj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=9f5d288c-4b02-404e-8d70-a9b031f692b3;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=9f5d288c-4b02-404e-8d70-a9b031f692b3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d859c568e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identity=50374 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=9f5d288c-4b02-404e-8d70-a9b031f692b3,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=9f5d288c-4b02-404e-8d70-a9b031f692b3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/staffeln-db-sync-q6fkj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d859c568e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identity=50374 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/staffeln-db-sync-q6fkj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d859c568e6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=45 identity=50374 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/staffeln-db-sync-q6fkj subsys=endpoint level=info msg="Successful endpoint creation" containerID=d859c568e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=45 identity=50374 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/staffeln-db-sync-q6fkj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d859c568e6 endpointID=45 k8sNamespace=openstack k8sPodName=staffeln-db-sync-q6fkj subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=9f5d288c-4b02-404e-8d70-a9b031f692b3 k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=9f5d288c-4b02-404e-8d70-a9b031f692b3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=d859c568e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=45 identity=50374 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/staffeln-db-sync-q6fkj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 1908f61f-6253-477f-95f4-771f7f287d54 default }" containerID=035e92bf5d8bf8764180c021b1cbd244bfb4ca2d6e697b1249b06306fe0a5589 datapathConfiguration="&{false false false false false }" interface=lxcae1afa2f3395 k8sPodName=local-path-storage/helper-pod-create-pvc-48d145a0-9327-4427-bb73-ca893cb308b1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=035e92bf5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3107 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-48d145a0-9327-4427-bb73-ca893cb308b1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=035e92bf5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3107 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-48d145a0-9327-4427-bb73-ca893cb308b1 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=035e92bf5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3107 identity=10594 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-48d145a0-9327-4427-bb73-ca893cb308b1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=035e92bf5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3107 identity=10594 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-48d145a0-9327-4427-bb73-ca893cb308b1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=035e92bf5d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3107 identity=10594 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-48d145a0-9327-4427-bb73-ca893cb308b1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=035e92bf5d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3107 identity=10594 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-48d145a0-9327-4427-bb73-ca893cb308b1 subsys=daemon level=info msg="Delete endpoint request" containerID=035e92bf5d endpointID=3107 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-48d145a0-9327-4427-bb73-ca893cb308b1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=035e92bf5d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3107 identity=10594 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-48d145a0-9327-4427-bb73-ca893cb308b1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 baa669a5-7520-4a31-8eba-9d1f1d564033 default }" containerID=f26a494ce1fbd35523315d2708f30c24d28dcc29f4d55856906cb72b1c1a6fa6 datapathConfiguration="&{false false false false false }" interface=lxc4db3bf2b4723 k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f26a494ce1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1806 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f26a494ce1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1806 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f26a494ce1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1806 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f26a494ce1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1806 identity=27913 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f26a494ce1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1806 identity=27913 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f26a494ce1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1806 identity=27913 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f26a494ce1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1806 identity=27913 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.120 1f0ac2a6-dc2f-48ae-b5e7-0487ae8a3aad default }" containerID=62ce5161cbc14ec7a978d6de09b20fc16c0e1d107d923e0d69ca992499580409 datapathConfiguration="&{false false false false false }" interface=lxce70ef4a43af7 k8sPodName=openstack/cinder-scheduler-77c8874cf9-z9jrg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62ce5161cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3350 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/cinder-scheduler-77c8874cf9-z9jrg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62ce5161cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3350 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/cinder-scheduler-77c8874cf9-z9jrg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=62ce5161cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3350 identity=8890 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/cinder-scheduler-77c8874cf9-z9jrg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=62ce5161cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3350 identity=8890 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/cinder-scheduler-77c8874cf9-z9jrg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 1608be37-4682-4241-9c96-fd14c42db146 default }" containerID=c4f78afc53758cf9860e307db6a81167817164b1da0ceeb7c01a47aa21a258cf datapathConfiguration="&{false false false false false }" interface=lxcac7263387d3b k8sPodName=openstack/cinder-db-init-wtv45 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c4f78afc53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2798 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/cinder-db-init-wtv45 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c4f78afc53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2798 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=94a1026d-5b7d-459a-a5eb-8763ebf9af60,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=94a1026d-5b7d-459a-a5eb-8763ebf9af60,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/cinder-db-init-wtv45 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=94a1026d-5b7d-459a-a5eb-8763ebf9af60;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=94a1026d-5b7d-459a-a5eb-8763ebf9af60;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c4f78afc53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2798 identity=30684 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=94a1026d-5b7d-459a-a5eb-8763ebf9af60,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=94a1026d-5b7d-459a-a5eb-8763ebf9af60,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/cinder-db-init-wtv45 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c4f78afc53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2798 identity=30684 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/cinder-db-init-wtv45 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=62ce5161cb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3350 identity=8890 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/cinder-scheduler-77c8874cf9-z9jrg subsys=endpoint level=info msg="Successful endpoint creation" containerID=62ce5161cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3350 identity=8890 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/cinder-scheduler-77c8874cf9-z9jrg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c4f78afc53 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2798 identity=30684 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/cinder-db-init-wtv45 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4f78afc53 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2798 identity=30684 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/cinder-db-init-wtv45 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.43 8c10806e-e311-4886-840f-133b5c023369 default }" containerID=d94f3f22114433ce4b9f868de375706dfd92b1d1a4f768c543ae8c23e2897032 datapathConfiguration="&{false false false false false }" interface=lxc41397732f5a4 k8sPodName=openstack/cinder-api-8fd84b5-lqlgk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d94f3f2211 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=240 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-api-8fd84b5-lqlgk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d94f3f2211 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=240 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-api-8fd84b5-lqlgk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d94f3f2211 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=240 identity=44680 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-api-8fd84b5-lqlgk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d94f3f2211 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=240 identity=44680 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-api-8fd84b5-lqlgk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d94f3f2211 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=240 identity=44680 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-api-8fd84b5-lqlgk subsys=endpoint level=info msg="Successful endpoint creation" containerID=d94f3f2211 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=240 identity=44680 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-api-8fd84b5-lqlgk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c4f78afc53 endpointID=2798 k8sNamespace=openstack k8sPodName=cinder-db-init-wtv45 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=94a1026d-5b7d-459a-a5eb-8763ebf9af60 k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=94a1026d-5b7d-459a-a5eb-8763ebf9af60 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=c4f78afc53 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2798 identity=30684 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/cinder-db-init-wtv45 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 909f97b4-fa27-44df-af5a-22d62878fedd default }" containerID=bfcbbb53a61f64b7dbc4a3bfe3298c445d66dc3e3b27925d7996d1db63f6d88b datapathConfiguration="&{false false false false false }" interface=lxc5868692a6bd3 k8sPodName=openstack/cinder-db-sync-ktgxh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bfcbbb53a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=253 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/cinder-db-sync-ktgxh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bfcbbb53a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=253 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c64bff28-082e-44ec-a5a7-3e9a122b37ab,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=c64bff28-082e-44ec-a5a7-3e9a122b37ab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/cinder-db-sync-ktgxh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=c64bff28-082e-44ec-a5a7-3e9a122b37ab;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=c64bff28-082e-44ec-a5a7-3e9a122b37ab;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bfcbbb53a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=253 identity=15635 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c64bff28-082e-44ec-a5a7-3e9a122b37ab,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=c64bff28-082e-44ec-a5a7-3e9a122b37ab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/cinder-db-sync-ktgxh oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=bfcbbb53a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=253 identity=15635 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/cinder-db-sync-ktgxh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bfcbbb53a6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=253 identity=15635 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/cinder-db-sync-ktgxh subsys=endpoint level=info msg="Successful endpoint creation" containerID=bfcbbb53a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=253 identity=15635 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/cinder-db-sync-ktgxh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bfcbbb53a6 endpointID=253 k8sNamespace=openstack k8sPodName=cinder-db-sync-ktgxh subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=c64bff28-082e-44ec-a5a7-3e9a122b37ab k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=c64bff28-082e-44ec-a5a7-3e9a122b37ab k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=bfcbbb53a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=253 identity=15635 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/cinder-db-sync-ktgxh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.88 3b171323-64a3-4140-85e8-d64ffa0da6f9 default }" containerID=cc55c06be3c4c667c087911ec078a74f5d12a94893c1c3f6a4eccb108573ac3f datapathConfiguration="&{false false false false false }" interface=lxc60c927925590 k8sPodName=openstack/cinder-rabbit-init-n8zc5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc55c06be3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/cinder-rabbit-init-n8zc5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc55c06be3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=80fffb3a-d900-48c9-8a92-6308357bc0ce,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=80fffb3a-d900-48c9-8a92-6308357bc0ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/cinder-rabbit-init-n8zc5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=80fffb3a-d900-48c9-8a92-6308357bc0ce;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=80fffb3a-d900-48c9-8a92-6308357bc0ce;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc55c06be3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identity=16621 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=80fffb3a-d900-48c9-8a92-6308357bc0ce,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=80fffb3a-d900-48c9-8a92-6308357bc0ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/cinder-rabbit-init-n8zc5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc55c06be3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identity=16621 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/cinder-rabbit-init-n8zc5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cc55c06be3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=191 identity=16621 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/cinder-rabbit-init-n8zc5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc55c06be3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=191 identity=16621 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/cinder-rabbit-init-n8zc5 subsys=daemon level=info msg="Delete endpoint request" containerID=cc55c06be3 endpointID=191 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-n8zc5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=80fffb3a-d900-48c9-8a92-6308357bc0ce k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=80fffb3a-d900-48c9-8a92-6308357bc0ce k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=cc55c06be3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=191 identity=16621 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/cinder-rabbit-init-n8zc5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.30 4c3bf5ac-77fe-4fb3-9e42-728a39248cac default }" containerID=8f65080d39a6172cc35f31ed9d36f790b5e83341358a642e7236151d4d97f597 datapathConfiguration="&{false false false false false }" interface=lxca38ad05b66e0 k8sPodName=openstack/cinder-ks-service-qh862 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f65080d39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/cinder-ks-service-qh862 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f65080d39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=859c590e-6932-4144-ad88-72c7e50e06ba,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=859c590e-6932-4144-ad88-72c7e50e06ba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/cinder-ks-service-qh862 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8f65080d39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.30 ipv6= k8sPodName=openstack/cinder-ks-service-qh862 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=859c590e-6932-4144-ad88-72c7e50e06ba;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=859c590e-6932-4144-ad88-72c7e50e06ba;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8f65080d39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 identity=43030 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=859c590e-6932-4144-ad88-72c7e50e06ba,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=859c590e-6932-4144-ad88-72c7e50e06ba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/cinder-ks-service-qh862 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f65080d39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 identity=43030 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/cinder-ks-service-qh862 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8f65080d39 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1080 identity=43030 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/cinder-ks-service-qh862 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f65080d39 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1080 identity=43030 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/cinder-ks-service-qh862 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8f65080d39 endpointID=1080 k8sNamespace=openstack k8sPodName=cinder-ks-service-qh862 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=859c590e-6932-4144-ad88-72c7e50e06ba k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=859c590e-6932-4144-ad88-72c7e50e06ba k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=8f65080d39 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1080 identity=43030 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/cinder-ks-service-qh862 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 9af5f9c6-b0b0-469e-a8e7-5662f56aee50 default }" containerID=280c7dd142a4cc952d67e02db48a42693c5af17ca8b4c707a676c7d3c88d22e6 datapathConfiguration="&{false false false false false }" interface=lxc5fa6d068ee6c k8sPodName=openstack/cinder-ks-endpoints-g5pwn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=280c7dd142 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=682 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/cinder-ks-endpoints-g5pwn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=280c7dd142 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=682 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=843c99a2-214f-496b-bfe5-15f673c0bbb6,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=843c99a2-214f-496b-bfe5-15f673c0bbb6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/cinder-ks-endpoints-g5pwn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=843c99a2-214f-496b-bfe5-15f673c0bbb6;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=843c99a2-214f-496b-bfe5-15f673c0bbb6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=280c7dd142 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=682 identity=984 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=843c99a2-214f-496b-bfe5-15f673c0bbb6,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=843c99a2-214f-496b-bfe5-15f673c0bbb6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/cinder-ks-endpoints-g5pwn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=280c7dd142 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=682 identity=984 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/cinder-ks-endpoints-g5pwn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=280c7dd142 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=682 identity=984 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/cinder-ks-endpoints-g5pwn subsys=endpoint level=info msg="Successful endpoint creation" containerID=280c7dd142 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=682 identity=984 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/cinder-ks-endpoints-g5pwn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=280c7dd142 endpointID=682 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-g5pwn subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=843c99a2-214f-496b-bfe5-15f673c0bbb6 k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=843c99a2-214f-496b-bfe5-15f673c0bbb6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=280c7dd142 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=682 identity=984 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/cinder-ks-endpoints-g5pwn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 6a4dba6b-1d67-4e08-9801-5159d7380045 default }" containerID=aa3b2117a0eff448927db36c813ef257b10ff6166d3e28cd17359f4d4cc30ca2 datapathConfiguration="&{false false false false false }" interface=lxcae5c5ed9d786 k8sPodName=openstack/cinder-ks-user-9mwnk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa3b2117a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=435 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/cinder-ks-user-9mwnk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa3b2117a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=435 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1f13b113-65a0-4e68-a35c-2b59a225ce50,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=1f13b113-65a0-4e68-a35c-2b59a225ce50,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/cinder-ks-user-9mwnk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=1f13b113-65a0-4e68-a35c-2b59a225ce50;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=1f13b113-65a0-4e68-a35c-2b59a225ce50;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa3b2117a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=435 identity=2819 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1f13b113-65a0-4e68-a35c-2b59a225ce50,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=1f13b113-65a0-4e68-a35c-2b59a225ce50,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/cinder-ks-user-9mwnk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa3b2117a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=435 identity=2819 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/cinder-ks-user-9mwnk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=aa3b2117a0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=435 identity=2819 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/cinder-ks-user-9mwnk subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa3b2117a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=435 identity=2819 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/cinder-ks-user-9mwnk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aa3b2117a0 endpointID=435 k8sNamespace=openstack k8sPodName=cinder-ks-user-9mwnk subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=1f13b113-65a0-4e68-a35c-2b59a225ce50 k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=1f13b113-65a0-4e68-a35c-2b59a225ce50 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=aa3b2117a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=435 identity=2819 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/cinder-ks-user-9mwnk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 0469080c-7241-4031-ae81-1d852c9e8ea9 default }" containerID=acdde88b4118ac2ee6b7d26104eb2e484022037a030d725d0a8d492fe6b09c55 datapathConfiguration="&{false false false false false }" interface=lxc7f029eeef3a6 k8sPodName=openstack/cinder-backup-storage-init-9ztfj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=acdde88b41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1474 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/cinder-backup-storage-init-9ztfj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=acdde88b41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1474 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=20f9ac3f-bb86-4c73-8d13-f97e1c806b21,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=20f9ac3f-bb86-4c73-8d13-f97e1c806b21,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/cinder-backup-storage-init-9ztfj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=20f9ac3f-bb86-4c73-8d13-f97e1c806b21;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=20f9ac3f-bb86-4c73-8d13-f97e1c806b21;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=acdde88b41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1474 identity=24648 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=20f9ac3f-bb86-4c73-8d13-f97e1c806b21,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=20f9ac3f-bb86-4c73-8d13-f97e1c806b21,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/cinder-backup-storage-init-9ztfj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=acdde88b41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1474 identity=24648 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/cinder-backup-storage-init-9ztfj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=acdde88b41 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1474 identity=24648 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/cinder-backup-storage-init-9ztfj subsys=endpoint level=info msg="Successful endpoint creation" containerID=acdde88b41 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1474 identity=24648 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/cinder-backup-storage-init-9ztfj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=acdde88b41 endpointID=1474 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-9ztfj subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=20f9ac3f-bb86-4c73-8d13-f97e1c806b21 k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=20f9ac3f-bb86-4c73-8d13-f97e1c806b21 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=acdde88b41 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1474 identity=24648 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/cinder-backup-storage-init-9ztfj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 8a0dcfd7-3efb-40b4-8c02-b4fc1a3b01ac default }" containerID=9bdefd82f0ce3c16505986d4d3b3b193a8595928a08a80b8aafbb461c201c52b datapathConfiguration="&{false false false false false }" interface=lxcfa2d6722631d k8sPodName=openstack/cinder-create-internal-tenant-6w8xq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9bdefd82f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3349 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-6w8xq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9bdefd82f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3349 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e09ad54d-a372-4a9b-818b-368dab20a4a2,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=e09ad54d-a372-4a9b-818b-368dab20a4a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-6w8xq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=e09ad54d-a372-4a9b-818b-368dab20a4a2;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=e09ad54d-a372-4a9b-818b-368dab20a4a2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9bdefd82f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3349 identity=50870 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e09ad54d-a372-4a9b-818b-368dab20a4a2,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=e09ad54d-a372-4a9b-818b-368dab20a4a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-6w8xq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9bdefd82f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3349 identity=50870 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-6w8xq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9bdefd82f0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3349 identity=50870 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-6w8xq subsys=endpoint level=info msg="Successful endpoint creation" containerID=9bdefd82f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3349 identity=50870 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-6w8xq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9bdefd82f0 endpointID=3349 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-6w8xq subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=e09ad54d-a372-4a9b-818b-368dab20a4a2 k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=e09ad54d-a372-4a9b-818b-368dab20a4a2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=9bdefd82f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3349 identity=50870 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-6w8xq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 6315e736-ef56-4cfb-bafc-314a35d41a68 default }" containerID=475c239a0d5ebf09a922ab1235c558348e31b4a73c9a68c6e6735880cc0f8cfe datapathConfiguration="&{false false false false false }" interface=lxc8c458922ce57 k8sPodName=openstack/cinder-storage-init-jnnxx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=475c239a0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2793 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/cinder-storage-init-jnnxx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=475c239a0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2793 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=368d53df-59e5-43a8-8b65-d8134324c26b,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=368d53df-59e5-43a8-8b65-d8134324c26b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/cinder-storage-init-jnnxx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=368d53df-59e5-43a8-8b65-d8134324c26b;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=368d53df-59e5-43a8-8b65-d8134324c26b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=475c239a0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2793 identity=11778 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=368d53df-59e5-43a8-8b65-d8134324c26b,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=368d53df-59e5-43a8-8b65-d8134324c26b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/cinder-storage-init-jnnxx oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=475c239a0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2793 identity=11778 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/cinder-storage-init-jnnxx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=475c239a0d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2793 identity=11778 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/cinder-storage-init-jnnxx subsys=endpoint level=info msg="Successful endpoint creation" containerID=475c239a0d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2793 identity=11778 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/cinder-storage-init-jnnxx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=475c239a0d endpointID=2793 k8sNamespace=openstack k8sPodName=cinder-storage-init-jnnxx subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=368d53df-59e5-43a8-8b65-d8134324c26b k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=368d53df-59e5-43a8-8b65-d8134324c26b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=475c239a0d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2793 identity=11778 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/cinder-storage-init-jnnxx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 16708a8f-0efd-4dc3-a432-88ee20ccc90f default }" containerID=3599dd1b8a5bb943974450baaefce328c27a507940a69e76994b6b641f24ea14 datapathConfiguration="&{false false false false false }" interface=lxcc56077fc3d97 k8sPodName=openstack/cinder-bootstrap-xs7mv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3599dd1b8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1770 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/cinder-bootstrap-xs7mv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3599dd1b8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1770 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=22f3307a-daf6-4c4c-9adb-7f4a90656ecf,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=22f3307a-daf6-4c4c-9adb-7f4a90656ecf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/cinder-bootstrap-xs7mv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=22f3307a-daf6-4c4c-9adb-7f4a90656ecf;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=22f3307a-daf6-4c4c-9adb-7f4a90656ecf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3599dd1b8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1770 identity=21715 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=22f3307a-daf6-4c4c-9adb-7f4a90656ecf,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=22f3307a-daf6-4c4c-9adb-7f4a90656ecf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/cinder-bootstrap-xs7mv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3599dd1b8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1770 identity=21715 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/cinder-bootstrap-xs7mv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3599dd1b8a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1770 identity=21715 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/cinder-bootstrap-xs7mv subsys=endpoint level=info msg="Successful endpoint creation" containerID=3599dd1b8a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1770 identity=21715 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/cinder-bootstrap-xs7mv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.223 a13ad054-6647-4674-9192-8586a439325e default }" containerID=cf0bb5fd61708ae82a68ddb2c36a1ee8445675c0867d9bed21f946448dd87c26 datapathConfiguration="&{false false false false false }" interface=lxcb18c653e4ffa k8sPodName=openstack/cinder-backup-57844b88cc-7v7zx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf0bb5fd61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/cinder-backup-57844b88cc-7v7zx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf0bb5fd61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/cinder-backup-57844b88cc-7v7zx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cf0bb5fd61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.223 ipv6= k8sPodName=openstack/cinder-backup-57844b88cc-7v7zx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cf0bb5fd61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 identity=28405 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/cinder-backup-57844b88cc-7v7zx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cf0bb5fd61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 identity=28405 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/cinder-backup-57844b88cc-7v7zx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 7b27b43f-e3df-40d0-8594-8e6d0544a508 default }" containerID=47faa492a8432aed8186c68a991947e97855438e04ae572d261745b6850ab312 datapathConfiguration="&{false false false false false }" interface=lxcf191711ab01c k8sPodName=openstack/cinder-volume-85c58f5bc5-hzxsz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=47faa492a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=890 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/cinder-volume-85c58f5bc5-hzxsz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=47faa492a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=890 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/cinder-volume-85c58f5bc5-hzxsz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=47faa492a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=890 identity=56750 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/cinder-volume-85c58f5bc5-hzxsz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=47faa492a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=890 identity=56750 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/cinder-volume-85c58f5bc5-hzxsz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cf0bb5fd61 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=972 identity=28405 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/cinder-backup-57844b88cc-7v7zx subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf0bb5fd61 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=972 identity=28405 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/cinder-backup-57844b88cc-7v7zx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=47faa492a8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=890 identity=56750 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/cinder-volume-85c58f5bc5-hzxsz subsys=endpoint level=info msg="Successful endpoint creation" containerID=47faa492a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=890 identity=56750 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/cinder-volume-85c58f5bc5-hzxsz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3599dd1b8a endpointID=1770 k8sNamespace=openstack k8sPodName=cinder-bootstrap-xs7mv subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=22f3307a-daf6-4c4c-9adb-7f4a90656ecf k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=22f3307a-daf6-4c4c-9adb-7f4a90656ecf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=3599dd1b8a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1770 identity=21715 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/cinder-bootstrap-xs7mv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 93f298c8-82f0-43d3-87a3-d4120f29a7c9 default }" containerID=45d4b07ba1689266a36063754a7941bb31b8bf98da21e594612b935583a298e5 datapathConfiguration="&{false false false false false }" interface=lxcba0091ff0729 k8sPodName=openstack/placement-api-6755858d-vlvb2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45d4b07ba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3461 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/placement-api-6755858d-vlvb2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45d4b07ba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3461 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/placement-api-6755858d-vlvb2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=45d4b07ba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3461 identity=24464 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/placement-api-6755858d-vlvb2 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=45d4b07ba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3461 identity=24464 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/placement-api-6755858d-vlvb2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 55a79194-acf7-42ab-a9b0-83fbf4f1d293 default }" containerID=65025fbcd05c2d3a1270f5f698b8b78146b281f7e9bdb8051e613a4170024602 datapathConfiguration="&{false false false false false }" interface=lxca235dc5914a0 k8sPodName=openstack/placement-db-init-flx2f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65025fbcd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=592 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/placement-db-init-flx2f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65025fbcd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=592 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=ef77431c-f368-43bd-8594-305beb5803aa,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=ef77431c-f368-43bd-8594-305beb5803aa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/placement-db-init-flx2f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=ef77431c-f368-43bd-8594-305beb5803aa;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=ef77431c-f368-43bd-8594-305beb5803aa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=65025fbcd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=592 identity=46992 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=ef77431c-f368-43bd-8594-305beb5803aa,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=ef77431c-f368-43bd-8594-305beb5803aa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/placement-db-init-flx2f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=65025fbcd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=592 identity=46992 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/placement-db-init-flx2f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=45d4b07ba1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3461 identity=24464 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/placement-api-6755858d-vlvb2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=45d4b07ba1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3461 identity=24464 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/placement-api-6755858d-vlvb2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=65025fbcd0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=592 identity=46992 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/placement-db-init-flx2f subsys=endpoint level=info msg="Successful endpoint creation" containerID=65025fbcd0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=592 identity=46992 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/placement-db-init-flx2f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=65025fbcd0 endpointID=592 k8sNamespace=openstack k8sPodName=placement-db-init-flx2f subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=ef77431c-f368-43bd-8594-305beb5803aa k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=ef77431c-f368-43bd-8594-305beb5803aa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=65025fbcd0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=592 identity=46992 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/placement-db-init-flx2f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 087a1bf0-e708-4634-8162-fa7bb671a6ce default }" containerID=34e151af4227581a33462b07a3145913afafe31251ca92bb6760d80f8ed5021e datapathConfiguration="&{false false false false false }" interface=lxc90a39219fbbc k8sPodName=openstack/placement-db-sync-x7sq2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34e151af42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2104 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/placement-db-sync-x7sq2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34e151af42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2104 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=b6627c96-ccb6-4619-808e-02192a2201e1,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=b6627c96-ccb6-4619-808e-02192a2201e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/placement-db-sync-x7sq2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=b6627c96-ccb6-4619-808e-02192a2201e1;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=b6627c96-ccb6-4619-808e-02192a2201e1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34e151af42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2104 identity=52604 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=b6627c96-ccb6-4619-808e-02192a2201e1,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=b6627c96-ccb6-4619-808e-02192a2201e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/placement-db-sync-x7sq2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34e151af42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2104 identity=52604 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/placement-db-sync-x7sq2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=34e151af42 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2104 identity=52604 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/placement-db-sync-x7sq2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=34e151af42 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2104 identity=52604 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/placement-db-sync-x7sq2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=34e151af42 endpointID=2104 k8sNamespace=openstack k8sPodName=placement-db-sync-x7sq2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=b6627c96-ccb6-4619-808e-02192a2201e1 k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=b6627c96-ccb6-4619-808e-02192a2201e1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=34e151af42 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2104 identity=52604 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/placement-db-sync-x7sq2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 1989fcd5-1a1a-4588-9b18-282e8fc7461b default }" containerID=ba7a174c1f8191b7a02779f15a02c5338d5e638f6a240472831082903dab244b datapathConfiguration="&{false false false false false }" interface=lxc51085854f461 k8sPodName=openstack/placement-ks-service-qllng labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba7a174c1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2883 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/placement-ks-service-qllng subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba7a174c1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2883 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=a23bc0dc-3343-4ca1-88a7-9ce40a80f230,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=a23bc0dc-3343-4ca1-88a7-9ce40a80f230,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/placement-ks-service-qllng subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=a23bc0dc-3343-4ca1-88a7-9ce40a80f230;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=a23bc0dc-3343-4ca1-88a7-9ce40a80f230;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba7a174c1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2883 identity=13104 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=a23bc0dc-3343-4ca1-88a7-9ce40a80f230,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=a23bc0dc-3343-4ca1-88a7-9ce40a80f230,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/placement-ks-service-qllng oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba7a174c1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2883 identity=13104 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/placement-ks-service-qllng subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ba7a174c1f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2883 identity=13104 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/placement-ks-service-qllng subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba7a174c1f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2883 identity=13104 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/placement-ks-service-qllng subsys=daemon level=info msg="Delete endpoint request" containerID=ba7a174c1f endpointID=2883 k8sNamespace=openstack k8sPodName=placement-ks-service-qllng subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=a23bc0dc-3343-4ca1-88a7-9ce40a80f230 k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=a23bc0dc-3343-4ca1-88a7-9ce40a80f230 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=ba7a174c1f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2883 identity=13104 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/placement-ks-service-qllng subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 8c90c437-d29e-4e31-8b12-ce60e2f987fc default }" containerID=e71ce3062b68c47e016ba5ebe9d552383bb463fe272b9b0aba3f43b714cfdcc2 datapathConfiguration="&{false false false false false }" interface=lxc403f43234aa1 k8sPodName=openstack/placement-ks-user-7mdxc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e71ce3062b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/placement-ks-user-7mdxc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e71ce3062b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=74cb1bd1-2a00-499d-a2de-4b9047c298b6,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=74cb1bd1-2a00-499d-a2de-4b9047c298b6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/placement-ks-user-7mdxc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=74cb1bd1-2a00-499d-a2de-4b9047c298b6;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=74cb1bd1-2a00-499d-a2de-4b9047c298b6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e71ce3062b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identity=39738 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=74cb1bd1-2a00-499d-a2de-4b9047c298b6,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=74cb1bd1-2a00-499d-a2de-4b9047c298b6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/placement-ks-user-7mdxc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e71ce3062b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identity=39738 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/placement-ks-user-7mdxc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e71ce3062b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=560 identity=39738 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/placement-ks-user-7mdxc subsys=endpoint level=info msg="Successful endpoint creation" containerID=e71ce3062b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=560 identity=39738 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/placement-ks-user-7mdxc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e71ce3062b endpointID=560 k8sNamespace=openstack k8sPodName=placement-ks-user-7mdxc subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=74cb1bd1-2a00-499d-a2de-4b9047c298b6 k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=74cb1bd1-2a00-499d-a2de-4b9047c298b6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=e71ce3062b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=560 identity=39738 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/placement-ks-user-7mdxc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 6f90f3c8-8ffc-4ec0-ae33-b56dada80024 default }" containerID=4d550eb42090f69aefda0bd727fd82759dffa2031a4b80990c4b17d186d31172 datapathConfiguration="&{false false false false false }" interface=lxc201117c09763 k8sPodName=openstack/placement-ks-endpoints-8swst labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d550eb420 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=704 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/placement-ks-endpoints-8swst subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d550eb420 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=704 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=647bb20b-288f-48dc-8810-3f681d7eb848,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=647bb20b-288f-48dc-8810-3f681d7eb848,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/placement-ks-endpoints-8swst subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=647bb20b-288f-48dc-8810-3f681d7eb848;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=647bb20b-288f-48dc-8810-3f681d7eb848;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d550eb420 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=704 identity=34321 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=647bb20b-288f-48dc-8810-3f681d7eb848,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=647bb20b-288f-48dc-8810-3f681d7eb848,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/placement-ks-endpoints-8swst oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d550eb420 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=704 identity=34321 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/placement-ks-endpoints-8swst subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4d550eb420 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=704 identity=34321 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/placement-ks-endpoints-8swst subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d550eb420 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=704 identity=34321 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/placement-ks-endpoints-8swst subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4d550eb420 endpointID=704 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-8swst subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=647bb20b-288f-48dc-8810-3f681d7eb848 k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=647bb20b-288f-48dc-8810-3f681d7eb848 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=4d550eb420 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=704 identity=34321 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/placement-ks-endpoints-8swst subsys=endpoint