level=info msg="Memory available for map entries (0.003% of 67421630464B): 168554076B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.373567ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="58.011µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.786758ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="10.771µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=102.226726ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="13.35µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="17.161µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="92.873µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="68.102µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="77.202µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="396.21µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="3.05µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.034004ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.432013ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="31.42µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="37.701µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="215.915µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="87.013µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="66.592µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=57.196596ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="83.822µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="12.3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="1.51µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.223.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.706526ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="3.77µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.955873ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="20.241µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=101.003294ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="20.151µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="3.58µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="3.1µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="13.971µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="33.491µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="39.681µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="24.251µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="38.241µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="370.57µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.93µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="11.73µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="337.959µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="900.174µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.250184ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.96µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="25.49µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.223 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.223 ipAddr.ipv6="" k8sNodeIP=199.204.45.223 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.223" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.147" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.223" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.223} {CiliumInternalIP 10.0.0.147}] 10.0.0.0/24 [] [] 10.0.0.67 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:35755" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.649432774s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="17.27µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="8.891µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="42.271µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="68.262µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2768 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2768 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2768 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.646276847s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=299.039595ms file-path=/var/run/cilium/state/templates/767d9675e6516fcd860fc4b9369fa081a3faadf47d5b90b671bc5c6d1cde4bdb/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2768 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 21fdc0bd-24b2-4e43-89d4-5375dcd2fc83 default }" containerID=0294a7a068f54d52917906a581a78b5894f80113be1efb7574339fb03af5e52b datapathConfiguration="&{false false false false false }" interface=lxc8a0bad89805d k8sPodName=kube-system/coredns-7c96b6546b-qsg7f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0294a7a068 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 ipv4=10.0.0.154 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qsg7f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 febf7f59-b517-492a-8f74-40698d3d9fe5 default }" containerID=f8dfa1c091d54954bd757553a1b1ea6a2adfc888358c431e9e2aaf3b7d95740a datapathConfiguration="&{false false false false false }" interface=lxc741e64331a85 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rc67v labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=0294a7a068 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.154 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qsg7f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="New endpoint" containerID=f8dfa1c091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=400 ipv4=10.0.0.69 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rc67v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f8dfa1c091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=400 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=cd39e1c9-b676-433d-aaac-b98e618e931e,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=cd39e1c9-b676-433d-aaac-b98e618e931e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.69 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rc67v subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f8dfa1c091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=400 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.69 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rc67v line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0294a7a068 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 identity=2548 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.154 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qsg7f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0294a7a068 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 identity=2548 ipv4=10.0.0.154 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qsg7f subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=cd39e1c9-b676-433d-aaac-b98e618e931e;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=cd39e1c9-b676-433d-aaac-b98e618e931e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f8dfa1c091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=400 identity=1117 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=cd39e1c9-b676-433d-aaac-b98e618e931e,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=cd39e1c9-b676-433d-aaac-b98e618e931e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.69 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rc67v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f8dfa1c091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=400 identity=1117 ipv4=10.0.0.69 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rc67v subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3727 ipv4=10.0.0.67 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3727 identityLabels="reserved:health" ipv4=10.0.0.67 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3727 identity=4 identityLabels="reserved:health" ipv4=10.0.0.67 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.116602811s file-path=/var/run/cilium/state/templates/7a6655c12d89b174988079bd4e5c26bcdab969bc270c2965b6bf802dfd0e12d1/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3727 identity=4 ipv4=10.0.0.67 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0294a7a068 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=128 identity=2548 ipv4=10.0.0.154 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qsg7f subsys=endpoint level=info msg="Successful endpoint creation" containerID=0294a7a068 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=128 identity=2548 ipv4=10.0.0.154 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qsg7f subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f8dfa1c091 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=400 identity=1117 ipv4=10.0.0.69 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rc67v subsys=endpoint level=info msg="Successful endpoint creation" containerID=f8dfa1c091 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=400 identity=1117 ipv4=10.0.0.69 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rc67v subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f8dfa1c091 endpointID=400 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-rc67v subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=cd39e1c9-b676-433d-aaac-b98e618e931e k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=cd39e1c9-b676-433d-aaac-b98e618e931e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=f8dfa1c091 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=400 identity=1117 ipv4=10.0.0.69 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rc67v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 cb4fdf75-e893-4fed-b73f-6d1ada18d5e1 default }" containerID=d4b29b0c4f7ff2de40a3891bba99dd1ed2c93f07d25a0d7499b2583e50ff8bd5 datapathConfiguration="&{false false false false false }" interface=lxceb8d86c8e4b2 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-v7v5z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d4b29b0c4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=731 ipv4=10.0.0.246 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-v7v5z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d4b29b0c4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=731 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.246 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-v7v5z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d4b29b0c4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=731 identity=45727 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.246 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-v7v5z oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d4b29b0c4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=731 identity=45727 ipv4=10.0.0.246 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-v7v5z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d4b29b0c4f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=731 identity=45727 ipv4=10.0.0.246 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-v7v5z subsys=endpoint level=info msg="Successful endpoint creation" containerID=d4b29b0c4f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=731 identity=45727 ipv4=10.0.0.246 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-v7v5z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2768 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02768 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02768 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02768 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02768:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2768 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 5c051c29-0314-4095-b73c-545bb53c5c8e default }" containerID=5800ba000f3f229c784578513c9260082b217abca152ec61e7b1008249db1e07 datapathConfiguration="&{false false false false false }" interface=lxc576dedab69d4 k8sPodName=kube-system/coredns-67659f764b-d2dtz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5800ba000f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1766 ipv4=10.0.0.61 ipv6= k8sPodName=kube-system/coredns-67659f764b-d2dtz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5800ba000f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1766 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.61 ipv6= k8sPodName=kube-system/coredns-67659f764b-d2dtz subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5800ba000f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1766 identity=2548 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.61 ipv6= k8sPodName=kube-system/coredns-67659f764b-d2dtz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5800ba000f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1766 identity=2548 ipv4=10.0.0.61 ipv6= k8sPodName=kube-system/coredns-67659f764b-d2dtz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 74c18aa7-9765-48e3-aaaa-c8066881c17a default }" containerID=08940b6939127de9cfe9bbb7ebab26bac317adf1f131ecabe4e50900345c3631 datapathConfiguration="&{false false false false false }" interface=lxcebbb89fca755 k8sPodName=kube-system/coredns-67659f764b-6c9lc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=08940b6939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4036 ipv4=10.0.0.209 ipv6= k8sPodName=kube-system/coredns-67659f764b-6c9lc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=08940b6939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4036 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.209 ipv6= k8sPodName=kube-system/coredns-67659f764b-6c9lc subsys=endpoint level=info msg="Identity of endpoint changed" containerID=08940b6939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4036 identity=2548 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.209 ipv6= k8sPodName=kube-system/coredns-67659f764b-6c9lc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=08940b6939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4036 identity=2548 ipv4=10.0.0.209 ipv6= k8sPodName=kube-system/coredns-67659f764b-6c9lc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=08940b6939 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4036 identity=2548 ipv4=10.0.0.209 ipv6= k8sPodName=kube-system/coredns-67659f764b-6c9lc subsys=endpoint level=info msg="Successful endpoint creation" containerID=08940b6939 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4036 identity=2548 ipv4=10.0.0.209 ipv6= k8sPodName=kube-system/coredns-67659f764b-6c9lc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5800ba000f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1766 identity=2548 ipv4=10.0.0.61 ipv6= k8sPodName=kube-system/coredns-67659f764b-d2dtz subsys=endpoint level=info msg="Successful endpoint creation" containerID=5800ba000f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1766 identity=2548 ipv4=10.0.0.61 ipv6= k8sPodName=kube-system/coredns-67659f764b-d2dtz subsys=daemon level=info msg="Delete endpoint request" containerID=0294a7a068 endpointID=128 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-qsg7f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=0294a7a068 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=128 identity=2548 ipv4=10.0.0.154 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qsg7f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 779050c8-182b-413f-b532-5a99a0438671 default }" containerID=de8a7fe1995000e7630eb31f2ed71f2aab5ce781b03c65be0722b63cbb62f66f datapathConfiguration="&{false false false false false }" interface=lxcec0cfc8237f3 k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-rjm6s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de8a7fe199 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=162 ipv4=10.0.0.197 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-rjm6s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de8a7fe199 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=162 identityLabels="k8s:app=ceph-csi-rbd,k8s:chart=ceph-csi-rbd-3.11.0,k8s:component=provisioner,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ceph-csi-rbd-provisioner,k8s:io.kubernetes.pod.namespace=kube-system,k8s:release=ceph-csi-rbd" ipv4=10.0.0.197 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-rjm6s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-csi-rbd;k8s:chart=ceph-csi-rbd-3.11.0;k8s:component=provisioner;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ceph-csi-rbd-provisioner;k8s:io.kubernetes.pod.namespace=kube-system;k8s:release=ceph-csi-rbd;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de8a7fe199 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=162 identity=11117 identityLabels="k8s:app=ceph-csi-rbd,k8s:chart=ceph-csi-rbd-3.11.0,k8s:component=provisioner,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ceph-csi-rbd-provisioner,k8s:io.kubernetes.pod.namespace=kube-system,k8s:release=ceph-csi-rbd" ipv4=10.0.0.197 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-rjm6s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de8a7fe199 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=162 identity=11117 ipv4=10.0.0.197 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-rjm6s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=de8a7fe199 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=162 identity=11117 ipv4=10.0.0.197 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-rjm6s subsys=endpoint level=info msg="Successful endpoint creation" containerID=de8a7fe199 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=162 identity=11117 ipv4=10.0.0.197 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-rjm6s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.131 32a78ae7-4e88-4770-b445-2dd3caa5ce61 default }" containerID=535da920d96c8bbc685e15e5b69d9274903e965d8443db0b376ac1d3e8ecda3a datapathConfiguration="&{false false false false false }" interface=lxc4b6acee22ae5 k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-jsmtf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=535da920d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=135 ipv4=10.0.0.131 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-jsmtf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=535da920d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=135 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.131 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-jsmtf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=535da920d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=135 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.131 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-jsmtf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=535da920d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=135 identity=8697 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.131 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-jsmtf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=535da920d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=135 identity=8697 ipv4=10.0.0.131 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-jsmtf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=535da920d9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=135 identity=8697 ipv4=10.0.0.131 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-jsmtf subsys=endpoint level=info msg="Successful endpoint creation" containerID=535da920d9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=135 identity=8697 ipv4=10.0.0.131 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-jsmtf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.20 1cb4f790-d415-4bcf-92d0-b5f3a400bf0f default }" containerID=c6f49e18d5a76b24c20b5a224ce2e58200fe084b4c580a84a95d0ee1fcdde1df datapathConfiguration="&{false false false false false }" interface=lxc8436f548f8bf k8sPodName=cert-manager/cert-manager-79c48d47db-xmrsd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c6f49e18d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3590 ipv4=10.0.0.20 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-xmrsd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.239 219e6020-c953-4c54-a169-03c648fdd5ba default }" containerID=e796c3df04969ae3aa6708bf06c861bb386de0da1cb6a4630dfa53f2579e9ea1 datapathConfiguration="&{false false false false false }" interface=lxcc5c8244cc571 k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-842l9 labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=c6f49e18d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3590 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.20 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-xmrsd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="New endpoint" containerID=e796c3df04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3881 ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-842l9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e796c3df04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3881 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-842l9 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=c6f49e18d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3590 identity=9531 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.20 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-xmrsd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c6f49e18d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3590 identity=9531 ipv4=10.0.0.20 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-xmrsd subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e796c3df04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3881 identity=7924 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-842l9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e796c3df04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3881 identity=7924 ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-842l9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c6f49e18d5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3590 identity=9531 ipv4=10.0.0.20 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-xmrsd subsys=endpoint level=info msg="Successful endpoint creation" containerID=c6f49e18d5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3590 identity=9531 ipv4=10.0.0.20 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-xmrsd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e796c3df04 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3881 identity=7924 ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-842l9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e796c3df04 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3881 identity=7924 ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-842l9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.12 89468431-8ec5-4f26-b1d3-191d448fe9d9 default }" containerID=18fbd2271c2262ebd60392c575d2f3d21700ee682836265dc0c543325440eab2 datapathConfiguration="&{false false false false false }" interface=lxc981871f4079f k8sPodName=cert-manager/cert-manager-startupapicheck-9nqz5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18fbd2271c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4090 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9nqz5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18fbd2271c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4090 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=246d7c19-1a09-4354-bf42-6a09009ff079,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=246d7c19-1a09-4354-bf42-6a09009ff079,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9nqz5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.15.5;k8s:batch.kubernetes.io/controller-uid=246d7c19-1a09-4354-bf42-6a09009ff079;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=246d7c19-1a09-4354-bf42-6a09009ff079;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=18fbd2271c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4090 identity=36668 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=246d7c19-1a09-4354-bf42-6a09009ff079,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=246d7c19-1a09-4354-bf42-6a09009ff079,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9nqz5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=18fbd2271c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4090 identity=36668 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9nqz5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=18fbd2271c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4090 identity=36668 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9nqz5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=18fbd2271c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4090 identity=36668 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9nqz5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=18fbd2271c endpointID=4090 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-9nqz5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.15.5 k8s:batch.kubernetes.io/controller-uid=246d7c19-1a09-4354-bf42-6a09009ff079 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=246d7c19-1a09-4354-bf42-6a09009ff079 k8s:helm.sh/chart=cert-manager-v1.15.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=18fbd2271c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4090 identity=36668 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9nqz5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 9df912b8-93c8-4416-8e8b-d8184baaca67 default }" containerID=a7536afcf25784be10d35c4b075194cff52135a7a146cdfaa3c46525c998ea0f datapathConfiguration="&{false false false false false }" interface=lxc47e7a1469863 k8sPodName=ingress-nginx/ingress-nginx-admission-create-v466z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a7536afcf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3575 ipv4=10.0.0.7 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-v466z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a7536afcf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3575 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=adea7ff5-17fb-44e2-8161-dafd5d753528,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=adea7ff5-17fb-44e2-8161-dafd5d753528,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.7 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-v466z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=adea7ff5-17fb-44e2-8161-dafd5d753528;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=adea7ff5-17fb-44e2-8161-dafd5d753528;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a7536afcf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3575 identity=18122 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=adea7ff5-17fb-44e2-8161-dafd5d753528,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=adea7ff5-17fb-44e2-8161-dafd5d753528,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.7 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-v466z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a7536afcf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3575 identity=18122 ipv4=10.0.0.7 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-v466z subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a7536afcf2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3575 identity=18122 ipv4=10.0.0.7 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-v466z subsys=endpoint level=info msg="Successful endpoint creation" containerID=a7536afcf2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3575 identity=18122 ipv4=10.0.0.7 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-v466z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a7536afcf2 endpointID=3575 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-v466z subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=adea7ff5-17fb-44e2-8161-dafd5d753528 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=adea7ff5-17fb-44e2-8161-dafd5d753528 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=a7536afcf2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3575 identity=18122 ipv4=10.0.0.7 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-v466z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.194 411542f2-edd2-4f7c-8972-61821bde8cfd default }" containerID=2b54387a44401a05ff2cad7db3120d7f902a9fbac95c9aa9b970afd6e151b025 datapathConfiguration="&{false false false false false }" interface=lxc619737b12084 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8lrcf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b54387a44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 ipv4=10.0.0.194 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8lrcf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b54387a44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.194 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8lrcf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2b54387a44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.194 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8lrcf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b54387a44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identity=26462 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.194 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8lrcf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b54387a44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identity=26462 ipv4=10.0.0.194 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8lrcf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2b54387a44 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=613 identity=26462 ipv4=10.0.0.194 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8lrcf subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b54387a44 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=613 identity=26462 ipv4=10.0.0.194 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8lrcf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.205 78dbedc8-b568-4f75-9e63-42f339cc4316 default }" containerID=a1273e3adea6ac451168ff5309a4c13396ef12bc574544fc050fee94e17b6d59 datapathConfiguration="&{false false false false false }" interface=lxc79790fd68381 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-klhvk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1273e3ade datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-klhvk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1273e3ade datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=2ecf23f5-d961-4397-8776-ba96f3f3243e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=2ecf23f5-d961-4397-8776-ba96f3f3243e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-klhvk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=2ecf23f5-d961-4397-8776-ba96f3f3243e;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=2ecf23f5-d961-4397-8776-ba96f3f3243e;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1273e3ade datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 identity=5664 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=2ecf23f5-d961-4397-8776-ba96f3f3243e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=2ecf23f5-d961-4397-8776-ba96f3f3243e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-klhvk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1273e3ade datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 identity=5664 ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-klhvk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a1273e3ade datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1584 identity=5664 ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-klhvk subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1273e3ade datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1584 identity=5664 ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-klhvk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a1273e3ade endpointID=1584 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-klhvk subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=2ecf23f5-d961-4397-8776-ba96f3f3243e k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=2ecf23f5-d961-4397-8776-ba96f3f3243e k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=a1273e3ade datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1584 identity=5664 ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-klhvk subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=fb325bc7-7eec-4c3b-ab66-06dd342f0c12] Description:}]" policyAddRequest=64315830-7ee2-4a6e-b68f-6707fba39f1b subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=64315830-7ee2-4a6e-b68f-6707fba39f1b policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=6efc7684-48e0-4f2f-b92f-af1bdd9b2ad2] Description:}]" policyAddRequest=b24cb7be-645b-4190-89f9-0327f0f5bf26 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=b24cb7be-645b-4190-89f9-0327f0f5bf26 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.39 dbf5afd6-77b4-4004-87d7-a8f08db1096c default }" containerID=49329d4fd4d91c38272f3ba97d17aeb75beb572259fbcd05f045c5fdd8a670da datapathConfiguration="&{false false false false false }" interface=lxcdcdfd1168cff k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-s5xfb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=49329d4fd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-s5xfb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=49329d4fd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-s5xfb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=49329d4fd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-s5xfb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=49329d4fd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 identity=46492 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-s5xfb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=49329d4fd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 identity=46492 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-s5xfb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 74b4be21-0a2b-4e32-a1ea-f19617fcb78c default }" containerID=233dc706eb859eb079601f2083e30801d8f64925ae67fc110741e23a0e13ef81 datapathConfiguration="&{false false false false false }" interface=lxcd35346c12c8e k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-rdlhk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=233dc706eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3615 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-rdlhk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=233dc706eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3615 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-rdlhk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=233dc706eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3615 identity=5487 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-rdlhk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=233dc706eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3615 identity=5487 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-rdlhk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=49329d4fd4 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=6 identity=46492 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-s5xfb subsys=endpoint level=info msg="Successful endpoint creation" containerID=49329d4fd4 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=6 identity=46492 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-s5xfb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=233dc706eb datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3615 identity=5487 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-rdlhk subsys=endpoint level=info msg="Successful endpoint creation" containerID=233dc706eb datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3615 identity=5487 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-rdlhk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.79 42f1b6b5-c5c7-4575-8c32-525953f126ad default }" containerID=30a9c00b7698f478cb82986c5efedfdc8c231581c9a529a3d78d343969dd152c datapathConfiguration="&{false false false false false }" interface=lxcbb2181345ae5 k8sPodName=openstack/pxc-operator-69cb5bbdb9-927wl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=30a9c00b76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-927wl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=30a9c00b76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-927wl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=30a9c00b76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 identity=13575 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-927wl oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=30a9c00b76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 identity=13575 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-927wl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=30a9c00b76 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1915 identity=13575 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-927wl subsys=endpoint level=info msg="Successful endpoint creation" containerID=30a9c00b76 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1915 identity=13575 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-927wl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.111 3d35b747-c8a6-4694-bdd0-f09d44717316 default }" containerID=4ab0bc41fb46fd4375447dd84426b14a5eb36a98b7da87aa979c1c826dccb04f datapathConfiguration="&{false false false false false }" interface=lxc31940e1753f9 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ab0bc41fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1993 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ab0bc41fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1993 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4ab0bc41fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1993 identity=21791 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ab0bc41fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1993 identity=21791 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4ab0bc41fb datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1993 identity=21791 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ab0bc41fb datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1993 identity=21791 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.185 980c8639-b22b-420f-adb8-ee5bda0efb98 default }" containerID=4aa820a4ac0b495811d17bbcb074c68ff249a13de31c239dd29b34bc97aa820c datapathConfiguration="&{false false false false false }" interface=lxc32cb426b669b k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4aa820a4ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=475 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4aa820a4ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=475 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4aa820a4ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=475 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.185 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4aa820a4ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=475 identity=33273 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4aa820a4ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=475 identity=33273 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4aa820a4ac datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=475 identity=33273 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4aa820a4ac datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=475 identity=33273 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=78adabc0-3328-4482-b454-3a4607f5d6e4] Description:}]" policyAddRequest=fba12d0c-8fae-47e1-b602-541c82b9272b subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=fba12d0c-8fae-47e1-b602-541c82b9272b policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.90 44f8d22c-1860-4780-8ff8-e8e57f89df78 default }" containerID=fef189d0ed7eede3a4beedb547e2d06880911f1a7ced2367ebcb2f8ee52a7f48 datapathConfiguration="&{false false false false false }" interface=lxc0f7bc03d123c k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fef189d0ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=452 ipv4=10.0.0.90 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fef189d0ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=452 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.90 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fef189d0ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=452 identity=48332 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.90 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fef189d0ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=452 identity=48332 ipv4=10.0.0.90 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fef189d0ed datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=452 identity=48332 ipv4=10.0.0.90 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fef189d0ed datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=452 identity=48332 ipv4=10.0.0.90 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.005711715611346328 newInterval=7m30s subsys=map-ct level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.031527723294601434 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.65 7101cd45-77bb-443f-9e50-e3d608aeffec default }" containerID=c4ad309ff8365bc4ffc77a1db14f46112d36377f7a4d26a444784039b87b16d1 datapathConfiguration="&{false false false false false }" interface=lxca3cd76b3030a k8sPodName=openstack/memcached-memcached-cf56b6468-jjq5c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c4ad309ff8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2681 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-jjq5c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c4ad309ff8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2681 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-jjq5c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c4ad309ff8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2681 identity=62090 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-jjq5c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c4ad309ff8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2681 identity=62090 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-jjq5c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c4ad309ff8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2681 identity=62090 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-jjq5c subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4ad309ff8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2681 identity=62090 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-jjq5c subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.113 bddf8209-b9f1-4086-b883-0cae11353913 default }" containerID=0e55615781ccda7516c689b167dc8520c6d9829fa66241c7ff4070b1822d4981 datapathConfiguration="&{false false false false false }" interface=lxce317b570ce52 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e55615781 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2683 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e55615781 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2683 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e55615781 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2683 identity=4263 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e55615781 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2683 identity=4263 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0e55615781 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2683 identity=4263 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e55615781 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2683 identity=4263 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.21 98a2d414-7a5e-4b83-a4b5-8d98e44262aa default }" containerID=51023d6049c0bbff0ab583829b56e9225ec056a94f062a4a94472e6b56b94222 datapathConfiguration="&{false false false false false }" interface=lxc9dd429ee899c k8sPodName=openstack/keystone-api-7578db874c-8tc9c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51023d6049 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2017 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-api-7578db874c-8tc9c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51023d6049 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2017 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-api-7578db874c-8tc9c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=51023d6049 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2017 identity=9011 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-api-7578db874c-8tc9c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51023d6049 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2017 identity=9011 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-api-7578db874c-8tc9c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.24 d6a45b54-dd3c-4e0c-8e05-0379d812260e default }" containerID=26ac75bc3114e2be649213448369a45d924cb7fec282179663c6c3181cfb0545 datapathConfiguration="&{false false false false false }" interface=lxc3d7905bab6f3 k8sPodName=openstack/keystone-credential-setup-brdqb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=26ac75bc31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2242 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/keystone-credential-setup-brdqb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=26ac75bc31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2242 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=93c88dcb-b26c-4538-aa79-fed14ddaf49d,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=93c88dcb-b26c-4538-aa79-fed14ddaf49d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/keystone-credential-setup-brdqb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=93c88dcb-b26c-4538-aa79-fed14ddaf49d;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=93c88dcb-b26c-4538-aa79-fed14ddaf49d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=26ac75bc31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2242 identity=25674 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=93c88dcb-b26c-4538-aa79-fed14ddaf49d,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=93c88dcb-b26c-4538-aa79-fed14ddaf49d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/keystone-credential-setup-brdqb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=26ac75bc31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2242 identity=25674 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/keystone-credential-setup-brdqb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=51023d6049 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2017 identity=9011 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-api-7578db874c-8tc9c subsys=endpoint level=info msg="Successful endpoint creation" containerID=51023d6049 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2017 identity=9011 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-api-7578db874c-8tc9c subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=26ac75bc31 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2242 identity=25674 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/keystone-credential-setup-brdqb subsys=endpoint level=info msg="Successful endpoint creation" containerID=26ac75bc31 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2242 identity=25674 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/keystone-credential-setup-brdqb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=26ac75bc31 endpointID=2242 k8sNamespace=openstack k8sPodName=keystone-credential-setup-brdqb subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=93c88dcb-b26c-4538-aa79-fed14ddaf49d k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=93c88dcb-b26c-4538-aa79-fed14ddaf49d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=26ac75bc31 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2242 identity=25674 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/keystone-credential-setup-brdqb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.236 f79a1055-0ee1-4f8e-bdc9-d09309f8fc71 default }" containerID=a6d0a01c07a4437ed230b1f203049235e854d4738076ac3f62692fc128d6a7eb datapathConfiguration="&{false false false false false }" interface=lxc82383d79e01d k8sPodName=openstack/keystone-db-init-x5j78 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6d0a01c07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3659 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/keystone-db-init-x5j78 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6d0a01c07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3659 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=66bf8ed8-4c67-491d-ae42-0c00ed94abcd,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=66bf8ed8-4c67-491d-ae42-0c00ed94abcd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/keystone-db-init-x5j78 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=66bf8ed8-4c67-491d-ae42-0c00ed94abcd;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=66bf8ed8-4c67-491d-ae42-0c00ed94abcd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a6d0a01c07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3659 identity=10628 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=66bf8ed8-4c67-491d-ae42-0c00ed94abcd,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=66bf8ed8-4c67-491d-ae42-0c00ed94abcd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/keystone-db-init-x5j78 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a6d0a01c07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3659 identity=10628 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/keystone-db-init-x5j78 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a6d0a01c07 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3659 identity=10628 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/keystone-db-init-x5j78 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6d0a01c07 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3659 identity=10628 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/keystone-db-init-x5j78 subsys=daemon level=info msg="Delete endpoint request" containerID=a6d0a01c07 endpointID=3659 k8sNamespace=openstack k8sPodName=keystone-db-init-x5j78 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=66bf8ed8-4c67-491d-ae42-0c00ed94abcd k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=66bf8ed8-4c67-491d-ae42-0c00ed94abcd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a6d0a01c07 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3659 identity=10628 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/keystone-db-init-x5j78 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.85 a03cc9e4-97fd-4721-b97e-0ba87856609c default }" containerID=95c8ed91cd22e6f64ca25f30f4b22766764f5a3ab75ec59f6694395170da394e datapathConfiguration="&{false false false false false }" interface=lxc44abf7c89a4f k8sPodName=openstack/keystone-fernet-setup-rbgv9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=95c8ed91cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2925 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/keystone-fernet-setup-rbgv9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=95c8ed91cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2925 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4dfad467-cd70-46b4-87cc-a269db87c7f8,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=4dfad467-cd70-46b4-87cc-a269db87c7f8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/keystone-fernet-setup-rbgv9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4dfad467-cd70-46b4-87cc-a269db87c7f8;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=4dfad467-cd70-46b4-87cc-a269db87c7f8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=95c8ed91cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2925 identity=33304 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4dfad467-cd70-46b4-87cc-a269db87c7f8,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=4dfad467-cd70-46b4-87cc-a269db87c7f8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/keystone-fernet-setup-rbgv9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=95c8ed91cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2925 identity=33304 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/keystone-fernet-setup-rbgv9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=95c8ed91cd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2925 identity=33304 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/keystone-fernet-setup-rbgv9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=95c8ed91cd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2925 identity=33304 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/keystone-fernet-setup-rbgv9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=95c8ed91cd endpointID=2925 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-rbgv9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4dfad467-cd70-46b4-87cc-a269db87c7f8 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=4dfad467-cd70-46b4-87cc-a269db87c7f8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=95c8ed91cd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2925 identity=33304 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/keystone-fernet-setup-rbgv9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 89d67fa2-f6e8-4002-a10c-fec15f2382d0 default }" containerID=43eb5491ed164ffd9c8d97afa4c5f18d49458dd459547e428bc4b30fc4e1f065 datapathConfiguration="&{false false false false false }" interface=lxce04fdf6781bf k8sPodName=openstack/keystone-db-sync-7sf7m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=43eb5491ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=796 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-db-sync-7sf7m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43eb5491ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=796 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=43473feb-18d1-4fda-9f03-b07a6c924d04,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=43473feb-18d1-4fda-9f03-b07a6c924d04,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-db-sync-7sf7m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=43473feb-18d1-4fda-9f03-b07a6c924d04;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=43473feb-18d1-4fda-9f03-b07a6c924d04;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=43eb5491ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=796 identity=35449 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=43473feb-18d1-4fda-9f03-b07a6c924d04,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=43473feb-18d1-4fda-9f03-b07a6c924d04,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-db-sync-7sf7m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=43eb5491ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=796 identity=35449 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-db-sync-7sf7m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=43eb5491ed datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=796 identity=35449 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-db-sync-7sf7m subsys=endpoint level=info msg="Successful endpoint creation" containerID=43eb5491ed datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=796 identity=35449 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-db-sync-7sf7m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=43eb5491ed endpointID=796 k8sNamespace=openstack k8sPodName=keystone-db-sync-7sf7m subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=43473feb-18d1-4fda-9f03-b07a6c924d04 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=43473feb-18d1-4fda-9f03-b07a6c924d04 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=43eb5491ed datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=796 identity=35449 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-db-sync-7sf7m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 a5895a0d-4b07-40b1-b41a-65e3ef001799 default }" containerID=7abf89d5aef40aefda6e7980372e49439ffc6c57a6cda3273bd9e47a121f8ad9 datapathConfiguration="&{false false false false false }" interface=lxc8dd35ebb5997 k8sPodName=openstack/keystone-rabbit-init-9l4bd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7abf89d5ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2937 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-rabbit-init-9l4bd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7abf89d5ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2937 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=473207d4-9d44-4747-86ad-21d8155d7690,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=473207d4-9d44-4747-86ad-21d8155d7690,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-rabbit-init-9l4bd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=473207d4-9d44-4747-86ad-21d8155d7690;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=473207d4-9d44-4747-86ad-21d8155d7690;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7abf89d5ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2937 identity=21909 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=473207d4-9d44-4747-86ad-21d8155d7690,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=473207d4-9d44-4747-86ad-21d8155d7690,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-rabbit-init-9l4bd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7abf89d5ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2937 identity=21909 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-rabbit-init-9l4bd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7abf89d5ae datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2937 identity=21909 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-rabbit-init-9l4bd subsys=endpoint level=info msg="Successful endpoint creation" containerID=7abf89d5ae datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2937 identity=21909 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-rabbit-init-9l4bd subsys=daemon level=info msg="Delete endpoint request" containerID=7abf89d5ae endpointID=2937 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-9l4bd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=473207d4-9d44-4747-86ad-21d8155d7690 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=473207d4-9d44-4747-86ad-21d8155d7690 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=7abf89d5ae datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2937 identity=21909 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-rabbit-init-9l4bd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.135 0bd1752f-8ebd-49eb-8fe1-bfb6e26eaf37 default }" containerID=405188a116a74bac0f9938a5cc3f5395befb0d849d51b4b9c4d8f8b9aeef9402 datapathConfiguration="&{false false false false false }" interface=lxce3aec9b4ee45 k8sPodName=openstack/keystone-domain-manage-4qmrw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=405188a116 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-domain-manage-4qmrw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=405188a116 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3d8db3e6-9a12-4c0b-b8ba-0ae0196f3b62,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=3d8db3e6-9a12-4c0b-b8ba-0ae0196f3b62,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-domain-manage-4qmrw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3d8db3e6-9a12-4c0b-b8ba-0ae0196f3b62;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=3d8db3e6-9a12-4c0b-b8ba-0ae0196f3b62;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=405188a116 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identity=4721 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3d8db3e6-9a12-4c0b-b8ba-0ae0196f3b62,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=3d8db3e6-9a12-4c0b-b8ba-0ae0196f3b62,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-domain-manage-4qmrw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=405188a116 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identity=4721 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-domain-manage-4qmrw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=405188a116 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=50 identity=4721 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-domain-manage-4qmrw subsys=endpoint level=info msg="Successful endpoint creation" containerID=405188a116 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=50 identity=4721 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-domain-manage-4qmrw subsys=daemon level=info msg="Delete endpoint request" containerID=405188a116 endpointID=50 k8sNamespace=openstack k8sPodName=keystone-domain-manage-4qmrw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3d8db3e6-9a12-4c0b-b8ba-0ae0196f3b62 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=3d8db3e6-9a12-4c0b-b8ba-0ae0196f3b62 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=405188a116 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=50 identity=4721 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-domain-manage-4qmrw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 ccff7435-b019-42d0-8ade-5b77cf8e12ad default }" containerID=ccb44283be5be12b1675dd8a8595594169f23d66ac503ca65375e8bb43bf279d datapathConfiguration="&{false false false false false }" interface=lxc5ac766fc2f4e k8sPodName=openstack/keystone-bootstrap-qm4bn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ccb44283be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2152 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-bootstrap-qm4bn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ccb44283be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2152 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=64067559-a192-45e0-b58e-ce556dec28cc,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=64067559-a192-45e0-b58e-ce556dec28cc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-bootstrap-qm4bn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=64067559-a192-45e0-b58e-ce556dec28cc;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=64067559-a192-45e0-b58e-ce556dec28cc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=ccb44283be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2152 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-bootstrap-qm4bn line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ccb44283be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2152 identity=31890 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=64067559-a192-45e0-b58e-ce556dec28cc,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=64067559-a192-45e0-b58e-ce556dec28cc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-bootstrap-qm4bn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ccb44283be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2152 identity=31890 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-bootstrap-qm4bn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ccb44283be datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2152 identity=31890 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-bootstrap-qm4bn subsys=endpoint level=info msg="Successful endpoint creation" containerID=ccb44283be datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2152 identity=31890 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-bootstrap-qm4bn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ccb44283be endpointID=2152 k8sNamespace=openstack k8sPodName=keystone-bootstrap-qm4bn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=64067559-a192-45e0-b58e-ce556dec28cc k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=64067559-a192-45e0-b58e-ce556dec28cc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ccb44283be datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2152 identity=31890 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-bootstrap-qm4bn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 389557c4-edc9-4764-889a-4035b2070a47 default }" containerID=19df574a8e71b9d1120417f3e343ee0029e5cea3792138529a9e0082383cb6c1 datapathConfiguration="&{false false false false false }" interface=lxcf718b0d51ef1 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19df574a8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=40 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19df574a8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=40 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=19df574a8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=40 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.217 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19df574a8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=40 identity=10206 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19df574a8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=40 identity=10206 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=19df574a8e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=40 identity=10206 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=19df574a8e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=40 identity=10206 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.54 a660ecd8-a2d7-405f-9010-4895de2256bc default }" containerID=22b756bec17582ef33cfb3e5c55c3e726f66b8ebad742399a2bdab55118edb7c datapathConfiguration="&{false false false false false }" interface=lxc8e2d5a44165a k8sPodName=openstack/glance-db-init-5crfn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=22b756bec1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4010 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-db-init-5crfn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=22b756bec1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4010 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=067e7d38-2338-4986-b566-1d789a720218,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=067e7d38-2338-4986-b566-1d789a720218,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-db-init-5crfn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=067e7d38-2338-4986-b566-1d789a720218;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=067e7d38-2338-4986-b566-1d789a720218;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=22b756bec1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4010 identity=52603 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=067e7d38-2338-4986-b566-1d789a720218,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=067e7d38-2338-4986-b566-1d789a720218,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-db-init-5crfn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=22b756bec1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4010 identity=52603 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-db-init-5crfn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=22b756bec1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4010 identity=52603 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-db-init-5crfn subsys=endpoint level=info msg="Successful endpoint creation" containerID=22b756bec1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4010 identity=52603 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-db-init-5crfn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=22b756bec1 endpointID=4010 k8sNamespace=openstack k8sPodName=glance-db-init-5crfn subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=067e7d38-2338-4986-b566-1d789a720218 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=067e7d38-2338-4986-b566-1d789a720218 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=22b756bec1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4010 identity=52603 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-db-init-5crfn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 735230c5-a545-40f3-9eab-fe04228d76a0 default }" containerID=536d8679bb9008459dc4bbd404d06e81971d78a207cfcfdcf5a47b933358ad32 datapathConfiguration="&{false false false false false }" interface=lxcb74b7673b7cb k8sPodName=openstack/glance-db-sync-g9kdf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=536d8679bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=664 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-sync-g9kdf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=536d8679bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=664 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=107c89ff-c11f-4756-bcc4-588f50f08332,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=107c89ff-c11f-4756-bcc4-588f50f08332,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-sync-g9kdf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=107c89ff-c11f-4756-bcc4-588f50f08332;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=107c89ff-c11f-4756-bcc4-588f50f08332;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=536d8679bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=664 identity=10261 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=107c89ff-c11f-4756-bcc4-588f50f08332,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=107c89ff-c11f-4756-bcc4-588f50f08332,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-sync-g9kdf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=536d8679bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=664 identity=10261 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-sync-g9kdf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=536d8679bb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=664 identity=10261 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-sync-g9kdf subsys=endpoint level=info msg="Successful endpoint creation" containerID=536d8679bb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=664 identity=10261 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-sync-g9kdf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=536d8679bb endpointID=664 k8sNamespace=openstack k8sPodName=glance-db-sync-g9kdf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=107c89ff-c11f-4756-bcc4-588f50f08332 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=107c89ff-c11f-4756-bcc4-588f50f08332 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=536d8679bb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=664 identity=10261 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-sync-g9kdf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.82 377c12e0-07cc-4b18-a89b-c772175bded9 default }" containerID=03de2e2b533d5a30e4cf7048a802778071cb8fb11635083162248b90299ecdb3 datapathConfiguration="&{false false false false false }" interface=lxc6f651df35067 k8sPodName=openstack/glance-rabbit-init-j94rb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=03de2e2b53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4000 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-rabbit-init-j94rb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=03de2e2b53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4000 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=98d6d3e1-eb0f-4413-a3ec-bdbeda80fe51,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=98d6d3e1-eb0f-4413-a3ec-bdbeda80fe51,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-rabbit-init-j94rb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=98d6d3e1-eb0f-4413-a3ec-bdbeda80fe51;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=98d6d3e1-eb0f-4413-a3ec-bdbeda80fe51;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=03de2e2b53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4000 identity=4509 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=98d6d3e1-eb0f-4413-a3ec-bdbeda80fe51,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=98d6d3e1-eb0f-4413-a3ec-bdbeda80fe51,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-rabbit-init-j94rb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=03de2e2b53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4000 identity=4509 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-rabbit-init-j94rb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=03de2e2b53 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4000 identity=4509 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-rabbit-init-j94rb subsys=endpoint level=info msg="Successful endpoint creation" containerID=03de2e2b53 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4000 identity=4509 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-rabbit-init-j94rb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=03de2e2b53 endpointID=4000 k8sNamespace=openstack k8sPodName=glance-rabbit-init-j94rb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=98d6d3e1-eb0f-4413-a3ec-bdbeda80fe51 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=98d6d3e1-eb0f-4413-a3ec-bdbeda80fe51 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=03de2e2b53 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4000 identity=4509 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-rabbit-init-j94rb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.177 f257664d-0304-42cf-81f1-88b59d41a74d default }" containerID=6fcd018b7d78bf9338de18d159775de4eeb532674a721fe5354b959ce0eedd8c datapathConfiguration="&{false false false false false }" interface=lxc60c0cffc0e20 k8sPodName=openstack/glance-ks-service-5tdg9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6fcd018b7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=288 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-ks-service-5tdg9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6fcd018b7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=288 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=811e88e5-3e88-4f3b-8d22-91aaffc2d07b,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=811e88e5-3e88-4f3b-8d22-91aaffc2d07b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-ks-service-5tdg9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=811e88e5-3e88-4f3b-8d22-91aaffc2d07b;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=811e88e5-3e88-4f3b-8d22-91aaffc2d07b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6fcd018b7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=288 identity=33737 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=811e88e5-3e88-4f3b-8d22-91aaffc2d07b,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=811e88e5-3e88-4f3b-8d22-91aaffc2d07b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-ks-service-5tdg9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6fcd018b7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=288 identity=33737 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-ks-service-5tdg9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6fcd018b7d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=288 identity=33737 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-ks-service-5tdg9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6fcd018b7d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=288 identity=33737 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-ks-service-5tdg9 subsys=daemon level=info msg="Delete endpoint request" containerID=6fcd018b7d endpointID=288 k8sNamespace=openstack k8sPodName=glance-ks-service-5tdg9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=811e88e5-3e88-4f3b-8d22-91aaffc2d07b k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=811e88e5-3e88-4f3b-8d22-91aaffc2d07b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6fcd018b7d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=288 identity=33737 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-ks-service-5tdg9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.218 5c40a984-62b6-428f-af59-3c5889105dcd default }" containerID=9ebc5c0ea07afe1bb113acde3d415fc51ebd6554cb0c90554be82117138f9a84 datapathConfiguration="&{false false false false false }" interface=lxcd3d1ca4cebdf k8sPodName=openstack/glance-ks-endpoints-jlhtp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ebc5c0ea0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=262 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-ks-endpoints-jlhtp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ebc5c0ea0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=262 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=89d03e83-20b3-4926-ad1a-118117340cbd,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=89d03e83-20b3-4926-ad1a-118117340cbd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-ks-endpoints-jlhtp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=89d03e83-20b3-4926-ad1a-118117340cbd;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=89d03e83-20b3-4926-ad1a-118117340cbd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9ebc5c0ea0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=262 identity=54253 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=89d03e83-20b3-4926-ad1a-118117340cbd,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=89d03e83-20b3-4926-ad1a-118117340cbd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-ks-endpoints-jlhtp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ebc5c0ea0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=262 identity=54253 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-ks-endpoints-jlhtp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9ebc5c0ea0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=262 identity=54253 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-ks-endpoints-jlhtp subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ebc5c0ea0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=262 identity=54253 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-ks-endpoints-jlhtp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9ebc5c0ea0 endpointID=262 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-jlhtp subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=89d03e83-20b3-4926-ad1a-118117340cbd k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=89d03e83-20b3-4926-ad1a-118117340cbd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9ebc5c0ea0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=262 identity=54253 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-ks-endpoints-jlhtp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 1dff4a8a-88fd-4ca8-9b0c-451d95fca239 default }" containerID=72ecb86ab7ecb8df144dc3f8b80aef303e79875d6d79e7ad93970126a880932e datapathConfiguration="&{false false false false false }" interface=lxc64d6ddf46ebc k8sPodName=openstack/glance-ks-user-59bwq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72ecb86ab7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-ks-user-59bwq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72ecb86ab7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c380ad44-f93f-4799-92a6-5fcfbd116f72,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=c380ad44-f93f-4799-92a6-5fcfbd116f72,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-ks-user-59bwq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c380ad44-f93f-4799-92a6-5fcfbd116f72;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=c380ad44-f93f-4799-92a6-5fcfbd116f72;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=72ecb86ab7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 identity=8115 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c380ad44-f93f-4799-92a6-5fcfbd116f72,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=c380ad44-f93f-4799-92a6-5fcfbd116f72,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-ks-user-59bwq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=72ecb86ab7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 identity=8115 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-ks-user-59bwq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=72ecb86ab7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=257 identity=8115 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-ks-user-59bwq subsys=endpoint level=info msg="Successful endpoint creation" containerID=72ecb86ab7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=257 identity=8115 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-ks-user-59bwq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=72ecb86ab7 endpointID=257 k8sNamespace=openstack k8sPodName=glance-ks-user-59bwq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c380ad44-f93f-4799-92a6-5fcfbd116f72 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=c380ad44-f93f-4799-92a6-5fcfbd116f72 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=72ecb86ab7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=257 identity=8115 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-ks-user-59bwq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 60597072-e063-4f55-bf9f-842db69c7ba8 default }" containerID=2ff7a8b10c3d9d84cb6c78fcf37ecbbb9362b1691006a994c51ed123678e2f14 datapathConfiguration="&{false false false false false }" interface=lxc341b4a27ce03 k8sPodName=openstack/glance-metadefs-load-pz4gc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ff7a8b10c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-metadefs-load-pz4gc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ff7a8b10c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fd085956-3f58-443a-9ac7-d59e80f6e290,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=fd085956-3f58-443a-9ac7-d59e80f6e290,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-metadefs-load-pz4gc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2ff7a8b10c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-metadefs-load-pz4gc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=fd085956-3f58-443a-9ac7-d59e80f6e290;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=fd085956-3f58-443a-9ac7-d59e80f6e290;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2ff7a8b10c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 identity=17747 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fd085956-3f58-443a-9ac7-d59e80f6e290,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=fd085956-3f58-443a-9ac7-d59e80f6e290,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-metadefs-load-pz4gc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ff7a8b10c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 identity=17747 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-metadefs-load-pz4gc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2ff7a8b10c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=144 identity=17747 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-metadefs-load-pz4gc subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ff7a8b10c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=144 identity=17747 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-metadefs-load-pz4gc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2ff7a8b10c endpointID=144 k8sNamespace=openstack k8sPodName=glance-metadefs-load-pz4gc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=fd085956-3f58-443a-9ac7-d59e80f6e290 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=fd085956-3f58-443a-9ac7-d59e80f6e290 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2ff7a8b10c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=144 identity=17747 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-metadefs-load-pz4gc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 0920c65e-7ff0-41c8-9ecf-21c216655877 default }" containerID=26bf12af8a60f1823f7910026bb59bc4570cc97a27cbe97fb04808d286b32592 datapathConfiguration="&{false false false false false }" interface=lxcb8c9f48c58ee k8sPodName=openstack/glance-storage-init-n5sbp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=26bf12af8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=250 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-storage-init-n5sbp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=26bf12af8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=250 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5dffbc21-a554-4053-83c0-5b8049a0874e,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=5dffbc21-a554-4053-83c0-5b8049a0874e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-storage-init-n5sbp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=26bf12af8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=250 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-storage-init-n5sbp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5dffbc21-a554-4053-83c0-5b8049a0874e;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=5dffbc21-a554-4053-83c0-5b8049a0874e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=26bf12af8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=250 identity=18801 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5dffbc21-a554-4053-83c0-5b8049a0874e,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=5dffbc21-a554-4053-83c0-5b8049a0874e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-storage-init-n5sbp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=26bf12af8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=250 identity=18801 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-storage-init-n5sbp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=26bf12af8a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=250 identity=18801 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-storage-init-n5sbp subsys=endpoint level=info msg="Successful endpoint creation" containerID=26bf12af8a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=250 identity=18801 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-storage-init-n5sbp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=26bf12af8a endpointID=250 k8sNamespace=openstack k8sPodName=glance-storage-init-n5sbp subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5dffbc21-a554-4053-83c0-5b8049a0874e k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=5dffbc21-a554-4053-83c0-5b8049a0874e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=26bf12af8a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=250 identity=18801 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-storage-init-n5sbp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 64ad5d31-0e56-48bc-88ff-78796ce7b072 default }" containerID=4339eceeb25f7abf5c3a7194dff3f0df2bcf29ed7d39464bec1b63cac2c5fbe4 datapathConfiguration="&{false false false false false }" interface=lxcdc33515249ae k8sPodName=openstack/glance-api-859c8b664-tl2kv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4339eceeb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3377 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-api-859c8b664-tl2kv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4339eceeb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3377 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-api-859c8b664-tl2kv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=4339eceeb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3377 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-api-859c8b664-tl2kv line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4339eceeb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3377 identity=19015 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-api-859c8b664-tl2kv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4339eceeb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3377 identity=19015 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-api-859c8b664-tl2kv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4339eceeb2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3377 identity=19015 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-api-859c8b664-tl2kv subsys=endpoint level=info msg="Successful endpoint creation" containerID=4339eceeb2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3377 identity=19015 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-api-859c8b664-tl2kv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.82 3a55a0d2-3b1a-454a-91ee-770c0d09de59 default }" containerID=bb8f0410c18bc9aa23004e599c214cff59a79d3efe09d757e410786f2afd2d49 datapathConfiguration="&{false false false false false }" interface=lxc8e4030f01f45 k8sPodName=openstack/placement-api-6465bbbf6f-nm6qp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb8f0410c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=532 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/placement-api-6465bbbf6f-nm6qp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb8f0410c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=532 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/placement-api-6465bbbf6f-nm6qp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=bb8f0410c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=532 identity=7859 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/placement-api-6465bbbf6f-nm6qp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb8f0410c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=532 identity=7859 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/placement-api-6465bbbf6f-nm6qp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 d2783726-879b-4969-939a-076848eb00ad default }" containerID=b2d058eb797f3cc4964d8318a3dddb88f6254bf18427694138bd8cfec62d204d datapathConfiguration="&{false false false false false }" interface=lxc2aebace7050e k8sPodName=openstack/placement-db-init-4bz9q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b2d058eb79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=468 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/placement-db-init-4bz9q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b2d058eb79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=468 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=1c808929-94f5-4fa1-a302-f07a90aec736,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=1c808929-94f5-4fa1-a302-f07a90aec736,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/placement-db-init-4bz9q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=1c808929-94f5-4fa1-a302-f07a90aec736;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=1c808929-94f5-4fa1-a302-f07a90aec736;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b2d058eb79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=468 identity=61169 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=1c808929-94f5-4fa1-a302-f07a90aec736,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=1c808929-94f5-4fa1-a302-f07a90aec736,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/placement-db-init-4bz9q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b2d058eb79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=468 identity=61169 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/placement-db-init-4bz9q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bb8f0410c1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=532 identity=7859 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/placement-api-6465bbbf6f-nm6qp subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb8f0410c1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=532 identity=7859 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/placement-api-6465bbbf6f-nm6qp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b2d058eb79 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=468 identity=61169 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/placement-db-init-4bz9q subsys=endpoint level=info msg="Successful endpoint creation" containerID=b2d058eb79 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=468 identity=61169 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/placement-db-init-4bz9q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b2d058eb79 endpointID=468 k8sNamespace=openstack k8sPodName=placement-db-init-4bz9q subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=1c808929-94f5-4fa1-a302-f07a90aec736 k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=1c808929-94f5-4fa1-a302-f07a90aec736 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=b2d058eb79 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=468 identity=61169 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/placement-db-init-4bz9q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 76c1204c-cd9e-48f3-8354-69e0a856b71d default }" containerID=88409bb393f067d9f0c8366415c00953b7c59220670d4cc5c41d737769d74c8c datapathConfiguration="&{false false false false false }" interface=lxc6b2da8570cff k8sPodName=openstack/placement-db-sync-z4ctc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=88409bb393 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3589 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/placement-db-sync-z4ctc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=88409bb393 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3589 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=422dad28-9015-4f0e-9ca5-8e461a622ec5,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=422dad28-9015-4f0e-9ca5-8e461a622ec5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/placement-db-sync-z4ctc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=422dad28-9015-4f0e-9ca5-8e461a622ec5;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=422dad28-9015-4f0e-9ca5-8e461a622ec5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=88409bb393 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3589 identity=43921 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=422dad28-9015-4f0e-9ca5-8e461a622ec5,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=422dad28-9015-4f0e-9ca5-8e461a622ec5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/placement-db-sync-z4ctc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=88409bb393 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3589 identity=43921 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/placement-db-sync-z4ctc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=88409bb393 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3589 identity=43921 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/placement-db-sync-z4ctc subsys=endpoint level=info msg="Successful endpoint creation" containerID=88409bb393 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3589 identity=43921 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/placement-db-sync-z4ctc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=88409bb393 endpointID=3589 k8sNamespace=openstack k8sPodName=placement-db-sync-z4ctc subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=422dad28-9015-4f0e-9ca5-8e461a622ec5 k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=422dad28-9015-4f0e-9ca5-8e461a622ec5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=88409bb393 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3589 identity=43921 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/placement-db-sync-z4ctc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 b58f60d6-8f64-41fd-bd51-9d538a0a3bf3 default }" containerID=64406f91870ec9e1bf003fd069ca2f5b15026901691786ac09fb761ddda60fba datapathConfiguration="&{false false false false false }" interface=lxc0c87744a5074 k8sPodName=openstack/placement-ks-service-d9v48 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64406f9187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4009 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/placement-ks-service-d9v48 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64406f9187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4009 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=d5d4402e-1157-40b8-a30e-20be0d4f83d2,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=d5d4402e-1157-40b8-a30e-20be0d4f83d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/placement-ks-service-d9v48 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=d5d4402e-1157-40b8-a30e-20be0d4f83d2;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=d5d4402e-1157-40b8-a30e-20be0d4f83d2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=64406f9187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4009 identity=32541 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=d5d4402e-1157-40b8-a30e-20be0d4f83d2,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=d5d4402e-1157-40b8-a30e-20be0d4f83d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/placement-ks-service-d9v48 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=64406f9187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4009 identity=32541 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/placement-ks-service-d9v48 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=64406f9187 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4009 identity=32541 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/placement-ks-service-d9v48 subsys=endpoint level=info msg="Successful endpoint creation" containerID=64406f9187 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4009 identity=32541 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/placement-ks-service-d9v48 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=64406f9187 endpointID=4009 k8sNamespace=openstack k8sPodName=placement-ks-service-d9v48 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=d5d4402e-1157-40b8-a30e-20be0d4f83d2 k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=d5d4402e-1157-40b8-a30e-20be0d4f83d2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=64406f9187 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4009 identity=32541 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/placement-ks-service-d9v48 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 d2557dcc-09fe-4eb8-9c18-2ef9733aa0c4 default }" containerID=523b3443aee03e34befab516d27a190e9629ca88adb86213b4c2752685351660 datapathConfiguration="&{false false false false false }" interface=lxc5aadcddcea0c k8sPodName=openstack/placement-ks-user-dxjkh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=523b3443ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1063 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/placement-ks-user-dxjkh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=523b3443ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1063 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=a6b6f976-6324-4043-98b4-6e6ec471ab51,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=a6b6f976-6324-4043-98b4-6e6ec471ab51,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/placement-ks-user-dxjkh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=a6b6f976-6324-4043-98b4-6e6ec471ab51;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=a6b6f976-6324-4043-98b4-6e6ec471ab51;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=523b3443ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1063 identity=7999 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=a6b6f976-6324-4043-98b4-6e6ec471ab51,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=a6b6f976-6324-4043-98b4-6e6ec471ab51,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/placement-ks-user-dxjkh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=523b3443ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1063 identity=7999 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/placement-ks-user-dxjkh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=523b3443ae datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1063 identity=7999 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/placement-ks-user-dxjkh subsys=endpoint level=info msg="Successful endpoint creation" containerID=523b3443ae datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1063 identity=7999 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/placement-ks-user-dxjkh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=523b3443ae endpointID=1063 k8sNamespace=openstack k8sPodName=placement-ks-user-dxjkh subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=a6b6f976-6324-4043-98b4-6e6ec471ab51 k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=a6b6f976-6324-4043-98b4-6e6ec471ab51 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=523b3443ae datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1063 identity=7999 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/placement-ks-user-dxjkh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.222 63b7b112-2ff2-4430-968f-0bea081c24a7 default }" containerID=4db08d215f859b66983d049235a9ef590a3f8e9dedc66a4077dcff4da5812f1e datapathConfiguration="&{false false false false false }" interface=lxc3d8948e4bce3 k8sPodName=openstack/placement-ks-endpoints-k89vd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4db08d215f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1253 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/placement-ks-endpoints-k89vd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4db08d215f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1253 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=86a96e68-a904-450c-99f7-72bd21299302,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=86a96e68-a904-450c-99f7-72bd21299302,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/placement-ks-endpoints-k89vd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=86a96e68-a904-450c-99f7-72bd21299302;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=86a96e68-a904-450c-99f7-72bd21299302;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4db08d215f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1253 identity=20051 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=86a96e68-a904-450c-99f7-72bd21299302,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=86a96e68-a904-450c-99f7-72bd21299302,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/placement-ks-endpoints-k89vd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4db08d215f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1253 identity=20051 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/placement-ks-endpoints-k89vd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4db08d215f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1253 identity=20051 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/placement-ks-endpoints-k89vd subsys=endpoint level=info msg="Successful endpoint creation" containerID=4db08d215f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1253 identity=20051 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/placement-ks-endpoints-k89vd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4db08d215f endpointID=1253 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-k89vd subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=86a96e68-a904-450c-99f7-72bd21299302 k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=86a96e68-a904-450c-99f7-72bd21299302 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=4db08d215f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1253 identity=20051 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/placement-ks-endpoints-k89vd subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.048892826707427596 newInterval=16m53s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.6 6d772318-6d4d-4519-a390-a34f74bd3eb0 default }" containerID=4d5c2b316e72a3102498df010a633b03f953fd64f9886a7e8e71c36729ef4006 datapathConfiguration="&{false false false false false }" interface=lxc5692fdd40ae6 k8sPodName=openstack/neutron-coredns-7dd4958666-rdvbn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d5c2b316e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=189 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-rdvbn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d5c2b316e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=189 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-rdvbn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=neutron-coredns;k8s:app.kubernetes.io/name=coredns;k8s:application=neutron;k8s:component=coredns;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d5c2b316e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=189 identity=21693 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-rdvbn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d5c2b316e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=189 identity=21693 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-rdvbn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4d5c2b316e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=189 identity=21693 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-rdvbn subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d5c2b316e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=189 identity=21693 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-rdvbn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.49 9b03ec93-054b-42b1-b544-88a6b26264ed default }" containerID=34426f0d5c53bfd055088ead43af042822f0a57cb36272578014532a582de1ca datapathConfiguration="&{false false false false false }" interface=lxca6ab7c79aecf k8sPodName=openstack/rabbitmq-nova-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34426f0d5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34426f0d5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=34426f0d5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-nova;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34426f0d5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 identity=40218 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34426f0d5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 identity=40218 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=34426f0d5c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=42 identity=40218 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=34426f0d5c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=42 identity=40218 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.28 21eac93a-8837-4bf8-999f-7bb9dda93e68 default }" containerID=25623828151efc387cd91c67cf4af213de642d586dcaac2d78dd9f0c2c809859 datapathConfiguration="&{false false false false false }" interface=lxcfe3557d9a154 k8sPodName=openstack/nova-scheduler-7db96646b4-bl8k5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2562382815 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2583 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/nova-scheduler-7db96646b4-bl8k5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2562382815 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2583 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/nova-scheduler-7db96646b4-bl8k5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2562382815 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2583 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.28 ipv6= k8sPodName=openstack/nova-scheduler-7db96646b4-bl8k5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2562382815 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2583 identity=17928 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/nova-scheduler-7db96646b4-bl8k5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2562382815 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2583 identity=17928 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/nova-scheduler-7db96646b4-bl8k5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 fca3deb1-1847-41be-8b25-da719adfa51d default }" containerID=97c7bdfdceb1970775fd603588223ff47d137e865604d1aea34fdb70bff6b9d5 datapathConfiguration="&{false false false false false }" interface=lxc72f5ef986884 k8sPodName=openstack/nova-conductor-65cdff7588-6dcb6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=97c7bdfdce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/nova-conductor-65cdff7588-6dcb6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=97c7bdfdce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/nova-conductor-65cdff7588-6dcb6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=97c7bdfdce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identity=33291 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/nova-conductor-65cdff7588-6dcb6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=97c7bdfdce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identity=33291 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/nova-conductor-65cdff7588-6dcb6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2562382815 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2583 identity=17928 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/nova-scheduler-7db96646b4-bl8k5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2562382815 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2583 identity=17928 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/nova-scheduler-7db96646b4-bl8k5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=97c7bdfdce datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=216 identity=33291 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/nova-conductor-65cdff7588-6dcb6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=97c7bdfdce datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=216 identity=33291 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/nova-conductor-65cdff7588-6dcb6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.242 b0d9bc87-43bb-49ac-95ee-fb89f5223c55 default }" containerID=ea8606825af43e59c90df7b7f17e1f75bde2bb3641a47e62072aebcaeb7e062a datapathConfiguration="&{false false false false false }" interface=lxc3d493cf6e8c3 k8sPodName=openstack/nova-api-metadata-88989d595-l4zcw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea8606825a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3887 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/nova-api-metadata-88989d595-l4zcw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea8606825a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3887 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/nova-api-metadata-88989d595-l4zcw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.8 2c26803b-f6b0-4163-bd13-915a151bba69 default }" containerID=80628580dfac7fe605a3b7a79d4a3260c88cd8ab99b414de9c59e8380300e953 datapathConfiguration="&{false false false false false }" interface=lxc33469810d69b k8sPodName=openstack/nova-bootstrap-5ktsd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=80628580df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/nova-bootstrap-5ktsd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 d9e60b4d-0704-4b07-8840-6f2efbb3d969 default }" containerID=0ebc588a556d98a68f5b03c790ca2a818d198e2581d6fd0f2ec05788679c50bb datapathConfiguration="&{false false false false false }" interface=lxca32471439006 k8sPodName=openstack/nova-cell-setup-pdzqp labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=80628580df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=16bf9e15-a22c-4dc8-931e-b2b2870bc7db,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=16bf9e15-a22c-4dc8-931e-b2b2870bc7db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/nova-bootstrap-5ktsd subsys=endpoint level=info msg="New endpoint" containerID=0ebc588a55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=733 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/nova-cell-setup-pdzqp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ebc588a55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=733 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=2fca13eb-a807-4c90-91ee-d0b6b16e2158,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=2fca13eb-a807-4c90-91ee-d0b6b16e2158,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/nova-cell-setup-pdzqp subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=metadata;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea8606825a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3887 identity=46375 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/nova-api-metadata-88989d595-l4zcw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea8606825a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3887 identity=46375 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/nova-api-metadata-88989d595-l4zcw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=16bf9e15-a22c-4dc8-931e-b2b2870bc7db;k8s:batch.kubernetes.io/job-name=nova-bootstrap;k8s:component=bootstrap;k8s:controller-uid=16bf9e15-a22c-4dc8-931e-b2b2870bc7db;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-bootstrap;k8s:release_group=nova;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=80628580df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 identity=2938 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=16bf9e15-a22c-4dc8-931e-b2b2870bc7db,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=16bf9e15-a22c-4dc8-931e-b2b2870bc7db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/nova-bootstrap-5ktsd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=80628580df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 identity=2938 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/nova-bootstrap-5ktsd subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=2fca13eb-a807-4c90-91ee-d0b6b16e2158;k8s:batch.kubernetes.io/job-name=nova-cell-setup;k8s:component=cell-setup;k8s:controller-uid=2fca13eb-a807-4c90-91ee-d0b6b16e2158;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0ebc588a55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=733 identity=2363 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=2fca13eb-a807-4c90-91ee-d0b6b16e2158,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=2fca13eb-a807-4c90-91ee-d0b6b16e2158,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/nova-cell-setup-pdzqp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ebc588a55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=733 identity=2363 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/nova-cell-setup-pdzqp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 313dff9c-f057-4862-a984-5369f1b8d1c6 default }" containerID=a52a71534206c2019b8a8eec3e251c40990417daf4a0d77de385bca86159b9ea datapathConfiguration="&{false false false false false }" interface=lxc81173b2c236e k8sPodName=openstack/nova-api-osapi-86455b88bd-fggtd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a52a715342 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/nova-api-osapi-86455b88bd-fggtd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a52a715342 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/nova-api-osapi-86455b88bd-fggtd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.13 80382ad1-d553-4240-b8d9-d8c76897861e default }" containerID=1ea45d89723d018f003e2a2194cac9102c231613f2ba4de576c679946a4e8deb datapathConfiguration="&{false false false false false }" interface=lxc5a042f019dc8 k8sPodName=openstack/nova-db-init-76knx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ea45d8972 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1490 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/nova-db-init-76knx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ea45d8972 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1490 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=a053b34f-3b33-4763-aa15-2cf9f4969ce6,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=a053b34f-3b33-4763-aa15-2cf9f4969ce6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/nova-db-init-76knx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea8606825a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3887 identity=46375 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/nova-api-metadata-88989d595-l4zcw subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea8606825a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3887 identity=46375 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/nova-api-metadata-88989d595-l4zcw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=80628580df datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=89 identity=2938 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/nova-bootstrap-5ktsd subsys=endpoint level=info msg="Successful endpoint creation" containerID=80628580df datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=89 identity=2938 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/nova-bootstrap-5ktsd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0ebc588a55 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=733 identity=2363 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/nova-cell-setup-pdzqp subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ebc588a55 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=733 identity=2363 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/nova-cell-setup-pdzqp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.142 dfdeada2-1595-429a-bc45-4e95968efc04 default }" containerID=155c09fd6f87672627a1e8e94b553ad80ddb1b68e37a0eb5ea6d01927a0ec279 datapathConfiguration="&{false false false false false }" interface=lxc12ad86b7eb7e k8sPodName=openstack/nova-novncproxy-77dc955d9-b27v7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=155c09fd6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/nova-novncproxy-77dc955d9-b27v7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=155c09fd6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/nova-novncproxy-77dc955d9-b27v7 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=os-api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a52a715342 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identity=46764 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/nova-api-osapi-86455b88bd-fggtd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a52a715342 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identity=46764 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/nova-api-osapi-86455b88bd-fggtd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1ea45d8972 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1490 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.13 ipv6= k8sPodName=openstack/nova-db-init-76knx line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=155c09fd6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.142 ipv6= k8sPodName=openstack/nova-novncproxy-77dc955d9-b27v7 line=611 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a52a715342 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=829 identity=46764 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/nova-api-osapi-86455b88bd-fggtd subsys=endpoint level=info msg="Successful endpoint creation" containerID=a52a715342 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=829 identity=46764 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/nova-api-osapi-86455b88bd-fggtd subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=a053b34f-3b33-4763-aa15-2cf9f4969ce6;k8s:batch.kubernetes.io/job-name=nova-db-init;k8s:component=db-init;k8s:controller-uid=a053b34f-3b33-4763-aa15-2cf9f4969ce6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ea45d8972 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1490 identity=1249 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=a053b34f-3b33-4763-aa15-2cf9f4969ce6,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=a053b34f-3b33-4763-aa15-2cf9f4969ce6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/nova-db-init-76knx oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=1ea45d8972 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1490 identity=1249 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/nova-db-init-76knx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1ea45d8972 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1490 identity=1249 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/nova-db-init-76knx subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ea45d8972 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1490 identity=1249 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/nova-db-init-76knx subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=novnc-proxy;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=155c09fd6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 identity=20302 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/nova-novncproxy-77dc955d9-b27v7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=155c09fd6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 identity=20302 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/nova-novncproxy-77dc955d9-b27v7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=155c09fd6f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=859 identity=20302 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/nova-novncproxy-77dc955d9-b27v7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=155c09fd6f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=859 identity=20302 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/nova-novncproxy-77dc955d9-b27v7 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1ea45d8972 endpointID=1490 k8sNamespace=openstack k8sPodName=nova-db-init-76knx subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=a053b34f-3b33-4763-aa15-2cf9f4969ce6 k8s:batch.kubernetes.io/job-name=nova-db-init k8s:component=db-init k8s:controller-uid=a053b34f-3b33-4763-aa15-2cf9f4969ce6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=1ea45d8972 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1490 identity=1249 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/nova-db-init-76knx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 6f6b1fe9-a205-4a4c-811d-eb34f5488802 default }" containerID=68388fbe89764237b2795a5bb63418c9fb95418bc44e9c3d60e1f07348ccff2b datapathConfiguration="&{false false false false false }" interface=lxc82336cc2e622 k8sPodName=openstack/nova-db-sync-xr6n8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68388fbe89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2184 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/nova-db-sync-xr6n8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68388fbe89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2184 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=97a0cdbc-cb83-4aa8-b28e-e1caf2d8cfff,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=97a0cdbc-cb83-4aa8-b28e-e1caf2d8cfff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/nova-db-sync-xr6n8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=97a0cdbc-cb83-4aa8-b28e-e1caf2d8cfff;k8s:batch.kubernetes.io/job-name=nova-db-sync;k8s:component=db-sync;k8s:controller-uid=97a0cdbc-cb83-4aa8-b28e-e1caf2d8cfff;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-sync;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68388fbe89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2184 identity=40114 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=97a0cdbc-cb83-4aa8-b28e-e1caf2d8cfff,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=97a0cdbc-cb83-4aa8-b28e-e1caf2d8cfff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/nova-db-sync-xr6n8 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=68388fbe89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2184 identity=40114 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/nova-db-sync-xr6n8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=68388fbe89 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2184 identity=40114 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/nova-db-sync-xr6n8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=68388fbe89 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2184 identity=40114 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/nova-db-sync-xr6n8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=68388fbe89 endpointID=2184 k8sNamespace=openstack k8sPodName=nova-db-sync-xr6n8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=97a0cdbc-cb83-4aa8-b28e-e1caf2d8cfff k8s:batch.kubernetes.io/job-name=nova-db-sync k8s:component=db-sync k8s:controller-uid=97a0cdbc-cb83-4aa8-b28e-e1caf2d8cfff k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-sync k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=68388fbe89 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2184 identity=40114 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/nova-db-sync-xr6n8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.104 2eb5d230-5721-4d3f-b5ab-c5ce786a4631 default }" containerID=7ba2bfbd99ad1ae975b09aa4a1a3e9273a9ffd6772a9008b30f54029f11349e7 datapathConfiguration="&{false false false false false }" interface=lxcba62d503c169 k8sPodName=openstack/nova-rabbit-init-c97p6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ba2bfbd99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3361 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/nova-rabbit-init-c97p6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ba2bfbd99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3361 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=9d432230-83f4-44d9-8df0-05df9073e2b8,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=9d432230-83f4-44d9-8df0-05df9073e2b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/nova-rabbit-init-c97p6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=9d432230-83f4-44d9-8df0-05df9073e2b8;k8s:batch.kubernetes.io/job-name=nova-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=9d432230-83f4-44d9-8df0-05df9073e2b8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-rabbit-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ba2bfbd99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3361 identity=10445 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=9d432230-83f4-44d9-8df0-05df9073e2b8,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=9d432230-83f4-44d9-8df0-05df9073e2b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/nova-rabbit-init-c97p6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ba2bfbd99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3361 identity=10445 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/nova-rabbit-init-c97p6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7ba2bfbd99 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3361 identity=10445 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/nova-rabbit-init-c97p6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ba2bfbd99 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3361 identity=10445 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/nova-rabbit-init-c97p6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7ba2bfbd99 endpointID=3361 k8sNamespace=openstack k8sPodName=nova-rabbit-init-c97p6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=9d432230-83f4-44d9-8df0-05df9073e2b8 k8s:batch.kubernetes.io/job-name=nova-rabbit-init k8s:component=rabbit-init k8s:controller-uid=9d432230-83f4-44d9-8df0-05df9073e2b8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-rabbit-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=7ba2bfbd99 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3361 identity=10445 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/nova-rabbit-init-c97p6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.96 3813d088-9917-4964-8261-62953a7bfcc3 default }" containerID=c09b2759e1c4cfbc29d6428aaed18e58452203568cdbfa7956adaeac2f64f85a datapathConfiguration="&{false false false false false }" interface=lxc57c6b28599ab k8sPodName=openstack/nova-ks-service-d6h9v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c09b2759e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/nova-ks-service-d6h9v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c09b2759e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=11ae6bc4-a3e5-4be0-8821-eea724c801c5,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=11ae6bc4-a3e5-4be0-8821-eea724c801c5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/nova-ks-service-d6h9v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=11ae6bc4-a3e5-4be0-8821-eea724c801c5;k8s:batch.kubernetes.io/job-name=nova-ks-service;k8s:component=ks-service;k8s:controller-uid=11ae6bc4-a3e5-4be0-8821-eea724c801c5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-service;k8s:release_group=nova;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=c09b2759e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.96 ipv6= k8sPodName=openstack/nova-ks-service-d6h9v line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c09b2759e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identity=5992 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=11ae6bc4-a3e5-4be0-8821-eea724c801c5,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=11ae6bc4-a3e5-4be0-8821-eea724c801c5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/nova-ks-service-d6h9v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c09b2759e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identity=5992 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/nova-ks-service-d6h9v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c09b2759e1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=22 identity=5992 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/nova-ks-service-d6h9v subsys=endpoint level=info msg="Successful endpoint creation" containerID=c09b2759e1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=22 identity=5992 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/nova-ks-service-d6h9v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c09b2759e1 endpointID=22 k8sNamespace=openstack k8sPodName=nova-ks-service-d6h9v subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=11ae6bc4-a3e5-4be0-8821-eea724c801c5 k8s:batch.kubernetes.io/job-name=nova-ks-service k8s:component=ks-service k8s:controller-uid=11ae6bc4-a3e5-4be0-8821-eea724c801c5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-service k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=c09b2759e1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=22 identity=5992 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/nova-ks-service-d6h9v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 97d844c8-b6ee-401d-bb23-443abdf3f05d default }" containerID=47ebb14a6411dea749c8d3a793ecae5661b1ca32cd56a3dc184529a52905459d datapathConfiguration="&{false false false false false }" interface=lxcde4d7db82a98 k8sPodName=openstack/nova-ks-endpoints-jwjqg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=47ebb14a64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=528 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/nova-ks-endpoints-jwjqg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=47ebb14a64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=528 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=230fe46e-cda1-4a39-ac23-69885f8b2037,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=230fe46e-cda1-4a39-ac23-69885f8b2037,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/nova-ks-endpoints-jwjqg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=230fe46e-cda1-4a39-ac23-69885f8b2037;k8s:batch.kubernetes.io/job-name=nova-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=230fe46e-cda1-4a39-ac23-69885f8b2037;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-endpoints;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=47ebb14a64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=528 identity=58957 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=230fe46e-cda1-4a39-ac23-69885f8b2037,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=230fe46e-cda1-4a39-ac23-69885f8b2037,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/nova-ks-endpoints-jwjqg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=47ebb14a64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=528 identity=58957 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/nova-ks-endpoints-jwjqg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=47ebb14a64 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=528 identity=58957 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/nova-ks-endpoints-jwjqg subsys=endpoint level=info msg="Successful endpoint creation" containerID=47ebb14a64 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=528 identity=58957 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/nova-ks-endpoints-jwjqg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=47ebb14a64 endpointID=528 k8sNamespace=openstack k8sPodName=nova-ks-endpoints-jwjqg subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=230fe46e-cda1-4a39-ac23-69885f8b2037 k8s:batch.kubernetes.io/job-name=nova-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=230fe46e-cda1-4a39-ac23-69885f8b2037 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-endpoints k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=47ebb14a64 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=528 identity=58957 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/nova-ks-endpoints-jwjqg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 29a995f4-e7ff-46c1-80b9-225e8406a75e default }" containerID=0c04c9f5efc439740e3e74f76a916970e335e2144b939956e743b932e490eef4 datapathConfiguration="&{false false false false false }" interface=lxcbafb5930d87b k8sPodName=openstack/nova-ks-user-kdpkp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0c04c9f5ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1801 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/nova-ks-user-kdpkp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0c04c9f5ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1801 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=e0ff3229-5b3f-496e-8f06-139e0bdb7851,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=e0ff3229-5b3f-496e-8f06-139e0bdb7851,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/nova-ks-user-kdpkp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=e0ff3229-5b3f-496e-8f06-139e0bdb7851;k8s:batch.kubernetes.io/job-name=nova-ks-user;k8s:component=ks-user;k8s:controller-uid=e0ff3229-5b3f-496e-8f06-139e0bdb7851;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-user;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0c04c9f5ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1801 identity=62173 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=e0ff3229-5b3f-496e-8f06-139e0bdb7851,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=e0ff3229-5b3f-496e-8f06-139e0bdb7851,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/nova-ks-user-kdpkp oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0c04c9f5ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1801 identity=62173 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/nova-ks-user-kdpkp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0c04c9f5ef datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1801 identity=62173 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/nova-ks-user-kdpkp subsys=endpoint level=info msg="Successful endpoint creation" containerID=0c04c9f5ef datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1801 identity=62173 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/nova-ks-user-kdpkp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0c04c9f5ef endpointID=1801 k8sNamespace=openstack k8sPodName=nova-ks-user-kdpkp subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=e0ff3229-5b3f-496e-8f06-139e0bdb7851 k8s:batch.kubernetes.io/job-name=nova-ks-user k8s:component=ks-user k8s:controller-uid=e0ff3229-5b3f-496e-8f06-139e0bdb7851 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-user k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=0c04c9f5ef datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1801 identity=62173 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/nova-ks-user-kdpkp subsys=endpoint level=info msg="Delete endpoint request" containerID=80628580df endpointID=89 k8sNamespace=openstack k8sPodName=nova-bootstrap-5ktsd subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=16bf9e15-a22c-4dc8-931e-b2b2870bc7db k8s:batch.kubernetes.io/job-name=nova-bootstrap k8s:component=bootstrap k8s:controller-uid=16bf9e15-a22c-4dc8-931e-b2b2870bc7db k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-bootstrap k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=80628580df datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=89 identity=2938 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/nova-bootstrap-5ktsd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 d3181108-1714-4407-8cc0-99384de152dd default }" containerID=a9ff302b3e8b757dc844823e7b29c1a33d883fcc757686c5fe4940384213cf46 datapathConfiguration="&{false false false false false }" interface=lxcb380c7a61150 k8sPodName=openstack/rabbitmq-neutron-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a9ff302b3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a9ff302b3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a9ff302b3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-neutron;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a9ff302b3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 identity=48262 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a9ff302b3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 identity=48262 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a9ff302b3e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=88 identity=48262 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a9ff302b3e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=88 identity=48262 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.40 900bf03f-89a2-498b-8604-351a2f2134ca default }" containerID=64552837b46adfd6705c154148824533d8f9d0d5dabfc239015d7ba265b82e11 datapathConfiguration="&{false false false false false }" interface=lxc35df91a53f61 k8sPodName=openstack/neutron-rpc-server-6779c7df5d-p8llk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64552837b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/neutron-rpc-server-6779c7df5d-p8llk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64552837b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/neutron-rpc-server-6779c7df5d-p8llk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=64552837b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.40 ipv6= k8sPodName=openstack/neutron-rpc-server-6779c7df5d-p8llk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=rpc_server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=64552837b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identity=1115 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/neutron-rpc-server-6779c7df5d-p8llk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=64552837b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identity=1115 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/neutron-rpc-server-6779c7df5d-p8llk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 6d34077a-b69b-413c-a7b9-dc7a8af94614 default }" containerID=bbfc0f4d02b803ef91326fbdced88f53e1a0368af189d4d00e096ac792290b22 datapathConfiguration="&{false false false false false }" interface=lxc8df9fe6999be k8sPodName=openstack/neutron-server-7db449d954-8df7p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bbfc0f4d02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3399 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/neutron-server-7db449d954-8df7p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bbfc0f4d02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3399 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/neutron-server-7db449d954-8df7p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bbfc0f4d02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3399 identity=16028 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/neutron-server-7db449d954-8df7p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bbfc0f4d02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3399 identity=16028 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/neutron-server-7db449d954-8df7p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=64552837b4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=462 identity=1115 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/neutron-rpc-server-6779c7df5d-p8llk subsys=endpoint level=info msg="Successful endpoint creation" containerID=64552837b4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=462 identity=1115 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/neutron-rpc-server-6779c7df5d-p8llk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.71 a04df6eb-f527-40a9-b4f6-f4bb21ed56c5 default }" containerID=e2878b5ad42ffbae28f4f233048f10742119e7cf8de9fa6062cc64fd74229b8d datapathConfiguration="&{false false false false false }" interface=lxc42ec5230c790 k8sPodName=openstack/neutron-db-init-sfkq8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e2878b5ad4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/neutron-db-init-sfkq8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e2878b5ad4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=6c180b27-34f3-4c71-a848-46e7c8651746,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=6c180b27-34f3-4c71-a848-46e7c8651746,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/neutron-db-init-sfkq8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=6c180b27-34f3-4c71-a848-46e7c8651746;k8s:batch.kubernetes.io/job-name=neutron-db-init;k8s:component=db-init;k8s:controller-uid=6c180b27-34f3-4c71-a848-46e7c8651746;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e2878b5ad4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 identity=56785 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=6c180b27-34f3-4c71-a848-46e7c8651746,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=6c180b27-34f3-4c71-a848-46e7c8651746,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/neutron-db-init-sfkq8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e2878b5ad4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 identity=56785 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/neutron-db-init-sfkq8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bbfc0f4d02 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3399 identity=16028 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/neutron-server-7db449d954-8df7p subsys=endpoint level=info msg="Successful endpoint creation" containerID=bbfc0f4d02 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3399 identity=16028 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/neutron-server-7db449d954-8df7p subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e2878b5ad4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=480 identity=56785 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/neutron-db-init-sfkq8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e2878b5ad4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=480 identity=56785 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/neutron-db-init-sfkq8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e2878b5ad4 endpointID=480 k8sNamespace=openstack k8sPodName=neutron-db-init-sfkq8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=6c180b27-34f3-4c71-a848-46e7c8651746 k8s:batch.kubernetes.io/job-name=neutron-db-init k8s:component=db-init k8s:controller-uid=6c180b27-34f3-4c71-a848-46e7c8651746 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=e2878b5ad4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=480 identity=56785 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/neutron-db-init-sfkq8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 b8143a34-081a-4ca3-b16c-cce7c9eb9b0b default }" containerID=5f61ba19814e72e32442ab711d4b3d56397e84208302e8668c74c8eb4405f1b1 datapathConfiguration="&{false false false false false }" interface=lxcba71295e4cc2 k8sPodName=openstack/neutron-db-sync-gpjkz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f61ba1981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2546 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/neutron-db-sync-gpjkz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f61ba1981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2546 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=0cc673fc-ac2f-4d43-ad15-f4d22a84ace2,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=0cc673fc-ac2f-4d43-ad15-f4d22a84ace2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/neutron-db-sync-gpjkz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=0cc673fc-ac2f-4d43-ad15-f4d22a84ace2;k8s:batch.kubernetes.io/job-name=neutron-db-sync;k8s:component=db-sync;k8s:controller-uid=0cc673fc-ac2f-4d43-ad15-f4d22a84ace2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-sync;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5f61ba1981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2546 identity=17648 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=0cc673fc-ac2f-4d43-ad15-f4d22a84ace2,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=0cc673fc-ac2f-4d43-ad15-f4d22a84ace2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/neutron-db-sync-gpjkz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f61ba1981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2546 identity=17648 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/neutron-db-sync-gpjkz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5f61ba1981 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2546 identity=17648 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/neutron-db-sync-gpjkz subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f61ba1981 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2546 identity=17648 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/neutron-db-sync-gpjkz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5f61ba1981 endpointID=2546 k8sNamespace=openstack k8sPodName=neutron-db-sync-gpjkz subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=0cc673fc-ac2f-4d43-ad15-f4d22a84ace2 k8s:batch.kubernetes.io/job-name=neutron-db-sync k8s:component=db-sync k8s:controller-uid=0cc673fc-ac2f-4d43-ad15-f4d22a84ace2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-sync k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=5f61ba1981 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2546 identity=17648 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/neutron-db-sync-gpjkz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 cff0ef01-2f70-4593-becb-3a36f5559c2c default }" containerID=900ced6949ae18f2d0a9862e979fe48208888277a0e5e25ec5c06a646161a8c6 datapathConfiguration="&{false false false false false }" interface=lxc97a1bf946cff k8sPodName=openstack/neutron-rabbit-init-bjpb8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=900ced6949 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/neutron-rabbit-init-bjpb8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=900ced6949 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=1325dd8d-232e-4cee-b2b8-2287c972519c,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1325dd8d-232e-4cee-b2b8-2287c972519c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/neutron-rabbit-init-bjpb8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=1325dd8d-232e-4cee-b2b8-2287c972519c;k8s:batch.kubernetes.io/job-name=neutron-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=1325dd8d-232e-4cee-b2b8-2287c972519c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-rabbit-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=900ced6949 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identity=42590 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=1325dd8d-232e-4cee-b2b8-2287c972519c,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1325dd8d-232e-4cee-b2b8-2287c972519c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/neutron-rabbit-init-bjpb8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=900ced6949 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identity=42590 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/neutron-rabbit-init-bjpb8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=900ced6949 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=51 identity=42590 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/neutron-rabbit-init-bjpb8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=900ced6949 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=51 identity=42590 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/neutron-rabbit-init-bjpb8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=900ced6949 endpointID=51 k8sNamespace=openstack k8sPodName=neutron-rabbit-init-bjpb8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=1325dd8d-232e-4cee-b2b8-2287c972519c k8s:batch.kubernetes.io/job-name=neutron-rabbit-init k8s:component=rabbit-init k8s:controller-uid=1325dd8d-232e-4cee-b2b8-2287c972519c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-rabbit-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=900ced6949 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=51 identity=42590 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/neutron-rabbit-init-bjpb8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.218 225d2a56-e0e8-4b37-adce-55cf7a11ea05 default }" containerID=11b1ef46a91cf0953c65088a4aa560c245e52f25d2c417b1adf894e4edc2b215 datapathConfiguration="&{false false false false false }" interface=lxc9be5b62c713c k8sPodName=openstack/neutron-ks-service-4gb4k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=11b1ef46a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2340 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/neutron-ks-service-4gb4k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=11b1ef46a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2340 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=aee75492-b189-4380-b857-c50c061877ef,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=aee75492-b189-4380-b857-c50c061877ef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/neutron-ks-service-4gb4k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=aee75492-b189-4380-b857-c50c061877ef;k8s:batch.kubernetes.io/job-name=neutron-ks-service;k8s:component=ks-service;k8s:controller-uid=aee75492-b189-4380-b857-c50c061877ef;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-service;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=11b1ef46a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2340 identity=16735 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=aee75492-b189-4380-b857-c50c061877ef,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=aee75492-b189-4380-b857-c50c061877ef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/neutron-ks-service-4gb4k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=11b1ef46a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2340 identity=16735 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/neutron-ks-service-4gb4k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=11b1ef46a9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2340 identity=16735 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/neutron-ks-service-4gb4k subsys=endpoint level=info msg="Successful endpoint creation" containerID=11b1ef46a9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2340 identity=16735 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/neutron-ks-service-4gb4k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=11b1ef46a9 endpointID=2340 k8sNamespace=openstack k8sPodName=neutron-ks-service-4gb4k subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=aee75492-b189-4380-b857-c50c061877ef k8s:batch.kubernetes.io/job-name=neutron-ks-service k8s:component=ks-service k8s:controller-uid=aee75492-b189-4380-b857-c50c061877ef k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-service k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=11b1ef46a9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2340 identity=16735 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/neutron-ks-service-4gb4k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 b30d67a9-4193-4ae6-ba06-7c9a152f9df0 default }" containerID=c2d58f1316526736e9afb0c152bda40be517b9b42eee3347832c257b82e458a3 datapathConfiguration="&{false false false false false }" interface=lxc1b3573a961b0 k8sPodName=openstack/neutron-ks-endpoints-s8s6q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c2d58f1316 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2398 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/neutron-ks-endpoints-s8s6q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c2d58f1316 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2398 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=cdef76bd-9596-4f23-9583-2798a8bd68b8,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=cdef76bd-9596-4f23-9583-2798a8bd68b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/neutron-ks-endpoints-s8s6q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=cdef76bd-9596-4f23-9583-2798a8bd68b8;k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=cdef76bd-9596-4f23-9583-2798a8bd68b8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-endpoints;k8s:release_group=neutron;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c2d58f1316 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2398 identity=6617 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=cdef76bd-9596-4f23-9583-2798a8bd68b8,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=cdef76bd-9596-4f23-9583-2798a8bd68b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/neutron-ks-endpoints-s8s6q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c2d58f1316 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2398 identity=6617 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/neutron-ks-endpoints-s8s6q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c2d58f1316 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2398 identity=6617 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/neutron-ks-endpoints-s8s6q subsys=endpoint level=info msg="Successful endpoint creation" containerID=c2d58f1316 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2398 identity=6617 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/neutron-ks-endpoints-s8s6q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c2d58f1316 endpointID=2398 k8sNamespace=openstack k8sPodName=neutron-ks-endpoints-s8s6q subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=cdef76bd-9596-4f23-9583-2798a8bd68b8 k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=cdef76bd-9596-4f23-9583-2798a8bd68b8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-endpoints k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=c2d58f1316 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2398 identity=6617 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/neutron-ks-endpoints-s8s6q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 9b0edfbd-5c18-4b2f-942c-96cbbaf70354 default }" containerID=f9411b243084aa95b17c0c0b2deeef92041c7bcf1c4e811c52c3f3d27ac108a1 datapathConfiguration="&{false false false false false }" interface=lxc51fabdae966a k8sPodName=openstack/neutron-ks-user-cn6b2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9411b2430 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/neutron-ks-user-cn6b2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9411b2430 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=14d8f914-1036-4cde-b537-9f63181e2dc5,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=14d8f914-1036-4cde-b537-9f63181e2dc5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/neutron-ks-user-cn6b2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=14d8f914-1036-4cde-b537-9f63181e2dc5;k8s:batch.kubernetes.io/job-name=neutron-ks-user;k8s:component=ks-user;k8s:controller-uid=14d8f914-1036-4cde-b537-9f63181e2dc5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-user;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f9411b2430 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identity=58646 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=14d8f914-1036-4cde-b537-9f63181e2dc5,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=14d8f914-1036-4cde-b537-9f63181e2dc5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/neutron-ks-user-cn6b2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9411b2430 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identity=58646 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/neutron-ks-user-cn6b2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f9411b2430 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=29 identity=58646 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/neutron-ks-user-cn6b2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9411b2430 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=29 identity=58646 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/neutron-ks-user-cn6b2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f9411b2430 endpointID=29 k8sNamespace=openstack k8sPodName=neutron-ks-user-cn6b2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=14d8f914-1036-4cde-b537-9f63181e2dc5 k8s:batch.kubernetes.io/job-name=neutron-ks-user k8s:component=ks-user k8s:controller-uid=14d8f914-1036-4cde-b537-9f63181e2dc5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-user k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=f9411b2430 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=29 identity=58646 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/neutron-ks-user-cn6b2 subsys=endpoint level=info msg="Delete endpoint request" containerID=0ebc588a55 endpointID=733 k8sNamespace=openstack k8sPodName=nova-cell-setup-pdzqp subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=2fca13eb-a807-4c90-91ee-d0b6b16e2158 k8s:batch.kubernetes.io/job-name=nova-cell-setup k8s:component=cell-setup k8s:controller-uid=2fca13eb-a807-4c90-91ee-d0b6b16e2158 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-cell-setup k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=0ebc588a55 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=733 identity=2363 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/nova-cell-setup-pdzqp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 f969cd12-2b85-4a6d-b4ac-d0efbf4d6212 default }" containerID=564d390bc9577b2df475b56877308470c2882a15db682389d8dc42228e985be6 datapathConfiguration="&{false false false false false }" interface=lxc792fbeb6579b k8sPodName=openstack/tempest-ks-user-l67m4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=564d390bc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/tempest-ks-user-l67m4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=564d390bc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 identityLabels="k8s:application=tempest,k8s:batch.kubernetes.io/controller-uid=ac923fc6-2d7d-4cbf-a80b-854b9caa7776,k8s:batch.kubernetes.io/job-name=tempest-ks-user,k8s:component=ks-user,k8s:controller-uid=ac923fc6-2d7d-4cbf-a80b-854b9caa7776,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=tempest-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=tempest-ks-user,k8s:release_group=tempest" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/tempest-ks-user-l67m4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=tempest;k8s:batch.kubernetes.io/controller-uid=ac923fc6-2d7d-4cbf-a80b-854b9caa7776;k8s:batch.kubernetes.io/job-name=tempest-ks-user;k8s:component=ks-user;k8s:controller-uid=ac923fc6-2d7d-4cbf-a80b-854b9caa7776;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=tempest-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=tempest-ks-user;k8s:release_group=tempest;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=564d390bc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 identity=27613 identityLabels="k8s:application=tempest,k8s:batch.kubernetes.io/controller-uid=ac923fc6-2d7d-4cbf-a80b-854b9caa7776,k8s:batch.kubernetes.io/job-name=tempest-ks-user,k8s:component=ks-user,k8s:controller-uid=ac923fc6-2d7d-4cbf-a80b-854b9caa7776,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=tempest-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=tempest-ks-user,k8s:release_group=tempest" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/tempest-ks-user-l67m4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=564d390bc9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=309 identity=27613 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/tempest-ks-user-l67m4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=564d390bc9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=309 identity=27613 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/tempest-ks-user-l67m4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=564d390bc9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=309 identity=27613 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/tempest-ks-user-l67m4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=564d390bc9 endpointID=309 k8sNamespace=openstack k8sPodName=tempest-ks-user-l67m4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=tempest k8s:batch.kubernetes.io/controller-uid=ac923fc6-2d7d-4cbf-a80b-854b9caa7776 k8s:batch.kubernetes.io/job-name=tempest-ks-user k8s:component=ks-user k8s:controller-uid=ac923fc6-2d7d-4cbf-a80b-854b9caa7776 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=tempest-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=tempest-ks-user k8s:release_group=tempest]" subsys=allocator level=info msg="Removed endpoint" containerID=564d390bc9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=309 identity=27613 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/tempest-ks-user-l67m4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 1509b353-ee8b-4fe3-9808-372893ce3270 default }" containerID=8daec810b464c607ae0310e1a91ff689244250a91de9370fbf26927b5d319e8c datapathConfiguration="&{false false false false false }" interface=lxc21b925b51dd0 k8sPodName=openstack/tempest-run-tests-9jq9t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8daec810b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/tempest-run-tests-9jq9t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8daec810b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 identityLabels="k8s:application=tempest,k8s:batch.kubernetes.io/controller-uid=f5a5a329-29ea-4d2b-848f-a2bf97d9181d,k8s:batch.kubernetes.io/job-name=tempest-run-tests,k8s:component=run-tests,k8s:controller-uid=f5a5a329-29ea-4d2b-848f-a2bf97d9181d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=tempest-run-tests,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=tempest-run-tests,k8s:release_group=tempest" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/tempest-run-tests-9jq9t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=tempest;k8s:batch.kubernetes.io/controller-uid=f5a5a329-29ea-4d2b-848f-a2bf97d9181d;k8s:batch.kubernetes.io/job-name=tempest-run-tests;k8s:component=run-tests;k8s:controller-uid=f5a5a329-29ea-4d2b-848f-a2bf97d9181d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=tempest-run-tests;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=tempest-run-tests;k8s:release_group=tempest;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=8daec810b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.200 ipv6= k8sPodName=openstack/tempest-run-tests-9jq9t line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8daec810b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 identity=2031 identityLabels="k8s:application=tempest,k8s:batch.kubernetes.io/controller-uid=f5a5a329-29ea-4d2b-848f-a2bf97d9181d,k8s:batch.kubernetes.io/job-name=tempest-run-tests,k8s:component=run-tests,k8s:controller-uid=f5a5a329-29ea-4d2b-848f-a2bf97d9181d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=tempest-run-tests,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=tempest-run-tests,k8s:release_group=tempest" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/tempest-run-tests-9jq9t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8daec810b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 identity=2031 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/tempest-run-tests-9jq9t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8daec810b4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=85 identity=2031 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/tempest-run-tests-9jq9t subsys=endpoint level=info msg="Successful endpoint creation" containerID=8daec810b4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=85 identity=2031 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/tempest-run-tests-9jq9t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.176 fcf5ad5a-f116-40cf-b67f-14908c8fa380 default }" containerID=74366a0b1b08d5aeb6759ed597b7f55db01afff1c2abd413724b62b90bdf6d9e datapathConfiguration="&{false false false false false }" interface=lxc82ba44f43686 k8sPodName=openstack/nova-service-cleaner-29757480-7xwlk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74366a0b1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1925 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/nova-service-cleaner-29757480-7xwlk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74366a0b1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1925 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=5ba0a5ef-5922-4430-9d50-1e7841a60842,k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29757480,k8s:component=service-cleaner,k8s:controller-uid=5ba0a5ef-5922-4430-9d50-1e7841a60842,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-service-cleaner-29757480,k8s:release_group=nova" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/nova-service-cleaner-29757480-7xwlk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=5ba0a5ef-5922-4430-9d50-1e7841a60842;k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29757480;k8s:component=service-cleaner;k8s:controller-uid=5ba0a5ef-5922-4430-9d50-1e7841a60842;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-service-cleaner-29757480;k8s:release_group=nova;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=74366a0b1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1925 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.176 ipv6= k8sPodName=openstack/nova-service-cleaner-29757480-7xwlk line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=74366a0b1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1925 identity=10557 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=5ba0a5ef-5922-4430-9d50-1e7841a60842,k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29757480,k8s:component=service-cleaner,k8s:controller-uid=5ba0a5ef-5922-4430-9d50-1e7841a60842,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-service-cleaner-29757480,k8s:release_group=nova" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/nova-service-cleaner-29757480-7xwlk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=74366a0b1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1925 identity=10557 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/nova-service-cleaner-29757480-7xwlk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.187 aba7c4b8-1d14-4fc5-a62b-fa3457b19602 default }" containerID=e11f2b9ae3313576c3ca328882c22792325f9d9524fc720b5ae6c03e58d76cb7 datapathConfiguration="&{false false false false false }" interface=lxc58d66ceae3fa k8sPodName=openstack/nova-cell-setup-29757480-zsftx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e11f2b9ae3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3736 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/nova-cell-setup-29757480-zsftx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e11f2b9ae3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3736 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=6efc8c9e-f662-45d1-9538-c74703b2ded4,k8s:batch.kubernetes.io/job-name=nova-cell-setup-29757480,k8s:component=cell-setup,k8s:controller-uid=6efc8c9e-f662-45d1-9538-c74703b2ded4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup-29757480,k8s:release_group=nova" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/nova-cell-setup-29757480-zsftx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=6efc8c9e-f662-45d1-9538-c74703b2ded4;k8s:batch.kubernetes.io/job-name=nova-cell-setup-29757480;k8s:component=cell-setup;k8s:controller-uid=6efc8c9e-f662-45d1-9538-c74703b2ded4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup-29757480;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e11f2b9ae3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3736 identity=40017 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=6efc8c9e-f662-45d1-9538-c74703b2ded4,k8s:batch.kubernetes.io/job-name=nova-cell-setup-29757480,k8s:component=cell-setup,k8s:controller-uid=6efc8c9e-f662-45d1-9538-c74703b2ded4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup-29757480,k8s:release_group=nova" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/nova-cell-setup-29757480-zsftx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e11f2b9ae3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3736 identity=40017 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/nova-cell-setup-29757480-zsftx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=74366a0b1b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1925 identity=10557 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/nova-service-cleaner-29757480-7xwlk subsys=endpoint level=info msg="Successful endpoint creation" containerID=74366a0b1b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1925 identity=10557 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/nova-service-cleaner-29757480-7xwlk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e11f2b9ae3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3736 identity=40017 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/nova-cell-setup-29757480-zsftx subsys=endpoint level=info msg="Successful endpoint creation" containerID=e11f2b9ae3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3736 identity=40017 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/nova-cell-setup-29757480-zsftx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e11f2b9ae3 endpointID=3736 k8sNamespace=openstack k8sPodName=nova-cell-setup-29757480-zsftx subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=6efc8c9e-f662-45d1-9538-c74703b2ded4 k8s:batch.kubernetes.io/job-name=nova-cell-setup-29757480 k8s:component=cell-setup k8s:controller-uid=6efc8c9e-f662-45d1-9538-c74703b2ded4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-cell-setup-29757480 k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=e11f2b9ae3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3736 identity=40017 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/nova-cell-setup-29757480-zsftx subsys=endpoint level=info msg="Delete endpoint request" containerID=74366a0b1b endpointID=1925 k8sNamespace=openstack k8sPodName=nova-service-cleaner-29757480-7xwlk subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=5ba0a5ef-5922-4430-9d50-1e7841a60842 k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29757480 k8s:component=service-cleaner k8s:controller-uid=5ba0a5ef-5922-4430-9d50-1e7841a60842 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-service-cleaner-29757480 k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=74366a0b1b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1925 identity=10557 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/nova-service-cleaner-29757480-7xwlk subsys=endpoint level=info msg="Delete endpoint request" containerID=8daec810b4 endpointID=85 k8sNamespace=openstack k8sPodName=tempest-run-tests-9jq9t subsys=daemon level=info msg="Releasing key" key="[k8s:application=tempest k8s:batch.kubernetes.io/controller-uid=f5a5a329-29ea-4d2b-848f-a2bf97d9181d k8s:batch.kubernetes.io/job-name=tempest-run-tests k8s:component=run-tests k8s:controller-uid=f5a5a329-29ea-4d2b-848f-a2bf97d9181d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=tempest-run-tests k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=tempest-run-tests k8s:release_group=tempest]" subsys=allocator level=info msg="Removed endpoint" containerID=8daec810b4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=85 identity=2031 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/tempest-run-tests-9jq9t subsys=endpoint