level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.028014ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="72.911µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.177987ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="16.41µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=113.977697ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="13.14µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="20.7µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="64.441µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="66.252µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="75.592µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="441.97µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="5.791µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=17.69736ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.865285ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="45.721µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="34.291µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="201.535µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="87.312µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="68.192µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=47.886018ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="118.983µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="14.831µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.931µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.113.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.916934ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="14.171µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.68757ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.07µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.990717ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.44µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="3.481µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.79µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.65µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="12.02µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="26.12µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="25.641µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="90.283µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="448.7µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="5.91µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="10.13µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="287.467µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="918.252µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.336721ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.03µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="17.681µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.113 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.113 ipAddr.ipv6="" k8sNodeIP=199.204.45.113 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.113" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.215" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.113" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.113} {CiliumInternalIP 10.0.0.215}] 10.0.0.0/24 [] [] 10.0.0.179 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:45915" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.649811301s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="14.58µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="6.32µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="43.731µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="9.721µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.648823143s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=289.389555ms file-path=/var/run/cilium/state/templates/e492776406650f6b789d97ce75fa75167ba14844de5134b26c5c1fac11b587a4/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=613 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 ipv4=10.0.0.179 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 identityLabels="reserved:health" ipv4=10.0.0.179 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 identity=4 identityLabels="reserved:health" ipv4=10.0.0.179 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Create endpoint request" addressing="&{10.0.0.141 a8cd31a7-5302-4afd-b615-3fe464ed6b4f default }" containerID=cf037d5ab59810c47735e9f9bb581441485501a5a8b56e75be832ccfbe379aff datapathConfiguration="&{false false false false false }" interface=lxc6e5f0c9dc2b3 k8sPodName=kube-system/coredns-7c96b6546b-zsg92 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf037d5ab5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1223 ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-zsg92 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 c91489e7-07c6-452e-b429-c51bb71fd5eb default }" containerID=4d223b3acc14ad2315202abb57223c5a9cddf4e671886e8bd25e6de14bd6176b datapathConfiguration="&{false false false false false }" interface=lxcd7f30d8494e0 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-pzfm6 labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=cf037d5ab5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1223 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-zsg92 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="New endpoint" containerID=4d223b3acc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1424 ipv4=10.0.0.109 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-pzfm6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d223b3acc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1424 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=0eb26945-5e9c-4452-979d-0204aa1ecc4f,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=0eb26945-5e9c-4452-979d-0204aa1ecc4f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.109 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-pzfm6 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=cf037d5ab5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1223 identity=7568 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-zsg92 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cf037d5ab5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1223 identity=7568 ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-zsg92 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=4d223b3acc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1424 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.109 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-pzfm6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=0eb26945-5e9c-4452-979d-0204aa1ecc4f;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=0eb26945-5e9c-4452-979d-0204aa1ecc4f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d223b3acc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1424 identity=11017 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=0eb26945-5e9c-4452-979d-0204aa1ecc4f,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=0eb26945-5e9c-4452-979d-0204aa1ecc4f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.109 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-pzfm6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d223b3acc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1424 identity=11017 ipv4=10.0.0.109 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-pzfm6 subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=1.073039654s file-path=/var/run/cilium/state/templates/aa6988a09a0248b05500d5c2e48336683526069547be60e70572b4c45396bb99/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=4d223b3acc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1424 identity=11017 ipv4=10.0.0.109 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-pzfm6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d223b3acc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1424 identity=11017 ipv4=10.0.0.109 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-pzfm6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cf037d5ab5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1223 identity=7568 ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-zsg92 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf037d5ab5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1223 identity=7568 ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-zsg92 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1350 identity=4 ipv4=10.0.0.179 ipv6= k8sPodName=/ subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4d223b3acc endpointID=1424 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-pzfm6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=0eb26945-5e9c-4452-979d-0204aa1ecc4f k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=0eb26945-5e9c-4452-979d-0204aa1ecc4f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=4d223b3acc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1424 identity=11017 ipv4=10.0.0.109 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-pzfm6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 4d4f1635-bdd7-439a-beaf-2b0dc94286b4 default }" containerID=4277f2ac7707a7b1705e0ca81eb9914063159bac2a8b3359560a6a3626bcc289 datapathConfiguration="&{false false false false false }" interface=lxce92427f7bbda k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5q52f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4277f2ac77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 ipv4=10.0.0.6 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5q52f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4277f2ac77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.6 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5q52f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4277f2ac77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 identity=28656 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.6 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5q52f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4277f2ac77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 identity=28656 ipv4=10.0.0.6 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5q52f subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4277f2ac77 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=621 identity=28656 ipv4=10.0.0.6 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5q52f subsys=endpoint level=info msg="Successful endpoint creation" containerID=4277f2ac77 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=621 identity=28656 ipv4=10.0.0.6 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5q52f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=613 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00613 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00613 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00613 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00613:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=613 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 ab6007ad-0abe-4e9c-af98-18ac77d02ee2 default }" containerID=d30cd718b2c8a6f9e153ac0bf9cfd3c09e3525f93fbc40a152e15c41efbc6840 datapathConfiguration="&{false false false false false }" interface=lxc5efc6425b7c7 k8sPodName=kube-system/coredns-67659f764b-6kfzb labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.161 3688ac90-df53-4f40-8618-62c67727b184 default }" containerID=9503638b2ce65ba3262d314e10278c120a412afc2cd08e03305ea706381c5fed datapathConfiguration="&{false false false false false }" interface=lxca9ce277666eb k8sPodName=kube-system/coredns-67659f764b-7rsq6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d30cd718b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=61 ipv4=10.0.0.170 ipv6= k8sPodName=kube-system/coredns-67659f764b-6kfzb subsys=endpoint level=info msg="New endpoint" containerID=9503638b2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 ipv4=10.0.0.161 ipv6= k8sPodName=kube-system/coredns-67659f764b-7rsq6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d30cd718b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=61 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.170 ipv6= k8sPodName=kube-system/coredns-67659f764b-6kfzb subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d30cd718b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=61 identity=7568 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.170 ipv6= k8sPodName=kube-system/coredns-67659f764b-6kfzb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d30cd718b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=61 identity=7568 ipv4=10.0.0.170 ipv6= k8sPodName=kube-system/coredns-67659f764b-6kfzb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9503638b2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.161 ipv6= k8sPodName=kube-system/coredns-67659f764b-7rsq6 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9503638b2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identity=7568 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.161 ipv6= k8sPodName=kube-system/coredns-67659f764b-7rsq6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9503638b2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identity=7568 ipv4=10.0.0.161 ipv6= k8sPodName=kube-system/coredns-67659f764b-7rsq6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d30cd718b2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=61 identity=7568 ipv4=10.0.0.170 ipv6= k8sPodName=kube-system/coredns-67659f764b-6kfzb subsys=endpoint level=info msg="Successful endpoint creation" containerID=d30cd718b2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=61 identity=7568 ipv4=10.0.0.170 ipv6= k8sPodName=kube-system/coredns-67659f764b-6kfzb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9503638b2c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=82 identity=7568 ipv4=10.0.0.161 ipv6= k8sPodName=kube-system/coredns-67659f764b-7rsq6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9503638b2c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=82 identity=7568 ipv4=10.0.0.161 ipv6= k8sPodName=kube-system/coredns-67659f764b-7rsq6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.139 4475c295-1529-450a-ba03-104b7823b50a default }" containerID=f2d4637db6aa85282796f89dc29310b390404b74adf564a2a0bf64f20143fb4e datapathConfiguration="&{false false false false false }" interface=lxc8a0d5d1df8ce k8sPodName=local-path-storage/local-path-provisioner-679c578f5-trwfb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f2d4637db6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3559 ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-trwfb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f2d4637db6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3559 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-trwfb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f2d4637db6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3559 identity=715 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-trwfb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f2d4637db6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3559 identity=715 ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-trwfb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f2d4637db6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3559 identity=715 ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-trwfb subsys=endpoint level=info msg="Successful endpoint creation" containerID=f2d4637db6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3559 identity=715 ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-trwfb subsys=daemon level=info msg="Delete endpoint request" containerID=cf037d5ab5 endpointID=1223 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-zsg92 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=cf037d5ab5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1223 identity=7568 ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-zsg92 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 211cdb7a-689d-49ab-88be-3a8fd7e9c6e9 default }" containerID=f491c879ec5f33818c9b8beb1a09d0945db19841323820e9e11841a7ba30abbb datapathConfiguration="&{false false false false false }" interface=lxc8bc885ee6655 k8sPodName=cert-manager/cert-manager-75c4c745bc-bwvjn labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.186 3cc3092b-0ca8-4475-a062-f6ccfb31c77d default }" containerID=cbc75a9461795a0f92de5a98c4b486a3c02921ad0928ea11614acccf86baad62 datapathConfiguration="&{false false false false false }" interface=lxce73c4fba41e3 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6ctrc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f491c879ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1141 ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bwvjn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 7b28162c-1ef2-4b48-a945-ea058e90eedf default }" containerID=d80d031e220f47ba871b53ab44456b22778679b81bd4a8c63992060a970cf974 datapathConfiguration="&{false false false false false }" interface=lxcd89950987949 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lm498 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cbc75a9461 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=807 ipv4=10.0.0.186 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6ctrc subsys=endpoint level=info msg="New endpoint" containerID=d80d031e22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1065 ipv4=10.0.0.57 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lm498 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f491c879ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1141 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bwvjn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=cbc75a9461 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=807 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.186 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6ctrc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d80d031e22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1065 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.57 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lm498 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f491c879ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1141 identity=6189 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bwvjn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f491c879ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1141 identity=6189 ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bwvjn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cbc75a9461 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=807 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.186 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6ctrc line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=d80d031e22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1065 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.57 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lm498 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=cbc75a9461 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=807 identity=2426 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.186 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6ctrc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cbc75a9461 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=807 identity=2426 ipv4=10.0.0.186 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6ctrc subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d80d031e22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1065 identity=32685 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.57 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lm498 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d80d031e22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1065 identity=32685 ipv4=10.0.0.57 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lm498 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f491c879ec datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1141 identity=6189 ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bwvjn subsys=endpoint level=info msg="Successful endpoint creation" containerID=f491c879ec datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1141 identity=6189 ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bwvjn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cbc75a9461 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=807 identity=2426 ipv4=10.0.0.186 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6ctrc subsys=endpoint level=info msg="Successful endpoint creation" containerID=cbc75a9461 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=807 identity=2426 ipv4=10.0.0.186 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6ctrc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d80d031e22 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1065 identity=32685 ipv4=10.0.0.57 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lm498 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d80d031e22 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1065 identity=32685 ipv4=10.0.0.57 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lm498 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.219 b8cbb9f5-19ad-4441-9db0-c41143eb1116 default }" containerID=5b69ae68c088634155739fde29f1b71b2b77ae16fbe8f37594b8de1b882a5f95 datapathConfiguration="&{false false false false false }" interface=lxc59c2c9f3394f k8sPodName=cert-manager/cert-manager-startupapicheck-dz8gn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5b69ae68c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 ipv4=10.0.0.219 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dz8gn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5b69ae68c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=62deca75-01d3-429a-a919-7d019b49f6cf,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=62deca75-01d3-429a-a919-7d019b49f6cf,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.219 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dz8gn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=62deca75-01d3-429a-a919-7d019b49f6cf;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=62deca75-01d3-429a-a919-7d019b49f6cf;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5b69ae68c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 identity=12956 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=62deca75-01d3-429a-a919-7d019b49f6cf,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=62deca75-01d3-429a-a919-7d019b49f6cf,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.219 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dz8gn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5b69ae68c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 identity=12956 ipv4=10.0.0.219 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dz8gn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5b69ae68c0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1744 identity=12956 ipv4=10.0.0.219 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dz8gn subsys=endpoint level=info msg="Successful endpoint creation" containerID=5b69ae68c0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1744 identity=12956 ipv4=10.0.0.219 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dz8gn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5b69ae68c0 endpointID=1744 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-dz8gn subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=62deca75-01d3-429a-a919-7d019b49f6cf k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=62deca75-01d3-429a-a919-7d019b49f6cf k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=5b69ae68c0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1744 identity=12956 ipv4=10.0.0.219 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dz8gn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 64682f5b-415a-43cf-8467-b8c5eeb8f7a6 default }" containerID=5c495f22d8ba15becbd036fe9e59448fee3332378be2c5db9a356f707369d90d datapathConfiguration="&{false false false false false }" interface=lxcfc0e637d4de9 k8sPodName=ingress-nginx/ingress-nginx-admission-create-4d7vk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c495f22d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2668 ipv4=10.0.0.94 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4d7vk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c495f22d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2668 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=0d7ca2b2-49f2-4db9-b90c-d24cb1c98ed1,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=0d7ca2b2-49f2-4db9-b90c-d24cb1c98ed1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.94 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4d7vk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=0d7ca2b2-49f2-4db9-b90c-d24cb1c98ed1;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=0d7ca2b2-49f2-4db9-b90c-d24cb1c98ed1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5c495f22d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2668 identity=15232 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=0d7ca2b2-49f2-4db9-b90c-d24cb1c98ed1,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=0d7ca2b2-49f2-4db9-b90c-d24cb1c98ed1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.94 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4d7vk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c495f22d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2668 identity=15232 ipv4=10.0.0.94 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4d7vk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5c495f22d8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2668 identity=15232 ipv4=10.0.0.94 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4d7vk subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c495f22d8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2668 identity=15232 ipv4=10.0.0.94 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4d7vk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5c495f22d8 endpointID=2668 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-4d7vk subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=0d7ca2b2-49f2-4db9-b90c-d24cb1c98ed1 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=0d7ca2b2-49f2-4db9-b90c-d24cb1c98ed1 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=5c495f22d8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2668 identity=15232 ipv4=10.0.0.94 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4d7vk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.253 0b093217-01fa-46ac-8d59-3f907763863d default }" containerID=5cccc8a0095e497e0652753e2bb3fdb4f553ed7ac92d5177cce34fd93ad7ef65 datapathConfiguration="&{false false false false false }" interface=lxca703217d4db2 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-p5nlh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5cccc8a009 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1578 ipv4=10.0.0.253 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-p5nlh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5cccc8a009 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1578 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.253 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-p5nlh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5cccc8a009 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1578 identity=60937 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.253 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-p5nlh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5cccc8a009 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1578 identity=60937 ipv4=10.0.0.253 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-p5nlh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5cccc8a009 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1578 identity=60937 ipv4=10.0.0.253 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-p5nlh subsys=endpoint level=info msg="Successful endpoint creation" containerID=5cccc8a009 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1578 identity=60937 ipv4=10.0.0.253 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-p5nlh subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.109 7dfaf702-6cff-44c8-b6de-c0c25b7d1396 default }" containerID=3ebd0961f92b90cb71d54ff912991e3ccbec796bdf5ff82117dfe307d7563ae0 datapathConfiguration="&{false false false false false }" interface=lxcbf4cfe319bb6 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-kzxqd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ebd0961f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 ipv4=10.0.0.109 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-kzxqd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ebd0961f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=15c2a683-1c90-4a3f-a084-c456c8f0d528,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=15c2a683-1c90-4a3f-a084-c456c8f0d528,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.109 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-kzxqd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=15c2a683-1c90-4a3f-a084-c456c8f0d528;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=15c2a683-1c90-4a3f-a084-c456c8f0d528;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ebd0961f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identity=10423 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=15c2a683-1c90-4a3f-a084-c456c8f0d528,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=15c2a683-1c90-4a3f-a084-c456c8f0d528,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.109 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-kzxqd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ebd0961f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identity=10423 ipv4=10.0.0.109 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-kzxqd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3ebd0961f9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1173 identity=10423 ipv4=10.0.0.109 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-kzxqd subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ebd0961f9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1173 identity=10423 ipv4=10.0.0.109 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-kzxqd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3ebd0961f9 endpointID=1173 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-kzxqd subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=15c2a683-1c90-4a3f-a084-c456c8f0d528 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=15c2a683-1c90-4a3f-a084-c456c8f0d528 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=3ebd0961f9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1173 identity=10423 ipv4=10.0.0.109 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-kzxqd subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=6176a472-2de3-4273-8106-e1af72c4c1ef] Description:}]" policyAddRequest=1f061d21-8926-4824-a88c-84211ca40a1b subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=1f061d21-8926-4824-a88c-84211ca40a1b policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=c59f19ac-88e6-45ca-8862-65c6a52ffd13] Description:}]" policyAddRequest=284bd912-7906-417e-93f3-2041134bb6ac subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=284bd912-7906-417e-93f3-2041134bb6ac policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.189 f2bd56b4-994c-48cc-86a0-a791af3050f8 default }" containerID=40a1b64a9b067c16b408957c7559b59984065f84c4038befe0937a6f075eb5be datapathConfiguration="&{false false false false false }" interface=lxca3ef6715c3f6 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-r8lbr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=40a1b64a9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4076 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-r8lbr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=40a1b64a9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4076 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-r8lbr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=40a1b64a9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4076 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-r8lbr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=40a1b64a9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4076 identity=19445 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-r8lbr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=40a1b64a9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4076 identity=19445 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-r8lbr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=40a1b64a9b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=4076 identity=19445 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-r8lbr subsys=endpoint level=info msg="Successful endpoint creation" containerID=40a1b64a9b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=4076 identity=19445 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-r8lbr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.60 a6a9a28f-8eb2-4512-83dd-f46a31059545 default }" containerID=85fa929ba00ea2f010754100a38be021de94b005d22a73de6041876727021107 datapathConfiguration="&{false false false false false }" interface=lxc7f91c37d9a57 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-xq6fx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85fa929ba0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-xq6fx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85fa929ba0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-xq6fx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85fa929ba0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 identity=40546 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-xq6fx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85fa929ba0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 identity=40546 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-xq6fx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=85fa929ba0 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1217 identity=40546 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-xq6fx subsys=endpoint level=info msg="Successful endpoint creation" containerID=85fa929ba0 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1217 identity=40546 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-xq6fx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.62 014831c1-0248-4b8a-a62d-2577560f299e default }" containerID=e5a015e621c624de9f4117be0428aeb6defb4f42cbee7b4160405cb7ddef735c datapathConfiguration="&{false false false false false }" interface=lxc9a8f42044b0e k8sPodName=openstack/pxc-operator-69cb5bbdb9-rhgzl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e5a015e621 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=630 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-rhgzl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e5a015e621 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=630 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-rhgzl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e5a015e621 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=630 identity=23230 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-rhgzl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e5a015e621 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=630 identity=23230 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-rhgzl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e5a015e621 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=630 identity=23230 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-rhgzl subsys=endpoint level=info msg="Successful endpoint creation" containerID=e5a015e621 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=630 identity=23230 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-rhgzl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.44 997e5e5e-2a5b-4f3e-bf49-447d9865bc79 default }" containerID=ca9afed8ba4deac216b0a6d218218d8deec69cca846f95aa818e4c0e309efd44 datapathConfiguration="&{false false false false false }" interface=lxce5a751a955ec k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca9afed8ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca9afed8ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ca9afed8ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 identity=12713 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ca9afed8ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 identity=12713 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ca9afed8ba datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1070 identity=12713 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca9afed8ba datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1070 identity=12713 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.29 5d422624-3b08-4722-a620-b7793eb4190f default }" containerID=5742557090cb124496ee8ad5c07e748aa9e405a5c50e2811fede7cf502d87577 datapathConfiguration="&{false false false false false }" interface=lxc0a1dabf44e75 k8sPodName=local-path-storage/helper-pod-create-pvc-95653d22-a0f0-41eb-a70a-ffba193d9378 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5742557090 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=919 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-95653d22-a0f0-41eb-a70a-ffba193d9378 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5742557090 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=919 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-95653d22-a0f0-41eb-a70a-ffba193d9378 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5742557090 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=919 identity=16789 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-95653d22-a0f0-41eb-a70a-ffba193d9378 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5742557090 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=919 identity=16789 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-95653d22-a0f0-41eb-a70a-ffba193d9378 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5742557090 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=919 identity=16789 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-95653d22-a0f0-41eb-a70a-ffba193d9378 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5742557090 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=919 identity=16789 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-95653d22-a0f0-41eb-a70a-ffba193d9378 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5742557090 endpointID=919 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-95653d22-a0f0-41eb-a70a-ffba193d9378 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5742557090 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=919 identity=16789 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-95653d22-a0f0-41eb-a70a-ffba193d9378 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 720ffb68-ef40-45df-9c2e-9b279508150b default }" containerID=bdf0a12e8360afc6e12a114deaeccee9178ee62ecb11519c114d4ba8fa2aa521 datapathConfiguration="&{false false false false false }" interface=lxc801d7d9d2397 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bdf0a12e83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1483 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bdf0a12e83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1483 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bdf0a12e83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1483 identity=41523 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bdf0a12e83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1483 identity=41523 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bdf0a12e83 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1483 identity=41523 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bdf0a12e83 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1483 identity=41523 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=a50dadb4-5bbd-4113-85c8-8733b1796101] Description:}]" policyAddRequest=e426b672-a2ab-419c-820f-ee26a7a86f7f subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=e426b672-a2ab-419c-820f-ee26a7a86f7f policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.254 eff16c8b-9a4c-4155-96b8-350d239cf00f default }" containerID=b64c53ebac783898f6d56f20f2fd6d7f8d2aeb5113dec10244c633961aabed29 datapathConfiguration="&{false false false false false }" interface=lxce68d765bd48e k8sPodName=local-path-storage/helper-pod-create-pvc-6183a21d-0692-475e-a21e-51c53c94d494 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b64c53ebac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1140 ipv4=10.0.0.254 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6183a21d-0692-475e-a21e-51c53c94d494 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b64c53ebac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1140 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.254 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6183a21d-0692-475e-a21e-51c53c94d494 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b64c53ebac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1140 identity=16789 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.254 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6183a21d-0692-475e-a21e-51c53c94d494 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b64c53ebac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1140 identity=16789 ipv4=10.0.0.254 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6183a21d-0692-475e-a21e-51c53c94d494 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b64c53ebac datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1140 identity=16789 ipv4=10.0.0.254 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6183a21d-0692-475e-a21e-51c53c94d494 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b64c53ebac datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1140 identity=16789 ipv4=10.0.0.254 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6183a21d-0692-475e-a21e-51c53c94d494 subsys=daemon level=info msg="Delete endpoint request" containerID=b64c53ebac endpointID=1140 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6183a21d-0692-475e-a21e-51c53c94d494 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b64c53ebac datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1140 identity=16789 ipv4=10.0.0.254 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6183a21d-0692-475e-a21e-51c53c94d494 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 2cbb438d-21df-42fa-938a-a6d8d4f45149 default }" containerID=f2149b0fdeb16d2408a722dbf197b5ed501794c5b349c7b09b84a9fe8616c261 datapathConfiguration="&{false false false false false }" interface=lxce6bd07556d6e k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f2149b0fde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f2149b0fde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f2149b0fde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identity=15017 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f2149b0fde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identity=15017 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f2149b0fde datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=714 identity=15017 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f2149b0fde datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=714 identity=15017 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=f65b9f80-94d0-442d-95d7-88106f59ae83] Description:}]" policyAddRequest=bfed7352-f8b0-4afe-aaee-87b9457e1e9d subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=bfed7352-f8b0-4afe-aaee-87b9457e1e9d policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.200 69c08a5c-85cb-4bf4-b0c4-b94acc88010b default }" containerID=2e4ddb3ac9a845124119d169e01441463ad773f3ee9078c3a9ed83bacfc7b8af datapathConfiguration="&{false false false false false }" interface=lxc87d6a69a0ec5 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2e4ddb3ac9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1337 ipv4=10.0.0.200 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2e4ddb3ac9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1337 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.200 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2e4ddb3ac9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1337 identity=13969 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.200 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2e4ddb3ac9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1337 identity=13969 ipv4=10.0.0.200 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2e4ddb3ac9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1337 identity=13969 ipv4=10.0.0.200 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2e4ddb3ac9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1337 identity=13969 ipv4=10.0.0.200 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009434983159062318 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.226 cb91a262-9f00-43fb-a20e-eff8f540ae35 default }" containerID=d66df885dfcacdb8f9a3f8cf6ec507d35078cf5f84dc4d3210e75fdff8cb09bf datapathConfiguration="&{false false false false false }" interface=lxc680cea987158 k8sPodName=monitoring/node-feature-discovery-worker-ndlmq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d66df885df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3797 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-ndlmq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d66df885df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3797 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-ndlmq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=d66df885df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3797 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-ndlmq line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d66df885df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3797 identity=8891 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-ndlmq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d66df885df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3797 identity=8891 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-ndlmq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.36 259c38f5-1a6d-4876-8305-193ffd9e6e7b default }" containerID=d6016bab08e5266d1b0d8404a9a05f8e2324f780e75fd9dff3d56a9f6311466f datapathConfiguration="&{false false false false false }" interface=lxca6ce313c81ed k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-fpkfm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d6016bab08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4043 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-fpkfm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 acd61dfc-991f-490e-b65b-35643261b9b0 default }" containerID=a1b53486f9a9ad9e0061a27393366ac3cd53fb860a1630bc839dada9516c40cc datapathConfiguration="&{false false false false false }" interface=lxc05af6765389c k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-s4pbj labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=d6016bab08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4043 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-fpkfm subsys=endpoint level=info msg="New endpoint" containerID=a1b53486f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=237 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-s4pbj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=a1b53486f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=237 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-s4pbj subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d6016bab08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4043 identity=8972 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-fpkfm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d6016bab08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4043 identity=8972 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-fpkfm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1b53486f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=237 identity=26343 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-s4pbj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1b53486f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=237 identity=26343 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-s4pbj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d66df885df datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3797 identity=8891 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-ndlmq subsys=endpoint level=info msg="Successful endpoint creation" containerID=d66df885df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3797 identity=8891 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-ndlmq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d6016bab08 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4043 identity=8972 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-fpkfm subsys=endpoint level=info msg="Successful endpoint creation" containerID=d6016bab08 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4043 identity=8972 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-fpkfm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a1b53486f9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=237 identity=26343 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-s4pbj subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1b53486f9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=237 identity=26343 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-s4pbj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.45 b0a03c60-a016-4e14-b9c6-392cf594183f default }" containerID=9f16f7a0434fb4a22e1cbc7196ca19d6e26677dab4d6fcbcf660995e00f48c27 datapathConfiguration="&{false false false false false }" interface=lxc07bd88db3779 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6dxnw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f16f7a043 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 ipv4=10.0.0.45 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6dxnw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f16f7a043 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.45 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6dxnw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f16f7a043 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 identity=43480 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.45 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6dxnw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f16f7a043 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 identity=43480 ipv4=10.0.0.45 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6dxnw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f16f7a043 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1380 identity=43480 ipv4=10.0.0.45 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6dxnw subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f16f7a043 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1380 identity=43480 ipv4=10.0.0.45 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6dxnw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=613 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-179-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00613 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00613 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00613 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00613:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=613 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 22268dc9-4be8-44d5-bdf1-ccd31802eb6a default }" containerID=3142d8b2b3d3869ef4d0dd6013e9d60163014e80577e088931f1224068cb3a07 datapathConfiguration="&{false false false false false }" interface=lxc305f3445bca0 k8sPodName=monitoring/kube-prometheus-stack-admission-create-nk4hc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3142d8b2b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nk4hc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3142d8b2b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=360ef96b-1ad9-4091-b904-96962c8f9fdf,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=360ef96b-1ad9-4091-b904-96962c8f9fdf,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nk4hc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=360ef96b-1ad9-4091-b904-96962c8f9fdf;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=360ef96b-1ad9-4091-b904-96962c8f9fdf;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3142d8b2b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identity=35256 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=360ef96b-1ad9-4091-b904-96962c8f9fdf,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=360ef96b-1ad9-4091-b904-96962c8f9fdf,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nk4hc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3142d8b2b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identity=35256 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nk4hc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3142d8b2b3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=439 identity=35256 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nk4hc subsys=endpoint level=info msg="Successful endpoint creation" containerID=3142d8b2b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=439 identity=35256 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nk4hc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3142d8b2b3 endpointID=439 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-nk4hc subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=360ef96b-1ad9-4091-b904-96962c8f9fdf k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=360ef96b-1ad9-4091-b904-96962c8f9fdf k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=3142d8b2b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=439 identity=35256 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nk4hc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 64bd357f-de83-4f3a-be56-f9789417d8fa default }" containerID=7a5d06024e7c53abefc2c1425ee4cb61fce5a16a07bcd873fc28e2f17c6b01a1 datapathConfiguration="&{false false false false false }" interface=lxcc2478da70f59 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-gz7ht labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a5d06024e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=25 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-gz7ht subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a5d06024e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=25 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-gz7ht subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7a5d06024e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=25 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-gz7ht line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a5d06024e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=25 identity=38089 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-gz7ht oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a5d06024e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=25 identity=38089 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-gz7ht subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.85 65346638-0e07-4a89-a6a7-679499dc0ea7 default }" containerID=a005cdbc6cfda65b2312cf0514e5e091f3994aef5eee6ec9143ca49547214634 datapathConfiguration="&{false false false false false }" interface=lxcfc7615f447cd k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bvqbh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a005cdbc6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bvqbh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a005cdbc6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bvqbh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a005cdbc6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 identity=16207 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bvqbh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a005cdbc6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 identity=16207 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bvqbh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7a5d06024e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=25 identity=38089 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-gz7ht subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a5d06024e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=25 identity=38089 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-gz7ht subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.53 47de1db6-8db9-41fc-820c-10d4528c9020 default }" containerID=1188d9d47f3d5afa9a4aaef1ab2079f35b3b76ce59c5298414bc5389752ab2a7 datapathConfiguration="&{false false false false false }" interface=lxc86c7f23d88d5 k8sPodName=monitoring/kube-prometheus-stack-grafana-55c99dc49d-bv5jt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1188d9d47f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-55c99dc49d-bv5jt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1188d9d47f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-55c99dc49d-bv5jt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1188d9d47f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 identity=51851 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-55c99dc49d-bv5jt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1188d9d47f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 identity=51851 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-55c99dc49d-bv5jt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a005cdbc6c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=391 identity=16207 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bvqbh subsys=endpoint level=info msg="Successful endpoint creation" containerID=a005cdbc6c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=391 identity=16207 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bvqbh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1188d9d47f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=89 identity=51851 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-55c99dc49d-bv5jt subsys=endpoint level=info msg="Successful endpoint creation" containerID=1188d9d47f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=89 identity=51851 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-55c99dc49d-bv5jt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.138 caa0359f-4ff5-422b-90c5-67f903443476 default }" containerID=63ec59701c1a4887d62275b618c2b0d22112ff28996556edb3da3cb1bc7f3b48 datapathConfiguration="&{false false false false false }" interface=lxc289c60452002 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tj492 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=63ec59701c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=529 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tj492 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=63ec59701c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=529 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=0007a524-0742-434c-9dc5-c46a9fe832fb,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=0007a524-0742-434c-9dc5-c46a9fe832fb,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tj492 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=0007a524-0742-434c-9dc5-c46a9fe832fb;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=0007a524-0742-434c-9dc5-c46a9fe832fb;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=63ec59701c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=529 identity=2464 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=0007a524-0742-434c-9dc5-c46a9fe832fb,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=0007a524-0742-434c-9dc5-c46a9fe832fb,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tj492 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=63ec59701c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=529 identity=2464 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tj492 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=63ec59701c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=529 identity=2464 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tj492 subsys=endpoint level=info msg="Successful endpoint creation" containerID=63ec59701c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=529 identity=2464 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tj492 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=63ec59701c endpointID=529 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-tj492 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=0007a524-0742-434c-9dc5-c46a9fe832fb k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=0007a524-0742-434c-9dc5-c46a9fe832fb k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=63ec59701c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=529 identity=2464 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tj492 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 d111879a-bc7d-46c6-b04c-3d971047503b default }" containerID=aeb6c8a58961ef889a6a32a8a3acc70636c564b69632396ae71394ec05e80ee5 datapathConfiguration="&{false false false false false }" interface=lxc57a9880812b0 k8sPodName=local-path-storage/helper-pod-create-pvc-4b0e2639-1bb7-43bd-8c67-0041e0a4cd77 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aeb6c8a589 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4053 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b0e2639-1bb7-43bd-8c67-0041e0a4cd77 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aeb6c8a589 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4053 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b0e2639-1bb7-43bd-8c67-0041e0a4cd77 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aeb6c8a589 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4053 identity=16789 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b0e2639-1bb7-43bd-8c67-0041e0a4cd77 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aeb6c8a589 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4053 identity=16789 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b0e2639-1bb7-43bd-8c67-0041e0a4cd77 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aeb6c8a589 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4053 identity=16789 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b0e2639-1bb7-43bd-8c67-0041e0a4cd77 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aeb6c8a589 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4053 identity=16789 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b0e2639-1bb7-43bd-8c67-0041e0a4cd77 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.8 354ff9b2-0b56-4a2f-8b19-55fba6d23006 default }" containerID=d05890c5babbbbdd431e0e1aa5d0b8232c50cf144034583b034cb402da3270b8 datapathConfiguration="&{false false false false false }" interface=lxc1bd7a18b3f5a k8sPodName=local-path-storage/helper-pod-create-pvc-d46bdf53-da4f-488a-9cb5-5a084e407aab labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d05890c5ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d46bdf53-da4f-488a-9cb5-5a084e407aab subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d05890c5ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d46bdf53-da4f-488a-9cb5-5a084e407aab subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d05890c5ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identity=16789 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d46bdf53-da4f-488a-9cb5-5a084e407aab oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d05890c5ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identity=16789 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d46bdf53-da4f-488a-9cb5-5a084e407aab subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d05890c5ba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=169 identity=16789 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d46bdf53-da4f-488a-9cb5-5a084e407aab subsys=endpoint level=info msg="Successful endpoint creation" containerID=d05890c5ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=169 identity=16789 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d46bdf53-da4f-488a-9cb5-5a084e407aab subsys=daemon level=info msg="Delete endpoint request" containerID=aeb6c8a589 endpointID=4053 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4b0e2639-1bb7-43bd-8c67-0041e0a4cd77 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=d05890c5ba endpointID=169 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d46bdf53-da4f-488a-9cb5-5a084e407aab subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=aeb6c8a589 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4053 identity=16789 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b0e2639-1bb7-43bd-8c67-0041e0a4cd77 subsys=endpoint level=info msg="Removed endpoint" containerID=d05890c5ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=169 identity=16789 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d46bdf53-da4f-488a-9cb5-5a084e407aab subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 ae30b293-e028-4b10-9118-2ee71beeba0c default }" containerID=2f2454d88f79cc78971acced461738b685d67b0d8a607ed044ab02aff9e0ebdb datapathConfiguration="&{false false false false false }" interface=lxc8cfed218ae5c k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2f2454d88f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2167 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2f2454d88f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2167 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2f2454d88f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2167 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2f2454d88f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2167 identity=17952 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2f2454d88f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2167 identity=17952 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2f2454d88f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2167 identity=17952 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2f2454d88f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2167 identity=17952 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.238 16d9134b-406b-41a5-9f9d-ded9eebda39e default }" containerID=9281c7235113f6ead57043c68dcf7a744e395c288ba171e6dcc87c5770e2d7a2 datapathConfiguration="&{false false false false false }" interface=lxc91da31663e8f k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9281c72351 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9281c72351 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9281c72351 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identity=13731 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9281c72351 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identity=13731 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9281c72351 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=108 identity=13731 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9281c72351 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=108 identity=13731 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.174 d1c85fbc-a5f3-46a0-8f3a-3f3835c08aaf default }" containerID=6ff15926b01791df43f06471500b2733f8eed7d42c5ab2d54a94b2017f333c6b datapathConfiguration="&{false false false false false }" interface=lxcbd62ffaccdc3 k8sPodName=monitoring/loki-gateway-cf54cb88c-djn6p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ff15926b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1258 ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-djn6p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ff15926b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1258 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-djn6p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ff15926b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1258 identity=428 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-djn6p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ff15926b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1258 identity=428 ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-djn6p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.52 db5ed318-d5a8-4e50-a16e-f5dc3473a735 default }" containerID=f47a4fa7cc31cfef7dbd1ca6b4d8782f85812b1a4edcece52671305100ae4f12 datapathConfiguration="&{false false false false false }" interface=lxc369cc64149a9 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f47a4fa7cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1847 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f47a4fa7cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1847 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.150 49327c88-436d-43c0-9188-71f442055cfb default }" containerID=e8590512d9729f05420eb73930f636c548a8cdc2a198d64d7f97200756cb8365 datapathConfiguration="&{false false false false false }" interface=lxcc56eb022e4f1 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8590512d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2733 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8590512d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2733 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f47a4fa7cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1847 identity=38860 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=f47a4fa7cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1847 identity=38860 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e8590512d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2733 identity=64681 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e8590512d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2733 identity=64681 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6ff15926b0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1258 identity=428 ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-djn6p subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ff15926b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1258 identity=428 ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-djn6p subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.48 dfd97f2d-d8d0-4981-9e94-bf10c4288057 default }" containerID=c83338597a526d2c4fab2d85e669a0ce350454cc64943818c0a8d9ea8373dc6a datapathConfiguration="&{false false false false false }" interface=lxc57658a13ebe7 k8sPodName=local-path-storage/helper-pod-create-pvc-c02f503e-6f93-4cbc-aeb1-6a9fe3af3aa7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c83338597a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1507 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c02f503e-6f93-4cbc-aeb1-6a9fe3af3aa7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c83338597a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1507 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c02f503e-6f93-4cbc-aeb1-6a9fe3af3aa7 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c83338597a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1507 identity=16789 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c02f503e-6f93-4cbc-aeb1-6a9fe3af3aa7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c83338597a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1507 identity=16789 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c02f503e-6f93-4cbc-aeb1-6a9fe3af3aa7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f47a4fa7cc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1847 identity=38860 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f47a4fa7cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1847 identity=38860 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e8590512d9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2733 identity=64681 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8590512d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2733 identity=64681 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c83338597a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1507 identity=16789 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c02f503e-6f93-4cbc-aeb1-6a9fe3af3aa7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c83338597a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1507 identity=16789 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c02f503e-6f93-4cbc-aeb1-6a9fe3af3aa7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.254 0fe13e03-79cc-40c4-925b-cb7fa3d0b30a default }" containerID=fbed7fd3904c32280359a48455444d23068611cf42bc885f148edd39385d05b6 datapathConfiguration="&{false false false false false }" interface=lxc483dc4de4dd2 k8sPodName=monitoring/vector-ljt7w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fbed7fd390 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1964 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/vector-ljt7w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fbed7fd390 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1964 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/vector-ljt7w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fbed7fd390 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1964 identity=7201 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/vector-ljt7w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fbed7fd390 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1964 identity=7201 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/vector-ljt7w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fbed7fd390 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1964 identity=7201 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/vector-ljt7w subsys=endpoint level=info msg="Successful endpoint creation" containerID=fbed7fd390 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1964 identity=7201 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/vector-ljt7w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c83338597a endpointID=1507 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c02f503e-6f93-4cbc-aeb1-6a9fe3af3aa7 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c83338597a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1507 identity=16789 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c02f503e-6f93-4cbc-aeb1-6a9fe3af3aa7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 54686f5f-6ba3-457e-99f2-0a806f663e0e default }" containerID=7f943f8b0a061b310e1f707f8f0e8c2468fbc039fb7a4b095ee31e77667b8ddb datapathConfiguration="&{false false false false false }" interface=lxc3e14ade5ed8f k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f943f8b0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=819 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f943f8b0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=819 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f943f8b0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=819 identity=40204 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7f943f8b0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=819 identity=40204 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7f943f8b0a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=819 identity=40204 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f943f8b0a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=819 identity=40204 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.136 6fc8d683-ce2f-4c2f-9a7d-be76ec989c32 default }" containerID=460b1690f54c33e4e7342b150c3c20dc5a1dfd7feb42797a6c7f1575f0013cf2 datapathConfiguration="&{false false false false false }" interface=lxc45dea3790579 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-nddqq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=460b1690f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2041 ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-nddqq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=460b1690f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2041 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-nddqq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=460b1690f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2041 identity=9066 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-nddqq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=460b1690f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2041 identity=9066 ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-nddqq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=460b1690f5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2041 identity=9066 ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-nddqq subsys=endpoint level=info msg="Successful endpoint creation" containerID=460b1690f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2041 identity=9066 ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-nddqq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.199 5e1c7d6d-c2b8-4bbb-93f8-2992fc33339d default }" containerID=7790322eac1683c49c332bff781500460341039005efedef13237b689428e531 datapathConfiguration="&{false false false false false }" interface=lxc763c765a3e22 k8sPodName=openstack/memcached-memcached-6479589586-ctp7g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7790322eac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-ctp7g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7790322eac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-ctp7g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7790322eac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identity=46705 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-ctp7g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7790322eac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identity=46705 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-ctp7g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7790322eac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=487 identity=46705 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-ctp7g subsys=endpoint level=info msg="Successful endpoint creation" containerID=7790322eac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=487 identity=46705 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-ctp7g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.216 c33e780c-c37c-4ae6-b613-307b31b48dc6 default }" containerID=3dc7d4830002500a39b7371cc0eee03f27f44a56d0051bef969d3d4c9660e637 datapathConfiguration="&{false false false false false }" interface=lxc182a38871088 k8sPodName=local-path-storage/helper-pod-create-pvc-84c5b1a0-8fbe-4333-92b1-e8d2fce8e49d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3dc7d48300 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=232 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84c5b1a0-8fbe-4333-92b1-e8d2fce8e49d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3dc7d48300 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=232 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84c5b1a0-8fbe-4333-92b1-e8d2fce8e49d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3dc7d48300 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=232 identity=16789 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84c5b1a0-8fbe-4333-92b1-e8d2fce8e49d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3dc7d48300 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=232 identity=16789 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84c5b1a0-8fbe-4333-92b1-e8d2fce8e49d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3dc7d48300 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=232 identity=16789 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84c5b1a0-8fbe-4333-92b1-e8d2fce8e49d subsys=endpoint level=info msg="Successful endpoint creation" containerID=3dc7d48300 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=232 identity=16789 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84c5b1a0-8fbe-4333-92b1-e8d2fce8e49d subsys=daemon level=info msg="Delete endpoint request" containerID=3dc7d48300 endpointID=232 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-84c5b1a0-8fbe-4333-92b1-e8d2fce8e49d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3dc7d48300 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=232 identity=16789 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84c5b1a0-8fbe-4333-92b1-e8d2fce8e49d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 7576a57a-7df2-41af-9e6d-4c3499cc1eb4 default }" containerID=1426d6e289782efebfa4e3810ee867c3e656845e8ae3c0bf22bb65d0360f618b datapathConfiguration="&{false false false false false }" interface=lxc4aa9a9172c81 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1426d6e289 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1426d6e289 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1426d6e289 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 identity=57255 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1426d6e289 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 identity=57255 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1426d6e289 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=234 identity=57255 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1426d6e289 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=234 identity=57255 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.144 8b139c0d-40a6-4629-a43c-4bb3eee942a0 default }" containerID=1ace6ac98481b298c6b2aeb975515d3941717f254b755ae031e80dd641579544 datapathConfiguration="&{false false false false false }" interface=lxc0ccbc292b305 k8sPodName=openstack/keystone-api-5c767c59c9-cntsk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ace6ac984 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2260 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-api-5c767c59c9-cntsk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ace6ac984 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2260 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-api-5c767c59c9-cntsk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ace6ac984 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2260 identity=1075 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-api-5c767c59c9-cntsk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ace6ac984 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2260 identity=1075 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-api-5c767c59c9-cntsk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 f4c12f28-457f-4707-9fb1-b83edf6a090c default }" containerID=f6b24d87520a2528aab6f5aa7fd4c428dcfaa1ace1f4e8bb72d22ee86fac1921 datapathConfiguration="&{false false false false false }" interface=lxcc8e493b9dde6 k8sPodName=openstack/keystone-credential-setup-n2qjt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f6b24d8752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-credential-setup-n2qjt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f6b24d8752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6208c958-bc80-46d2-8afe-c848097b3219,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=6208c958-bc80-46d2-8afe-c848097b3219,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-credential-setup-n2qjt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6208c958-bc80-46d2-8afe-c848097b3219;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=6208c958-bc80-46d2-8afe-c848097b3219;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f6b24d8752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 identity=13936 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6208c958-bc80-46d2-8afe-c848097b3219,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=6208c958-bc80-46d2-8afe-c848097b3219,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-credential-setup-n2qjt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f6b24d8752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 identity=13936 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-credential-setup-n2qjt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1ace6ac984 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2260 identity=1075 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-api-5c767c59c9-cntsk subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ace6ac984 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2260 identity=1075 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-api-5c767c59c9-cntsk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f6b24d8752 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=711 identity=13936 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-credential-setup-n2qjt subsys=endpoint level=info msg="Successful endpoint creation" containerID=f6b24d8752 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=711 identity=13936 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-credential-setup-n2qjt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f6b24d8752 endpointID=711 k8sNamespace=openstack k8sPodName=keystone-credential-setup-n2qjt subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6208c958-bc80-46d2-8afe-c848097b3219 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=6208c958-bc80-46d2-8afe-c848097b3219 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f6b24d8752 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=711 identity=13936 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-credential-setup-n2qjt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 d417f22f-e3ac-468f-aac3-11188d8bd2c4 default }" containerID=1aec37d34e2eb74bde618ecbfd4e770df100e53fc0438b71096a3ad62fdf6b4d datapathConfiguration="&{false false false false false }" interface=lxc27e554cf6107 k8sPodName=openstack/keystone-db-init-2fnsh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1aec37d34e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1856 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-db-init-2fnsh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1aec37d34e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1856 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=58b52bb8-cd82-4cb2-807c-0f89ddd8d730,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=58b52bb8-cd82-4cb2-807c-0f89ddd8d730,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-db-init-2fnsh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=58b52bb8-cd82-4cb2-807c-0f89ddd8d730;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=58b52bb8-cd82-4cb2-807c-0f89ddd8d730;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1aec37d34e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1856 identity=56992 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=58b52bb8-cd82-4cb2-807c-0f89ddd8d730,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=58b52bb8-cd82-4cb2-807c-0f89ddd8d730,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-db-init-2fnsh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1aec37d34e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1856 identity=56992 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-db-init-2fnsh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1aec37d34e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1856 identity=56992 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-db-init-2fnsh subsys=endpoint level=info msg="Successful endpoint creation" containerID=1aec37d34e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1856 identity=56992 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-db-init-2fnsh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1aec37d34e endpointID=1856 k8sNamespace=openstack k8sPodName=keystone-db-init-2fnsh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=58b52bb8-cd82-4cb2-807c-0f89ddd8d730 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=58b52bb8-cd82-4cb2-807c-0f89ddd8d730 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1aec37d34e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1856 identity=56992 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-db-init-2fnsh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 4b3f285c-a1a0-46b3-b84e-235e0fe9b9ba default }" containerID=f4e404ba7ad99c1a183cfcce7119c2522f88ffb515c45ecff39e48c66bc11c9c datapathConfiguration="&{false false false false false }" interface=lxc10d9e972c64c k8sPodName=openstack/keystone-fernet-setup-6fmcw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f4e404ba7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=447 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-fernet-setup-6fmcw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f4e404ba7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=447 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8108f32f-14e1-4d21-8940-d80e7c998b06,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=8108f32f-14e1-4d21-8940-d80e7c998b06,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-fernet-setup-6fmcw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8108f32f-14e1-4d21-8940-d80e7c998b06;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=8108f32f-14e1-4d21-8940-d80e7c998b06;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f4e404ba7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=447 identity=35214 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8108f32f-14e1-4d21-8940-d80e7c998b06,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=8108f32f-14e1-4d21-8940-d80e7c998b06,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-fernet-setup-6fmcw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f4e404ba7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=447 identity=35214 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-fernet-setup-6fmcw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f4e404ba7a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=447 identity=35214 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-fernet-setup-6fmcw subsys=endpoint level=info msg="Successful endpoint creation" containerID=f4e404ba7a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=447 identity=35214 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-fernet-setup-6fmcw subsys=daemon level=info msg="Delete endpoint request" containerID=f4e404ba7a endpointID=447 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-6fmcw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8108f32f-14e1-4d21-8940-d80e7c998b06 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=8108f32f-14e1-4d21-8940-d80e7c998b06 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f4e404ba7a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=447 identity=35214 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-fernet-setup-6fmcw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 8a184617-08f0-4bcd-9c3f-eabb612de178 default }" containerID=a28c3abc663fcfc836316d08f56c62928a71814bf5010cfb300ac55277fd480d datapathConfiguration="&{false false false false false }" interface=lxcd976ac5723f4 k8sPodName=openstack/keystone-db-sync-nlg5f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a28c3abc66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=862 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-db-sync-nlg5f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a28c3abc66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=862 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6277c048-3de3-44c6-8860-db047ee5e032,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=6277c048-3de3-44c6-8860-db047ee5e032,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-db-sync-nlg5f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6277c048-3de3-44c6-8860-db047ee5e032;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=6277c048-3de3-44c6-8860-db047ee5e032;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=a28c3abc66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=862 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-db-sync-nlg5f line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a28c3abc66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=862 identity=34321 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6277c048-3de3-44c6-8860-db047ee5e032,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=6277c048-3de3-44c6-8860-db047ee5e032,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-db-sync-nlg5f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a28c3abc66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=862 identity=34321 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-db-sync-nlg5f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a28c3abc66 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=862 identity=34321 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-db-sync-nlg5f subsys=endpoint level=info msg="Successful endpoint creation" containerID=a28c3abc66 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=862 identity=34321 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-db-sync-nlg5f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a28c3abc66 endpointID=862 k8sNamespace=openstack k8sPodName=keystone-db-sync-nlg5f subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6277c048-3de3-44c6-8860-db047ee5e032 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=6277c048-3de3-44c6-8860-db047ee5e032 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a28c3abc66 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=862 identity=34321 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-db-sync-nlg5f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 0ef15a36-fb53-4442-b1b8-22676d449c09 default }" containerID=dbfbb5693098ca7920330c11f2ee73b654c704c16778dbb2a0ae230f6b6814fc datapathConfiguration="&{false false false false false }" interface=lxcd0a3e4951370 k8sPodName=openstack/keystone-rabbit-init-m4fp9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dbfbb56930 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=245 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-rabbit-init-m4fp9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dbfbb56930 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=245 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ed66c5de-ece9-4b0a-8773-6da55889b43a,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ed66c5de-ece9-4b0a-8773-6da55889b43a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-rabbit-init-m4fp9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ed66c5de-ece9-4b0a-8773-6da55889b43a;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ed66c5de-ece9-4b0a-8773-6da55889b43a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=dbfbb56930 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=245 identity=7524 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ed66c5de-ece9-4b0a-8773-6da55889b43a,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ed66c5de-ece9-4b0a-8773-6da55889b43a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-rabbit-init-m4fp9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dbfbb56930 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=245 identity=7524 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-rabbit-init-m4fp9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dbfbb56930 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=245 identity=7524 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-rabbit-init-m4fp9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dbfbb56930 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=245 identity=7524 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-rabbit-init-m4fp9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dbfbb56930 endpointID=245 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-m4fp9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ed66c5de-ece9-4b0a-8773-6da55889b43a k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ed66c5de-ece9-4b0a-8773-6da55889b43a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=dbfbb56930 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=245 identity=7524 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-rabbit-init-m4fp9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.167 be344085-613d-4990-a1eb-667c18fab5fb default }" containerID=157a81c4f4b749a841822a0266d5f5f613cbb8f4efb15dcf2d627bed867bcd83 datapathConfiguration="&{false false false false false }" interface=lxc88299e0b253c k8sPodName=openstack/keystone-domain-manage-4v8wr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=157a81c4f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1223 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-domain-manage-4v8wr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=157a81c4f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1223 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a5e7a9b4-3b8c-41cf-819f-d8fa89482508,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=a5e7a9b4-3b8c-41cf-819f-d8fa89482508,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-domain-manage-4v8wr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a5e7a9b4-3b8c-41cf-819f-d8fa89482508;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=a5e7a9b4-3b8c-41cf-819f-d8fa89482508;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=157a81c4f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1223 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-domain-manage-4v8wr line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=157a81c4f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1223 identity=5434 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a5e7a9b4-3b8c-41cf-819f-d8fa89482508,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=a5e7a9b4-3b8c-41cf-819f-d8fa89482508,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-domain-manage-4v8wr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=157a81c4f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1223 identity=5434 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-domain-manage-4v8wr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=157a81c4f4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1223 identity=5434 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-domain-manage-4v8wr subsys=endpoint level=info msg="Successful endpoint creation" containerID=157a81c4f4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1223 identity=5434 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-domain-manage-4v8wr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=157a81c4f4 endpointID=1223 k8sNamespace=openstack k8sPodName=keystone-domain-manage-4v8wr subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a5e7a9b4-3b8c-41cf-819f-d8fa89482508 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=a5e7a9b4-3b8c-41cf-819f-d8fa89482508 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=157a81c4f4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1223 identity=5434 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-domain-manage-4v8wr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 8a131acb-b425-4f69-9e40-7c172d049e18 default }" containerID=6e764dd02108282de61b22cc2e4965acfe4106c4beedbf9f939b58cfd88cbe13 datapathConfiguration="&{false false false false false }" interface=lxc847217345f5b k8sPodName=openstack/keystone-bootstrap-lqfrs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e764dd021 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=838 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-bootstrap-lqfrs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e764dd021 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=838 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=430d9d43-c1d5-4ad3-9e7f-c0e622ed591b,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=430d9d43-c1d5-4ad3-9e7f-c0e622ed591b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-bootstrap-lqfrs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=430d9d43-c1d5-4ad3-9e7f-c0e622ed591b;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=430d9d43-c1d5-4ad3-9e7f-c0e622ed591b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e764dd021 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=838 identity=6467 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=430d9d43-c1d5-4ad3-9e7f-c0e622ed591b,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=430d9d43-c1d5-4ad3-9e7f-c0e622ed591b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-bootstrap-lqfrs oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6e764dd021 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=838 identity=6467 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-bootstrap-lqfrs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e764dd021 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=838 identity=6467 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-bootstrap-lqfrs subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e764dd021 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=838 identity=6467 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-bootstrap-lqfrs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6e764dd021 endpointID=838 k8sNamespace=openstack k8sPodName=keystone-bootstrap-lqfrs subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=430d9d43-c1d5-4ad3-9e7f-c0e622ed591b k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=430d9d43-c1d5-4ad3-9e7f-c0e622ed591b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6e764dd021 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=838 identity=6467 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-bootstrap-lqfrs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 2a3b7849-8271-4d18-8309-1ca8329a515b default }" containerID=d1ca908b498d329112b3466446109d5eba471926bfcee19ab189c7308774a423 datapathConfiguration="&{false false false false false }" interface=lxc97bc0b6d9ff2 k8sPodName=local-path-storage/helper-pod-create-pvc-4a7f109d-adbe-46d2-a001-fe9e53c2b875 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d1ca908b49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2472 ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a7f109d-adbe-46d2-a001-fe9e53c2b875 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d1ca908b49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2472 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a7f109d-adbe-46d2-a001-fe9e53c2b875 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d1ca908b49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2472 identity=16789 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a7f109d-adbe-46d2-a001-fe9e53c2b875 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d1ca908b49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2472 identity=16789 ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a7f109d-adbe-46d2-a001-fe9e53c2b875 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d1ca908b49 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2472 identity=16789 ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a7f109d-adbe-46d2-a001-fe9e53c2b875 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d1ca908b49 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2472 identity=16789 ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a7f109d-adbe-46d2-a001-fe9e53c2b875 subsys=daemon level=info msg="Delete endpoint request" containerID=d1ca908b49 endpointID=2472 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4a7f109d-adbe-46d2-a001-fe9e53c2b875 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d1ca908b49 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2472 identity=16789 ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a7f109d-adbe-46d2-a001-fe9e53c2b875 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 61842f64-7590-48e4-be5d-ea9eb418fe19 default }" containerID=610dcf44b79acd04c75b931358606277aca62e562b16450c0f9f66d6fc880261 datapathConfiguration="&{false false false false false }" interface=lxcace1c7e62d60 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=610dcf44b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1123 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=610dcf44b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1123 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=610dcf44b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1123 identity=46738 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=610dcf44b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1123 identity=46738 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=610dcf44b7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1123 identity=46738 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=610dcf44b7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1123 identity=46738 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.54 9f68060e-1f3c-404e-91da-0918de33abf6 default }" containerID=8c3434ee3e8946a63567fdd86390c6f4b6e99d964ef7e61bef90d91efb12dff4 datapathConfiguration="&{false false false false false }" interface=lxc74fbabc09481 k8sPodName=openstack/barbican-api-87f56fb4f-7l4gc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c3434ee3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2309 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/barbican-api-87f56fb4f-7l4gc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c3434ee3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2309 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/barbican-api-87f56fb4f-7l4gc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8c3434ee3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2309 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.54 ipv6= k8sPodName=openstack/barbican-api-87f56fb4f-7l4gc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8c3434ee3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2309 identity=29538 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/barbican-api-87f56fb4f-7l4gc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8c3434ee3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2309 identity=29538 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/barbican-api-87f56fb4f-7l4gc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 9f3adbfc-d4e8-45db-94ba-71b074d9d352 default }" containerID=fbf47e99978aa43d7f81990f4646e062574a8b326ae14f08271d55272e1bc69b datapathConfiguration="&{false false false false false }" interface=lxc3c32901ed762 k8sPodName=openstack/barbican-db-init-j4s98 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fbf47e9997 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-db-init-j4s98 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fbf47e9997 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1207cf75-b3c4-4c00-aee8-5b58ae1ebf95,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=1207cf75-b3c4-4c00-aee8-5b58ae1ebf95,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-db-init-j4s98 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1207cf75-b3c4-4c00-aee8-5b58ae1ebf95;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=1207cf75-b3c4-4c00-aee8-5b58ae1ebf95;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fbf47e9997 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identity=6455 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1207cf75-b3c4-4c00-aee8-5b58ae1ebf95,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=1207cf75-b3c4-4c00-aee8-5b58ae1ebf95,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-db-init-j4s98 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fbf47e9997 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identity=6455 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-db-init-j4s98 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8c3434ee3e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2309 identity=29538 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/barbican-api-87f56fb4f-7l4gc subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c3434ee3e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2309 identity=29538 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/barbican-api-87f56fb4f-7l4gc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fbf47e9997 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=50 identity=6455 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-db-init-j4s98 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fbf47e9997 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=50 identity=6455 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-db-init-j4s98 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fbf47e9997 endpointID=50 k8sNamespace=openstack k8sPodName=barbican-db-init-j4s98 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1207cf75-b3c4-4c00-aee8-5b58ae1ebf95 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=1207cf75-b3c4-4c00-aee8-5b58ae1ebf95 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=fbf47e9997 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=50 identity=6455 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-db-init-j4s98 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 46c1fbd5-ad6c-4f8e-98e6-6a0e19e7c4f4 default }" containerID=a704b419ff636d62031c2ef6f3fa546eb64e234cb7969d62e006e95d9050b8de datapathConfiguration="&{false false false false false }" interface=lxce756790e21be k8sPodName=openstack/barbican-db-sync-dw8cj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a704b419ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2156 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-db-sync-dw8cj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a704b419ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2156 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4cba524b-7055-4b04-bfb3-458c5808598e,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=4cba524b-7055-4b04-bfb3-458c5808598e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-db-sync-dw8cj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=4cba524b-7055-4b04-bfb3-458c5808598e;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=4cba524b-7055-4b04-bfb3-458c5808598e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a704b419ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2156 identity=17673 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4cba524b-7055-4b04-bfb3-458c5808598e,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=4cba524b-7055-4b04-bfb3-458c5808598e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-db-sync-dw8cj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a704b419ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2156 identity=17673 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-db-sync-dw8cj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a704b419ff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2156 identity=17673 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-db-sync-dw8cj subsys=endpoint level=info msg="Successful endpoint creation" containerID=a704b419ff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2156 identity=17673 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-db-sync-dw8cj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03628241373246581 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=a704b419ff endpointID=2156 k8sNamespace=openstack k8sPodName=barbican-db-sync-dw8cj subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=4cba524b-7055-4b04-bfb3-458c5808598e k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=4cba524b-7055-4b04-bfb3-458c5808598e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=a704b419ff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2156 identity=17673 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-db-sync-dw8cj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 0c5a3aaf-4709-49cf-ac7f-8f6c9df28b67 default }" containerID=f5cc01894be1c82d509686c1485905106332e83cca7b9f61338316a71efa52a5 datapathConfiguration="&{false false false false false }" interface=lxca1691d9f8197 k8sPodName=openstack/barbican-rabbit-init-vd8w7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5cc01894b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-rabbit-init-vd8w7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5cc01894b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b571b1e1-9df0-4be3-9b82-182140f18f76,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b571b1e1-9df0-4be3-9b82-182140f18f76,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-rabbit-init-vd8w7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f5cc01894b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-rabbit-init-vd8w7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b571b1e1-9df0-4be3-9b82-182140f18f76;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=b571b1e1-9df0-4be3-9b82-182140f18f76;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f5cc01894b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identity=54004 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b571b1e1-9df0-4be3-9b82-182140f18f76,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b571b1e1-9df0-4be3-9b82-182140f18f76,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-rabbit-init-vd8w7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f5cc01894b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identity=54004 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-rabbit-init-vd8w7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f5cc01894b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=249 identity=54004 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-rabbit-init-vd8w7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5cc01894b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=249 identity=54004 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-rabbit-init-vd8w7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f5cc01894b endpointID=249 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-vd8w7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b571b1e1-9df0-4be3-9b82-182140f18f76 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=b571b1e1-9df0-4be3-9b82-182140f18f76 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f5cc01894b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=249 identity=54004 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-rabbit-init-vd8w7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 81b99895-3ed9-41f9-a795-df0fca23e2df default }" containerID=89d521efef86bdf1a20744ff8ab8af9495397a5487465f80fad8ea223fefcffb datapathConfiguration="&{false false false false false }" interface=lxc0b0d0fd87351 k8sPodName=openstack/barbican-ks-service-hp7z7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=89d521efef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1645 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-service-hp7z7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=89d521efef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1645 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5742b4e1-e34f-4976-b0fd-f0762277d5f2,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=5742b4e1-e34f-4976-b0fd-f0762277d5f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-service-hp7z7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=89d521efef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1645 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-service-hp7z7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5742b4e1-e34f-4976-b0fd-f0762277d5f2;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=5742b4e1-e34f-4976-b0fd-f0762277d5f2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=89d521efef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1645 identity=8986 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5742b4e1-e34f-4976-b0fd-f0762277d5f2,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=5742b4e1-e34f-4976-b0fd-f0762277d5f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-service-hp7z7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=89d521efef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1645 identity=8986 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-service-hp7z7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=89d521efef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1645 identity=8986 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-service-hp7z7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=89d521efef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1645 identity=8986 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-service-hp7z7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=89d521efef endpointID=1645 k8sNamespace=openstack k8sPodName=barbican-ks-service-hp7z7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5742b4e1-e34f-4976-b0fd-f0762277d5f2 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=5742b4e1-e34f-4976-b0fd-f0762277d5f2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=89d521efef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1645 identity=8986 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-service-hp7z7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 53861b26-167a-422f-9497-bb9fadd11cee default }" containerID=e0099d280c1e4875a0d488c759d5021251f821f35b7a3ec76b2252c358f2f907 datapathConfiguration="&{false false false false false }" interface=lxceb032b4e5cc6 k8sPodName=openstack/barbican-ks-endpoints-mv4zz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e0099d280c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1113 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/barbican-ks-endpoints-mv4zz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e0099d280c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1113 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f793beec-cd1b-4320-ae61-ff62bca50053,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f793beec-cd1b-4320-ae61-ff62bca50053,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/barbican-ks-endpoints-mv4zz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=f793beec-cd1b-4320-ae61-ff62bca50053;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=f793beec-cd1b-4320-ae61-ff62bca50053;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=e0099d280c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1113 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.155 ipv6= k8sPodName=openstack/barbican-ks-endpoints-mv4zz line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e0099d280c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1113 identity=48644 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f793beec-cd1b-4320-ae61-ff62bca50053,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f793beec-cd1b-4320-ae61-ff62bca50053,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/barbican-ks-endpoints-mv4zz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e0099d280c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1113 identity=48644 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/barbican-ks-endpoints-mv4zz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e0099d280c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1113 identity=48644 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/barbican-ks-endpoints-mv4zz subsys=endpoint level=info msg="Successful endpoint creation" containerID=e0099d280c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1113 identity=48644 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/barbican-ks-endpoints-mv4zz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e0099d280c endpointID=1113 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-mv4zz subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=f793beec-cd1b-4320-ae61-ff62bca50053 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=f793beec-cd1b-4320-ae61-ff62bca50053 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e0099d280c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1113 identity=48644 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/barbican-ks-endpoints-mv4zz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.84 b1a10640-c1ee-4a8a-8030-182ceae07b68 default }" containerID=682022e9323a7bf825e5248b5e0839c5e6248690c61b59c68ed7051b074b9081 datapathConfiguration="&{false false false false false }" interface=lxc8df58d835b68 k8sPodName=openstack/barbican-ks-user-w8c74 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=682022e932 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2960 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/barbican-ks-user-w8c74 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=682022e932 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2960 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=04e8213e-5344-46d8-85bf-28f59dc0692c,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=04e8213e-5344-46d8-85bf-28f59dc0692c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/barbican-ks-user-w8c74 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=04e8213e-5344-46d8-85bf-28f59dc0692c;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=04e8213e-5344-46d8-85bf-28f59dc0692c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=682022e932 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2960 identity=43728 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=04e8213e-5344-46d8-85bf-28f59dc0692c,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=04e8213e-5344-46d8-85bf-28f59dc0692c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/barbican-ks-user-w8c74 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=682022e932 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2960 identity=43728 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/barbican-ks-user-w8c74 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=682022e932 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2960 identity=43728 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/barbican-ks-user-w8c74 subsys=endpoint level=info msg="Successful endpoint creation" containerID=682022e932 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2960 identity=43728 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/barbican-ks-user-w8c74 subsys=daemon level=info msg="Delete endpoint request" containerID=682022e932 endpointID=2960 k8sNamespace=openstack k8sPodName=barbican-ks-user-w8c74 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=04e8213e-5344-46d8-85bf-28f59dc0692c k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=04e8213e-5344-46d8-85bf-28f59dc0692c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=682022e932 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2960 identity=43728 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/barbican-ks-user-w8c74 subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.216 24a4450d-1753-41b5-b4e4-e66f863e6582 default }" containerID=82ae27f35ce935c9b4b4a990699bbc51ce2d1e31c894c13b7eefa3f66b601923 datapathConfiguration="&{false false false false false }" interface=lxc40a572f3a7e3 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-tbbbj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=82ae27f35c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 ipv4=10.0.0.216 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-tbbbj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=82ae27f35c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.216 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-tbbbj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=82ae27f35c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=8262 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.216 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-tbbbj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=82ae27f35c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=8262 ipv4=10.0.0.216 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-tbbbj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=82ae27f35c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=52 identity=8262 ipv4=10.0.0.216 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-tbbbj subsys=endpoint level=info msg="Successful endpoint creation" containerID=82ae27f35c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=52 identity=8262 ipv4=10.0.0.216 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-tbbbj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.119 6b776670-39ae-4459-87cf-ae4f12bf2c1d default }" containerID=0c0c161363ba89404bf6f397e9972943f9b53b77c986ab614d0bb0379db3c9d4 datapathConfiguration="&{false false false false false }" interface=lxc8781a6c1dbdb k8sPodName=openstack/rook-ceph-detect-version-zhqgp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0c0c161363 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=181 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zhqgp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0c0c161363 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=181 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=113c4818-5ac1-463e-bcee-0291cbda590b,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=113c4818-5ac1-463e-bcee-0291cbda590b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zhqgp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=113c4818-5ac1-463e-bcee-0291cbda590b;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=113c4818-5ac1-463e-bcee-0291cbda590b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=0c0c161363 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=181 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zhqgp line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0c0c161363 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=181 identity=19027 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=113c4818-5ac1-463e-bcee-0291cbda590b,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=113c4818-5ac1-463e-bcee-0291cbda590b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zhqgp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0c0c161363 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=181 identity=19027 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zhqgp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0c0c161363 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=181 identity=19027 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zhqgp subsys=endpoint level=info msg="Successful endpoint creation" containerID=0c0c161363 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=181 identity=19027 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zhqgp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0c0c161363 endpointID=181 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-zhqgp subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=113c4818-5ac1-463e-bcee-0291cbda590b k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=113c4818-5ac1-463e-bcee-0291cbda590b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=0c0c161363 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=181 identity=19027 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zhqgp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 7475bbec-a31b-47aa-96d0-35883e859e9b default }" containerID=af8e7d6bf9753eae5d60e9465054a0c6d71181fcf3150f31f919e3a819a877ab datapathConfiguration="&{false false false false false }" interface=lxc63140740c16f k8sPodName=openstack/ceph-object-controller-detect-version-th8p5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af8e7d6bf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-th8p5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af8e7d6bf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=ebe32e5f-587f-45b7-93bc-31710d72b0c7,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=ebe32e5f-587f-45b7-93bc-31710d72b0c7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-th8p5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=af8e7d6bf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.172 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-th8p5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=ebe32e5f-587f-45b7-93bc-31710d72b0c7;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=ebe32e5f-587f-45b7-93bc-31710d72b0c7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af8e7d6bf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 identity=19933 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=ebe32e5f-587f-45b7-93bc-31710d72b0c7,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=ebe32e5f-587f-45b7-93bc-31710d72b0c7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-th8p5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af8e7d6bf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 identity=19933 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-th8p5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=af8e7d6bf9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=356 identity=19933 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-th8p5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=af8e7d6bf9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=356 identity=19933 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-th8p5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=af8e7d6bf9 endpointID=356 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-th8p5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=ebe32e5f-587f-45b7-93bc-31710d72b0c7 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=ebe32e5f-587f-45b7-93bc-31710d72b0c7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=af8e7d6bf9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=356 identity=19933 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-th8p5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 6cf79c45-b867-42f9-8d46-7bc77592c71c default }" containerID=4461430edba3db96816097c46f3641f9d2612ccffd5a5a52681428e624c6f363 datapathConfiguration="&{false false false false false }" interface=lxc8b9264d16109 k8sPodName=local-path-storage/helper-pod-create-pvc-84f15d66-a4b7-4a5f-a283-d436c00126b2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4461430edb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1735 ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84f15d66-a4b7-4a5f-a283-d436c00126b2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4461430edb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1735 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84f15d66-a4b7-4a5f-a283-d436c00126b2 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4461430edb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1735 identity=16789 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84f15d66-a4b7-4a5f-a283-d436c00126b2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4461430edb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1735 identity=16789 ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84f15d66-a4b7-4a5f-a283-d436c00126b2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4461430edb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1735 identity=16789 ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84f15d66-a4b7-4a5f-a283-d436c00126b2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4461430edb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1735 identity=16789 ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84f15d66-a4b7-4a5f-a283-d436c00126b2 subsys=daemon level=info msg="Delete endpoint request" containerID=4461430edb endpointID=1735 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-84f15d66-a4b7-4a5f-a283-d436c00126b2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4461430edb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1735 identity=16789 ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84f15d66-a4b7-4a5f-a283-d436c00126b2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 cb806d12-5219-4f68-9cf0-735c526e933b default }" containerID=7d654a50fb352f703ae25c31b675f5f78c078bfbad184c940f23ee992afb8114 datapathConfiguration="&{false false false false false }" interface=lxca9049a174800 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7d654a50fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1702 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7d654a50fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1702 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=7d654a50fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1702 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7d654a50fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1702 identity=3398 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7d654a50fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1702 identity=3398 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7d654a50fb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1702 identity=3398 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7d654a50fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1702 identity=3398 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.40 80afbeaf-1bc1-45d7-9761-3d1478bde9cc default }" containerID=01e9327ab5d76cd4efa414c106c8676b126f0e828becaaceb92ce17ceb9b85aa datapathConfiguration="&{false false false false false }" interface=lxcdd6ac689ad36 k8sPodName=openstack/glance-db-init-5srg6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01e9327ab5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1529 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-db-init-5srg6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01e9327ab5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1529 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d6c465c8-a5f6-411a-a37d-bf911af2bda1,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=d6c465c8-a5f6-411a-a37d-bf911af2bda1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-db-init-5srg6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d6c465c8-a5f6-411a-a37d-bf911af2bda1;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=d6c465c8-a5f6-411a-a37d-bf911af2bda1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=01e9327ab5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1529 identity=655 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d6c465c8-a5f6-411a-a37d-bf911af2bda1,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=d6c465c8-a5f6-411a-a37d-bf911af2bda1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-db-init-5srg6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=01e9327ab5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1529 identity=655 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-db-init-5srg6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=01e9327ab5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1529 identity=655 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-db-init-5srg6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=01e9327ab5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1529 identity=655 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-db-init-5srg6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=01e9327ab5 endpointID=1529 k8sNamespace=openstack k8sPodName=glance-db-init-5srg6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d6c465c8-a5f6-411a-a37d-bf911af2bda1 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=d6c465c8-a5f6-411a-a37d-bf911af2bda1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=01e9327ab5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1529 identity=655 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-db-init-5srg6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 1a35c67d-d883-4c9f-95e5-10dd5a066786 default }" containerID=9421cda2d44323478d972d9e1feca1120c72f40e35fa94c9b0c2e35c7678190d datapathConfiguration="&{false false false false false }" interface=lxc947c98d4d4d2 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-6nrf4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9421cda2d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2989 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-6nrf4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9421cda2d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2989 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-6nrf4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=9421cda2d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2989 identity=8544 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-6nrf4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9421cda2d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2989 identity=8544 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-6nrf4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 d54335bf-2a85-4e47-b003-306d6f6e3c3c default }" containerID=e70e13e9bf72a947c4a045c6fb7da7e85fc62b53385b4aa68e4743fa65b99025 datapathConfiguration="&{false false false false false }" interface=lxcd28eec8ed5fc k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rjfwn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e70e13e9bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2382 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rjfwn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e70e13e9bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2382 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rjfwn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e70e13e9bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2382 identity=19711 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rjfwn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e70e13e9bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2382 identity=19711 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rjfwn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9421cda2d4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2989 identity=8544 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-6nrf4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9421cda2d4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2989 identity=8544 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-6nrf4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e70e13e9bf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2382 identity=19711 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rjfwn subsys=endpoint level=info msg="Successful endpoint creation" containerID=e70e13e9bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2382 identity=19711 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rjfwn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.103 93cee269-2165-453c-b837-57ea86f1758e default }" containerID=342289ad7aed05de923250006abfd5fced0cba9ed81254a7e33ad505133ede2e datapathConfiguration="&{false false false false false }" interface=lxc9ae03808def2 k8sPodName=openstack/glance-db-sync-k6zz7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=342289ad7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-db-sync-k6zz7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=342289ad7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=87fbd068-2c15-4e3b-b10c-5e42667d4f3d,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=87fbd068-2c15-4e3b-b10c-5e42667d4f3d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-db-sync-k6zz7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=87fbd068-2c15-4e3b-b10c-5e42667d4f3d;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=87fbd068-2c15-4e3b-b10c-5e42667d4f3d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=342289ad7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identity=52117 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=87fbd068-2c15-4e3b-b10c-5e42667d4f3d,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=87fbd068-2c15-4e3b-b10c-5e42667d4f3d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-db-sync-k6zz7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=342289ad7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identity=52117 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-db-sync-k6zz7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=342289ad7a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1094 identity=52117 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-db-sync-k6zz7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=342289ad7a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1094 identity=52117 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-db-sync-k6zz7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=342289ad7a endpointID=1094 k8sNamespace=openstack k8sPodName=glance-db-sync-k6zz7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=87fbd068-2c15-4e3b-b10c-5e42667d4f3d k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=87fbd068-2c15-4e3b-b10c-5e42667d4f3d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=342289ad7a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1094 identity=52117 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-db-sync-k6zz7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 6c64b232-aff4-49fb-8aa5-1b9a4660759f default }" containerID=8eec8894bb26d3735ecb62ddacfe050b5777d4e46a72a5bb4c10a0c28c89e330 datapathConfiguration="&{false false false false false }" interface=lxc33c0483d8514 k8sPodName=openstack/glance-rabbit-init-jxkw5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8eec8894bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1250 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-rabbit-init-jxkw5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8eec8894bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1250 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e6c6fa55-3a3d-48ee-9cdb-14868de5806b,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e6c6fa55-3a3d-48ee-9cdb-14868de5806b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-rabbit-init-jxkw5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8eec8894bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1250 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-rabbit-init-jxkw5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e6c6fa55-3a3d-48ee-9cdb-14868de5806b;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=e6c6fa55-3a3d-48ee-9cdb-14868de5806b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8eec8894bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1250 identity=7039 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e6c6fa55-3a3d-48ee-9cdb-14868de5806b,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e6c6fa55-3a3d-48ee-9cdb-14868de5806b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-rabbit-init-jxkw5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8eec8894bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1250 identity=7039 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-rabbit-init-jxkw5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8eec8894bb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1250 identity=7039 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-rabbit-init-jxkw5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8eec8894bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1250 identity=7039 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-rabbit-init-jxkw5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8eec8894bb endpointID=1250 k8sNamespace=openstack k8sPodName=glance-rabbit-init-jxkw5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e6c6fa55-3a3d-48ee-9cdb-14868de5806b k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=e6c6fa55-3a3d-48ee-9cdb-14868de5806b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8eec8894bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1250 identity=7039 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-rabbit-init-jxkw5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 8d4e94c5-c218-45ea-907e-2d56b7f41aa9 default }" containerID=ccdc37d169be7a4d4d6a332cafd21754b80d8433326731fcd59bce24f6c3ff14 datapathConfiguration="&{false false false false false }" interface=lxcd17d8772f23a k8sPodName=openstack/glance-ks-service-p8rd4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ccdc37d169 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=659 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/glance-ks-service-p8rd4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ccdc37d169 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=659 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=104da27c-3f0d-4c89-8c7b-0dba3bb20b58,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=104da27c-3f0d-4c89-8c7b-0dba3bb20b58,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/glance-ks-service-p8rd4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=104da27c-3f0d-4c89-8c7b-0dba3bb20b58;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=104da27c-3f0d-4c89-8c7b-0dba3bb20b58;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ccdc37d169 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=659 identity=46570 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=104da27c-3f0d-4c89-8c7b-0dba3bb20b58,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=104da27c-3f0d-4c89-8c7b-0dba3bb20b58,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/glance-ks-service-p8rd4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ccdc37d169 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=659 identity=46570 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/glance-ks-service-p8rd4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ccdc37d169 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=659 identity=46570 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/glance-ks-service-p8rd4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ccdc37d169 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=659 identity=46570 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/glance-ks-service-p8rd4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ccdc37d169 endpointID=659 k8sNamespace=openstack k8sPodName=glance-ks-service-p8rd4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=104da27c-3f0d-4c89-8c7b-0dba3bb20b58 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=104da27c-3f0d-4c89-8c7b-0dba3bb20b58 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ccdc37d169 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=659 identity=46570 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/glance-ks-service-p8rd4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 e3e0f6c1-a2da-47ae-8547-caa88fe48a56 default }" containerID=fbc79b364ddbbc694eae749c3a3cf0b7d1f424f92147641b566bdac553da455b datapathConfiguration="&{false false false false false }" interface=lxc703083975d37 k8sPodName=openstack/glance-ks-endpoints-x2klc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fbc79b364d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2837 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-ks-endpoints-x2klc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fbc79b364d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2837 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2dc6b215-c1cd-455b-b327-1359c63c59d0,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=2dc6b215-c1cd-455b-b327-1359c63c59d0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-ks-endpoints-x2klc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=2dc6b215-c1cd-455b-b327-1359c63c59d0;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=2dc6b215-c1cd-455b-b327-1359c63c59d0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fbc79b364d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2837 identity=32257 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2dc6b215-c1cd-455b-b327-1359c63c59d0,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=2dc6b215-c1cd-455b-b327-1359c63c59d0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-ks-endpoints-x2klc oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fbc79b364d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2837 identity=32257 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-ks-endpoints-x2klc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fbc79b364d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2837 identity=32257 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-ks-endpoints-x2klc subsys=endpoint level=info msg="Successful endpoint creation" containerID=fbc79b364d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2837 identity=32257 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-ks-endpoints-x2klc subsys=daemon level=info msg="Delete endpoint request" containerID=fbc79b364d endpointID=2837 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-x2klc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=2dc6b215-c1cd-455b-b327-1359c63c59d0 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=2dc6b215-c1cd-455b-b327-1359c63c59d0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=fbc79b364d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2837 identity=32257 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-ks-endpoints-x2klc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.55 6167d455-f33e-41c6-8c5c-d36810f0386b default }" containerID=8fe09f780e11f99ea389ec006a8fd70dbc434a485a8069bd57ef34075748b910 datapathConfiguration="&{false false false false false }" interface=lxc716efd9df10b k8sPodName=openstack/glance-ks-user-mdbch labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8fe09f780e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-ks-user-mdbch subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8fe09f780e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fcaaf930-0be4-4540-bfdb-77ba72a7adb5,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=fcaaf930-0be4-4540-bfdb-77ba72a7adb5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-ks-user-mdbch subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=fcaaf930-0be4-4540-bfdb-77ba72a7adb5;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=fcaaf930-0be4-4540-bfdb-77ba72a7adb5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8fe09f780e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identity=12753 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fcaaf930-0be4-4540-bfdb-77ba72a7adb5,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=fcaaf930-0be4-4540-bfdb-77ba72a7adb5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-ks-user-mdbch oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8fe09f780e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identity=12753 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-ks-user-mdbch subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8fe09f780e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2047 identity=12753 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-ks-user-mdbch subsys=endpoint level=info msg="Successful endpoint creation" containerID=8fe09f780e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2047 identity=12753 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-ks-user-mdbch subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8fe09f780e endpointID=2047 k8sNamespace=openstack k8sPodName=glance-ks-user-mdbch subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=fcaaf930-0be4-4540-bfdb-77ba72a7adb5 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=fcaaf930-0be4-4540-bfdb-77ba72a7adb5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8fe09f780e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2047 identity=12753 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-ks-user-mdbch subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 446cf5d7-62c3-4a4e-9b3c-85355a172d29 default }" containerID=2d84ecc8536b42c5f922cfab8be690ba720a03c6215bbe73dbb0d40f7bbf1c43 datapathConfiguration="&{false false false false false }" interface=lxc4564e0308784 k8sPodName=openstack/glance-metadefs-load-phmsr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d84ecc853 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-metadefs-load-phmsr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d84ecc853 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d6e60598-5ff6-43fc-91bd-60ffd40083d9,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=d6e60598-5ff6-43fc-91bd-60ffd40083d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-metadefs-load-phmsr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d6e60598-5ff6-43fc-91bd-60ffd40083d9;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=d6e60598-5ff6-43fc-91bd-60ffd40083d9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=2d84ecc853 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 identity=29428 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d6e60598-5ff6-43fc-91bd-60ffd40083d9,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=d6e60598-5ff6-43fc-91bd-60ffd40083d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-metadefs-load-phmsr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2d84ecc853 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 identity=29428 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-metadefs-load-phmsr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2d84ecc853 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1868 identity=29428 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-metadefs-load-phmsr subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d84ecc853 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1868 identity=29428 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-metadefs-load-phmsr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2d84ecc853 endpointID=1868 k8sNamespace=openstack k8sPodName=glance-metadefs-load-phmsr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d6e60598-5ff6-43fc-91bd-60ffd40083d9 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=d6e60598-5ff6-43fc-91bd-60ffd40083d9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2d84ecc853 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1868 identity=29428 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-metadefs-load-phmsr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 f4c412cd-a2e7-4a60-8962-3368680c5f15 default }" containerID=b2d16d145323bb33b905cc17b17fa5809c930fe57f846756840643788f9609c2 datapathConfiguration="&{false false false false false }" interface=lxc32d2bff94d87 k8sPodName=openstack/glance-storage-init-6ccjq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b2d16d1453 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3033 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-storage-init-6ccjq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b2d16d1453 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3033 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a3f42a85-2a7d-437d-8c73-bfac9831b8e3,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=a3f42a85-2a7d-437d-8c73-bfac9831b8e3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-storage-init-6ccjq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b2d16d1453 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3033 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-storage-init-6ccjq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a3f42a85-2a7d-437d-8c73-bfac9831b8e3;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=a3f42a85-2a7d-437d-8c73-bfac9831b8e3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b2d16d1453 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3033 identity=62696 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a3f42a85-2a7d-437d-8c73-bfac9831b8e3,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=a3f42a85-2a7d-437d-8c73-bfac9831b8e3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-storage-init-6ccjq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b2d16d1453 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3033 identity=62696 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-storage-init-6ccjq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b2d16d1453 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3033 identity=62696 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-storage-init-6ccjq subsys=endpoint level=info msg="Successful endpoint creation" containerID=b2d16d1453 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3033 identity=62696 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-storage-init-6ccjq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b2d16d1453 endpointID=3033 k8sNamespace=openstack k8sPodName=glance-storage-init-6ccjq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a3f42a85-2a7d-437d-8c73-bfac9831b8e3 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=a3f42a85-2a7d-437d-8c73-bfac9831b8e3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b2d16d1453 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3033 identity=62696 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-storage-init-6ccjq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 34d58772-7319-4567-8b88-2ed0b8a6a455 default }" containerID=322fe99eb3558d192d2cd629bb42090abd907f4046e2fc74e6b865dab11a8ec9 datapathConfiguration="&{false false false false false }" interface=lxc72746e3b858d k8sPodName=openstack/glance-api-7d5f9677bd-qwchd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=322fe99eb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2044 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-api-7d5f9677bd-qwchd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=322fe99eb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2044 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-api-7d5f9677bd-qwchd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=322fe99eb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2044 identity=59488 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-api-7d5f9677bd-qwchd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=322fe99eb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2044 identity=59488 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-api-7d5f9677bd-qwchd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=322fe99eb3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2044 identity=59488 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-api-7d5f9677bd-qwchd subsys=endpoint level=info msg="Successful endpoint creation" containerID=322fe99eb3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2044 identity=59488 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-api-7d5f9677bd-qwchd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.118 b23a57ad-3ca4-44c3-b8a0-50685132cf3d default }" containerID=565d01b62278df5ccf5cb8f2cc25e3616dd6d399bfd36fb8a2c60e754ec56d62 datapathConfiguration="&{false false false false false }" interface=lxc71601ae3e417 k8sPodName=openstack/staffeln-api-7d8d57d486-4thnf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=565d01b622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2467 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/staffeln-api-7d8d57d486-4thnf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=565d01b622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2467 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/staffeln-api-7d8d57d486-4thnf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.68 d4f58c82-6d7e-4d52-bf7d-8c06d23a22d5 default }" containerID=dd32693924c8c89545d711ddc7ab2799db1a4a5158e085777dd05323295ce11c datapathConfiguration="&{false false false false false }" interface=lxc28e0ea7e71a1 k8sPodName=openstack/staffeln-conductor-7c7d59d465-4ncvj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd32693924 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2703 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/staffeln-conductor-7c7d59d465-4ncvj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd32693924 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2703 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/staffeln-conductor-7c7d59d465-4ncvj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=dd32693924 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2703 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.68 ipv6= k8sPodName=openstack/staffeln-conductor-7c7d59d465-4ncvj line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=565d01b622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2467 identity=44829 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/staffeln-api-7d8d57d486-4thnf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=565d01b622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2467 identity=44829 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/staffeln-api-7d8d57d486-4thnf subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd32693924 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2703 identity=56075 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/staffeln-conductor-7c7d59d465-4ncvj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dd32693924 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2703 identity=56075 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/staffeln-conductor-7c7d59d465-4ncvj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 b8384770-3f79-4f01-80d9-b5d2a043aea8 default }" containerID=c2dc10d38cd60a563c4244350f6b7c3241393768318105757e9ddfc9cfa6b8fa datapathConfiguration="&{false false false false false }" interface=lxc9382ca8f9985 k8sPodName=openstack/staffeln-db-init-rhhtt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c2dc10d38c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=843 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/staffeln-db-init-rhhtt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c2dc10d38c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=843 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=9e1f3561-334e-476e-8af0-f0097ca9e914,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=9e1f3561-334e-476e-8af0-f0097ca9e914,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/staffeln-db-init-rhhtt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=9e1f3561-334e-476e-8af0-f0097ca9e914;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=9e1f3561-334e-476e-8af0-f0097ca9e914;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c2dc10d38c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=843 identity=712 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=9e1f3561-334e-476e-8af0-f0097ca9e914,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=9e1f3561-334e-476e-8af0-f0097ca9e914,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/staffeln-db-init-rhhtt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c2dc10d38c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=843 identity=712 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/staffeln-db-init-rhhtt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=565d01b622 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2467 identity=44829 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/staffeln-api-7d8d57d486-4thnf subsys=endpoint level=info msg="Successful endpoint creation" containerID=565d01b622 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2467 identity=44829 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/staffeln-api-7d8d57d486-4thnf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=dd32693924 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2703 identity=56075 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/staffeln-conductor-7c7d59d465-4ncvj subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd32693924 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2703 identity=56075 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/staffeln-conductor-7c7d59d465-4ncvj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c2dc10d38c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=843 identity=712 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/staffeln-db-init-rhhtt subsys=endpoint level=info msg="Successful endpoint creation" containerID=c2dc10d38c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=843 identity=712 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/staffeln-db-init-rhhtt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c2dc10d38c endpointID=843 k8sNamespace=openstack k8sPodName=staffeln-db-init-rhhtt subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=9e1f3561-334e-476e-8af0-f0097ca9e914 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=9e1f3561-334e-476e-8af0-f0097ca9e914 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=c2dc10d38c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=843 identity=712 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/staffeln-db-init-rhhtt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 b984942d-c19e-4530-8a5f-55765a16e493 default }" containerID=52017168566168c698af95c44ca48ecc338d826b04a460f0d4b19ba172499ae9 datapathConfiguration="&{false false false false false }" interface=lxc1ee17c4fa775 k8sPodName=openstack/staffeln-db-sync-wrxhl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5201716856 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1356 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/staffeln-db-sync-wrxhl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5201716856 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1356 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=81bb1f97-4dd8-4eca-ac59-8ab6d0c5c95f,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=81bb1f97-4dd8-4eca-ac59-8ab6d0c5c95f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/staffeln-db-sync-wrxhl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=81bb1f97-4dd8-4eca-ac59-8ab6d0c5c95f;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=81bb1f97-4dd8-4eca-ac59-8ab6d0c5c95f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5201716856 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1356 identity=39542 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=81bb1f97-4dd8-4eca-ac59-8ab6d0c5c95f,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=81bb1f97-4dd8-4eca-ac59-8ab6d0c5c95f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/staffeln-db-sync-wrxhl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5201716856 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1356 identity=39542 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/staffeln-db-sync-wrxhl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5201716856 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1356 identity=39542 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/staffeln-db-sync-wrxhl subsys=endpoint level=info msg="Successful endpoint creation" containerID=5201716856 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1356 identity=39542 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/staffeln-db-sync-wrxhl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5201716856 endpointID=1356 k8sNamespace=openstack k8sPodName=staffeln-db-sync-wrxhl subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=81bb1f97-4dd8-4eca-ac59-8ab6d0c5c95f k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=81bb1f97-4dd8-4eca-ac59-8ab6d0c5c95f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=5201716856 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1356 identity=39542 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/staffeln-db-sync-wrxhl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 16dc0b15-2cde-4317-b061-eef8adfb2c56 default }" containerID=e8f980ca1ed0856dea4cf0b50b25107a5a6393a6d356046ff60ff9efa488299e datapathConfiguration="&{false false false false false }" interface=lxc4e671da33f20 k8sPodName=local-path-storage/helper-pod-create-pvc-39090e9b-763d-45de-8d78-36241d7a8786 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8f980ca1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2844 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39090e9b-763d-45de-8d78-36241d7a8786 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8f980ca1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2844 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39090e9b-763d-45de-8d78-36241d7a8786 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e8f980ca1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2844 identity=16789 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39090e9b-763d-45de-8d78-36241d7a8786 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e8f980ca1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2844 identity=16789 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39090e9b-763d-45de-8d78-36241d7a8786 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e8f980ca1e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2844 identity=16789 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39090e9b-763d-45de-8d78-36241d7a8786 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8f980ca1e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2844 identity=16789 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39090e9b-763d-45de-8d78-36241d7a8786 subsys=daemon level=info msg="Delete endpoint request" containerID=e8f980ca1e endpointID=2844 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-39090e9b-763d-45de-8d78-36241d7a8786 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e8f980ca1e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2844 identity=16789 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39090e9b-763d-45de-8d78-36241d7a8786 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 333fdb3e-0c4a-44e0-863f-72f0b5e71416 default }" containerID=c58838c61254b3c35d9a94f2c5b062f8ef33fa5d26dfa08a4b982e0335014d45 datapathConfiguration="&{false false false false false }" interface=lxc3e221f98de7d k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c58838c612 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3932 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c58838c612 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3932 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c58838c612 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3932 identity=52526 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c58838c612 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3932 identity=52526 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c58838c612 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3932 identity=52526 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c58838c612 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3932 identity=52526 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.203 2d73b501-aa6d-45f3-9117-c2a407d8a2dd default }" containerID=85ace6a1d1d2d6eb6925a722027d778b7502698982fc309cdf0fef7310a209e9 datapathConfiguration="&{false false false false false }" interface=lxc33296b38f706 k8sPodName=openstack/cinder-scheduler-75985dfc86-b2mqw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85ace6a1d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3405 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/cinder-scheduler-75985dfc86-b2mqw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85ace6a1d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3405 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/cinder-scheduler-75985dfc86-b2mqw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=85ace6a1d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3405 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.203 ipv6= k8sPodName=openstack/cinder-scheduler-75985dfc86-b2mqw line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=85ace6a1d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3405 identity=14418 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/cinder-scheduler-75985dfc86-b2mqw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85ace6a1d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3405 identity=14418 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/cinder-scheduler-75985dfc86-b2mqw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 8c25beb9-71e3-4fc1-8153-118ca7b0b603 default }" containerID=2c48d95dbe42ea34a6a4952828f7294a1de7041190808e835b1f856a883e76b3 datapathConfiguration="&{false false false false false }" interface=lxca6d81a3a11fb k8sPodName=openstack/cinder-api-dfbf9c454-2djfw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c48d95dbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/cinder-api-dfbf9c454-2djfw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c48d95dbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/cinder-api-dfbf9c454-2djfw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c48d95dbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 identity=21277 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/cinder-api-dfbf9c454-2djfw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c48d95dbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 identity=21277 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/cinder-api-dfbf9c454-2djfw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=85ace6a1d1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3405 identity=14418 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/cinder-scheduler-75985dfc86-b2mqw subsys=endpoint level=info msg="Successful endpoint creation" containerID=85ace6a1d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3405 identity=14418 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/cinder-scheduler-75985dfc86-b2mqw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.61 96676ce3-178b-466c-b4c2-b33c5882bdf1 default }" containerID=05906eec01e34f08754d6d2b31069128cb260c7ebf046d5da4b31cf2a7faf648 datapathConfiguration="&{false false false false false }" interface=lxccefd7c440d68 k8sPodName=openstack/cinder-db-init-ln8vg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=05906eec01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1127 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/cinder-db-init-ln8vg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=05906eec01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1127 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=38b50dcd-f336-447c-b1dc-82bc08e6c3e8,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=38b50dcd-f336-447c-b1dc-82bc08e6c3e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/cinder-db-init-ln8vg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=38b50dcd-f336-447c-b1dc-82bc08e6c3e8;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=38b50dcd-f336-447c-b1dc-82bc08e6c3e8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=05906eec01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1127 identity=36224 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=38b50dcd-f336-447c-b1dc-82bc08e6c3e8,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=38b50dcd-f336-447c-b1dc-82bc08e6c3e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/cinder-db-init-ln8vg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=05906eec01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1127 identity=36224 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/cinder-db-init-ln8vg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2c48d95dbe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=185 identity=21277 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/cinder-api-dfbf9c454-2djfw subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c48d95dbe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=185 identity=21277 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/cinder-api-dfbf9c454-2djfw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=05906eec01 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1127 identity=36224 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/cinder-db-init-ln8vg subsys=endpoint level=info msg="Successful endpoint creation" containerID=05906eec01 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1127 identity=36224 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/cinder-db-init-ln8vg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=05906eec01 endpointID=1127 k8sNamespace=openstack k8sPodName=cinder-db-init-ln8vg subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=38b50dcd-f336-447c-b1dc-82bc08e6c3e8 k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=38b50dcd-f336-447c-b1dc-82bc08e6c3e8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=05906eec01 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1127 identity=36224 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/cinder-db-init-ln8vg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.88 a1e849ef-2f6d-4f38-8c9d-b129146ad62b default }" containerID=f2cc7520eef77ea79ec3b57dd3a6af9d880bb65592547b3598b087e25b34eb93 datapathConfiguration="&{false false false false false }" interface=lxc1d5f3b79f310 k8sPodName=openstack/cinder-db-sync-fxz7r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f2cc7520ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2593 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/cinder-db-sync-fxz7r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f2cc7520ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2593 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=93de1d1c-45f3-4e73-af61-5c77ae353eee,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=93de1d1c-45f3-4e73-af61-5c77ae353eee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/cinder-db-sync-fxz7r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=93de1d1c-45f3-4e73-af61-5c77ae353eee;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=93de1d1c-45f3-4e73-af61-5c77ae353eee;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f2cc7520ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2593 identity=57822 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=93de1d1c-45f3-4e73-af61-5c77ae353eee,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=93de1d1c-45f3-4e73-af61-5c77ae353eee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/cinder-db-sync-fxz7r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f2cc7520ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2593 identity=57822 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/cinder-db-sync-fxz7r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f2cc7520ee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2593 identity=57822 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/cinder-db-sync-fxz7r subsys=endpoint level=info msg="Successful endpoint creation" containerID=f2cc7520ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2593 identity=57822 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/cinder-db-sync-fxz7r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f2cc7520ee endpointID=2593 k8sNamespace=openstack k8sPodName=cinder-db-sync-fxz7r subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=93de1d1c-45f3-4e73-af61-5c77ae353eee k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=93de1d1c-45f3-4e73-af61-5c77ae353eee k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=f2cc7520ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2593 identity=57822 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/cinder-db-sync-fxz7r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 1503fcca-6efc-45f1-bf5f-7c068c9b3798 default }" containerID=4281fcf9642ef8e3bee85775eb4dd67c72ccc5dbdab344a171af6e0a1db580b4 datapathConfiguration="&{false false false false false }" interface=lxc30a10d95d7ac k8sPodName=openstack/cinder-rabbit-init-qg8w4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4281fcf964 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1013 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/cinder-rabbit-init-qg8w4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4281fcf964 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1013 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=07671036-19d5-4ef8-9816-5871d1ea8ffd,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=07671036-19d5-4ef8-9816-5871d1ea8ffd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/cinder-rabbit-init-qg8w4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=07671036-19d5-4ef8-9816-5871d1ea8ffd;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=07671036-19d5-4ef8-9816-5871d1ea8ffd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4281fcf964 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1013 identity=19061 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=07671036-19d5-4ef8-9816-5871d1ea8ffd,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=07671036-19d5-4ef8-9816-5871d1ea8ffd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/cinder-rabbit-init-qg8w4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4281fcf964 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1013 identity=19061 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/cinder-rabbit-init-qg8w4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4281fcf964 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1013 identity=19061 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/cinder-rabbit-init-qg8w4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4281fcf964 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1013 identity=19061 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/cinder-rabbit-init-qg8w4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4281fcf964 endpointID=1013 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-qg8w4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=07671036-19d5-4ef8-9816-5871d1ea8ffd k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=07671036-19d5-4ef8-9816-5871d1ea8ffd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=4281fcf964 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1013 identity=19061 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/cinder-rabbit-init-qg8w4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 7c1eb50d-f16e-43a8-96d8-4e6456c750a8 default }" containerID=78d5e599ed9e95539b8a5750deee30f14e896b41996612786316add8379192ef datapathConfiguration="&{false false false false false }" interface=lxc48453326951c k8sPodName=openstack/cinder-ks-service-hmxxf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=78d5e599ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1545 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/cinder-ks-service-hmxxf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=78d5e599ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1545 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=bded2657-9b64-4c2f-b95c-49278474ed90,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=bded2657-9b64-4c2f-b95c-49278474ed90,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/cinder-ks-service-hmxxf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=bded2657-9b64-4c2f-b95c-49278474ed90;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=bded2657-9b64-4c2f-b95c-49278474ed90;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=78d5e599ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1545 identity=9701 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=bded2657-9b64-4c2f-b95c-49278474ed90,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=bded2657-9b64-4c2f-b95c-49278474ed90,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/cinder-ks-service-hmxxf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=78d5e599ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1545 identity=9701 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/cinder-ks-service-hmxxf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=78d5e599ed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1545 identity=9701 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/cinder-ks-service-hmxxf subsys=endpoint level=info msg="Successful endpoint creation" containerID=78d5e599ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1545 identity=9701 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/cinder-ks-service-hmxxf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=78d5e599ed endpointID=1545 k8sNamespace=openstack k8sPodName=cinder-ks-service-hmxxf subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=bded2657-9b64-4c2f-b95c-49278474ed90 k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=bded2657-9b64-4c2f-b95c-49278474ed90 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=78d5e599ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1545 identity=9701 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/cinder-ks-service-hmxxf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 6d455cf2-c463-485b-9c42-d3462f7a93c7 default }" containerID=d2af522843a2206e7f6103668464eafac51ab39c514a0bae5659e34fc7b52ccb datapathConfiguration="&{false false false false false }" interface=lxc2c2534cb1b36 k8sPodName=openstack/cinder-ks-endpoints-tt46w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2af522843 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/cinder-ks-endpoints-tt46w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2af522843 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=3ffd591a-26c2-4bb4-aa8a-ad21ae3f012c,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3ffd591a-26c2-4bb4-aa8a-ad21ae3f012c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/cinder-ks-endpoints-tt46w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=3ffd591a-26c2-4bb4-aa8a-ad21ae3f012c;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=3ffd591a-26c2-4bb4-aa8a-ad21ae3f012c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d2af522843 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 identity=7170 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=3ffd591a-26c2-4bb4-aa8a-ad21ae3f012c,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3ffd591a-26c2-4bb4-aa8a-ad21ae3f012c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/cinder-ks-endpoints-tt46w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d2af522843 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 identity=7170 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/cinder-ks-endpoints-tt46w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d2af522843 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1008 identity=7170 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/cinder-ks-endpoints-tt46w subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2af522843 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1008 identity=7170 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/cinder-ks-endpoints-tt46w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d2af522843 endpointID=1008 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-tt46w subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=3ffd591a-26c2-4bb4-aa8a-ad21ae3f012c k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=3ffd591a-26c2-4bb4-aa8a-ad21ae3f012c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=d2af522843 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1008 identity=7170 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/cinder-ks-endpoints-tt46w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 a38155e5-0a9b-4ca0-9e42-6fd0792e9882 default }" containerID=332253926b92ae2c709302ed44ed5197d7b91a2c6370331c54555552c70be0b0 datapathConfiguration="&{false false false false false }" interface=lxcdf4f4e18469e k8sPodName=openstack/cinder-ks-user-wnwg5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=332253926b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1529 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/cinder-ks-user-wnwg5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=332253926b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1529 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1316cb64-fa2f-4bfe-bab5-a83f987e2dab,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=1316cb64-fa2f-4bfe-bab5-a83f987e2dab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/cinder-ks-user-wnwg5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=1316cb64-fa2f-4bfe-bab5-a83f987e2dab;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=1316cb64-fa2f-4bfe-bab5-a83f987e2dab;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=332253926b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1529 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.234 ipv6= k8sPodName=openstack/cinder-ks-user-wnwg5 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=332253926b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1529 identity=44468 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1316cb64-fa2f-4bfe-bab5-a83f987e2dab,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=1316cb64-fa2f-4bfe-bab5-a83f987e2dab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/cinder-ks-user-wnwg5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=332253926b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1529 identity=44468 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/cinder-ks-user-wnwg5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=332253926b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1529 identity=44468 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/cinder-ks-user-wnwg5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=332253926b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1529 identity=44468 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/cinder-ks-user-wnwg5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=332253926b endpointID=1529 k8sNamespace=openstack k8sPodName=cinder-ks-user-wnwg5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=1316cb64-fa2f-4bfe-bab5-a83f987e2dab k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=1316cb64-fa2f-4bfe-bab5-a83f987e2dab k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=332253926b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1529 identity=44468 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/cinder-ks-user-wnwg5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 3906d7e2-c0c2-4a94-bfe5-bd1def7b3e5c default }" containerID=14ee82240a8994938755c894c25c2880c0d98ce1ee424ea35bd5619c2b5b2738 datapathConfiguration="&{false false false false false }" interface=lxcc0ee5b5964aa k8sPodName=openstack/cinder-backup-storage-init-cndb4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=14ee82240a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1681 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/cinder-backup-storage-init-cndb4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=14ee82240a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1681 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=3bbd6615-eca4-42b2-a19f-38b61cfc3205,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=3bbd6615-eca4-42b2-a19f-38b61cfc3205,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/cinder-backup-storage-init-cndb4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=14ee82240a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1681 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.31 ipv6= k8sPodName=openstack/cinder-backup-storage-init-cndb4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=3bbd6615-eca4-42b2-a19f-38b61cfc3205;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=3bbd6615-eca4-42b2-a19f-38b61cfc3205;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=14ee82240a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1681 identity=7194 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=3bbd6615-eca4-42b2-a19f-38b61cfc3205,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=3bbd6615-eca4-42b2-a19f-38b61cfc3205,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/cinder-backup-storage-init-cndb4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=14ee82240a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1681 identity=7194 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/cinder-backup-storage-init-cndb4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=14ee82240a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1681 identity=7194 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/cinder-backup-storage-init-cndb4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=14ee82240a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1681 identity=7194 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/cinder-backup-storage-init-cndb4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=14ee82240a endpointID=1681 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-cndb4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=3bbd6615-eca4-42b2-a19f-38b61cfc3205 k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=3bbd6615-eca4-42b2-a19f-38b61cfc3205 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=14ee82240a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1681 identity=7194 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/cinder-backup-storage-init-cndb4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 b416503c-dea5-46b9-9048-f72e1074d042 default }" containerID=d81adba186a502df0a73e3e4fc0c594f72887641a39e2c5f7783df1e91f4e24c datapathConfiguration="&{false false false false false }" interface=lxc2a411712417b k8sPodName=openstack/cinder-create-internal-tenant-f2dtt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d81adba186 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2049 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-f2dtt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d81adba186 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2049 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=546ebc58-6507-4d48-ad92-39caf47b91c5,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=546ebc58-6507-4d48-ad92-39caf47b91c5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-f2dtt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d81adba186 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2049 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.99 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-f2dtt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=546ebc58-6507-4d48-ad92-39caf47b91c5;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=546ebc58-6507-4d48-ad92-39caf47b91c5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d81adba186 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2049 identity=27676 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=546ebc58-6507-4d48-ad92-39caf47b91c5,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=546ebc58-6507-4d48-ad92-39caf47b91c5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-f2dtt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d81adba186 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2049 identity=27676 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-f2dtt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d81adba186 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2049 identity=27676 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-f2dtt subsys=endpoint level=info msg="Successful endpoint creation" containerID=d81adba186 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2049 identity=27676 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-f2dtt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d81adba186 endpointID=2049 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-f2dtt subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=546ebc58-6507-4d48-ad92-39caf47b91c5 k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=546ebc58-6507-4d48-ad92-39caf47b91c5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=d81adba186 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2049 identity=27676 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-f2dtt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 212ec2c3-d91a-46cc-90c2-6cf0d7740481 default }" containerID=46b4655fd6d918e084de2822df08638160c5a2dd37f6d316a56d52938f344e85 datapathConfiguration="&{false false false false false }" interface=lxc6cf53d77ea41 k8sPodName=openstack/cinder-storage-init-k29cd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=46b4655fd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2718 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/cinder-storage-init-k29cd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=46b4655fd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2718 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=63796af9-16fd-4d12-81c6-2794f47dedcf,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=63796af9-16fd-4d12-81c6-2794f47dedcf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/cinder-storage-init-k29cd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=46b4655fd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2718 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.117 ipv6= k8sPodName=openstack/cinder-storage-init-k29cd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=63796af9-16fd-4d12-81c6-2794f47dedcf;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=63796af9-16fd-4d12-81c6-2794f47dedcf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=46b4655fd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2718 identity=51719 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=63796af9-16fd-4d12-81c6-2794f47dedcf,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=63796af9-16fd-4d12-81c6-2794f47dedcf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/cinder-storage-init-k29cd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=46b4655fd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2718 identity=51719 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/cinder-storage-init-k29cd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=46b4655fd6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2718 identity=51719 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/cinder-storage-init-k29cd subsys=endpoint level=info msg="Successful endpoint creation" containerID=46b4655fd6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2718 identity=51719 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/cinder-storage-init-k29cd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=46b4655fd6 endpointID=2718 k8sNamespace=openstack k8sPodName=cinder-storage-init-k29cd subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=63796af9-16fd-4d12-81c6-2794f47dedcf k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=63796af9-16fd-4d12-81c6-2794f47dedcf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=46b4655fd6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2718 identity=51719 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/cinder-storage-init-k29cd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.187 b4c7cb56-588f-41ce-ae7f-3ad5dbbdf3f3 default }" containerID=b493f14586f4c9cb7cf9d34601ce49fb11d69ecf5d18e7973f12ce52f5ecbd9e datapathConfiguration="&{false false false false false }" interface=lxc61993e589da2 k8sPodName=openstack/cinder-bootstrap-csds4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b493f14586 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2939 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/cinder-bootstrap-csds4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b493f14586 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2939 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=27ea9403-efde-4817-8f81-4ee88fd2594f,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=27ea9403-efde-4817-8f81-4ee88fd2594f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/cinder-bootstrap-csds4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=27ea9403-efde-4817-8f81-4ee88fd2594f;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=27ea9403-efde-4817-8f81-4ee88fd2594f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b493f14586 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2939 identity=24517 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=27ea9403-efde-4817-8f81-4ee88fd2594f,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=27ea9403-efde-4817-8f81-4ee88fd2594f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/cinder-bootstrap-csds4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b493f14586 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2939 identity=24517 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/cinder-bootstrap-csds4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b493f14586 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2939 identity=24517 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/cinder-bootstrap-csds4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b493f14586 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2939 identity=24517 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/cinder-bootstrap-csds4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.22 3b9077bd-3826-4414-80d4-f1465a248f3d default }" containerID=ae64606775dbf9966292dd38aa05157289693297265463e6844285486054be24 datapathConfiguration="&{false false false false false }" interface=lxc26921815fe82 k8sPodName=openstack/cinder-volume-569f5c58fd-75knr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae64606775 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1870 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/cinder-volume-569f5c58fd-75knr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae64606775 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1870 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/cinder-volume-569f5c58fd-75knr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.165 e53ae1ae-a0c3-450e-8ef5-5256780ee32d default }" containerID=dccd6a0a31e076f358ad3802f4b6946b25e5114846bb2e8cb77b6b2e0ae71df2 datapathConfiguration="&{false false false false false }" interface=lxcda61b420ce67 k8sPodName=openstack/cinder-backup-b57997b56-2htqh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dccd6a0a31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/cinder-backup-b57997b56-2htqh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dccd6a0a31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/cinder-backup-b57997b56-2htqh subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=ae64606775 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1870 identity=28424 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/cinder-volume-569f5c58fd-75knr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae64606775 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1870 identity=28424 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/cinder-volume-569f5c58fd-75knr subsys=endpoint level=info msg="Invalid state transition skipped" containerID=dccd6a0a31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.165 ipv6= k8sPodName=openstack/cinder-backup-b57997b56-2htqh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dccd6a0a31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 identity=17204 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/cinder-backup-b57997b56-2htqh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dccd6a0a31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 identity=17204 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/cinder-backup-b57997b56-2htqh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ae64606775 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1870 identity=28424 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/cinder-volume-569f5c58fd-75knr subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae64606775 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1870 identity=28424 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/cinder-volume-569f5c58fd-75knr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=dccd6a0a31 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=380 identity=17204 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/cinder-backup-b57997b56-2htqh subsys=endpoint level=info msg="Successful endpoint creation" containerID=dccd6a0a31 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=380 identity=17204 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/cinder-backup-b57997b56-2htqh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b493f14586 endpointID=2939 k8sNamespace=openstack k8sPodName=cinder-bootstrap-csds4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=27ea9403-efde-4817-8f81-4ee88fd2594f k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=27ea9403-efde-4817-8f81-4ee88fd2594f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=b493f14586 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2939 identity=24517 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/cinder-bootstrap-csds4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.211 88bde9f2-80b9-4dce-be06-985b4e9c9730 default }" containerID=9344ccc311a0414ff41944bf5a855a7a09c0db44aa96930b810faa36edc332e5 datapathConfiguration="&{false false false false false }" interface=lxc8c43c7ed62cf k8sPodName=openstack/placement-api-66dd958d85-stdhv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9344ccc311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=357 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/placement-api-66dd958d85-stdhv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9344ccc311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=357 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/placement-api-66dd958d85-stdhv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=9344ccc311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=357 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.211 ipv6= k8sPodName=openstack/placement-api-66dd958d85-stdhv line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9344ccc311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=357 identity=2203 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/placement-api-66dd958d85-stdhv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9344ccc311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=357 identity=2203 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/placement-api-66dd958d85-stdhv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9344ccc311 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=357 identity=2203 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/placement-api-66dd958d85-stdhv subsys=endpoint level=info msg="Successful endpoint creation" containerID=9344ccc311 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=357 identity=2203 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/placement-api-66dd958d85-stdhv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.193 81b44984-eadd-4d98-b72d-bdb6fa7442ba default }" containerID=7f40edff668ae2311a1072d8949a2f78d9f2bfe2927ff4dbd12caa20deb4b0d2 datapathConfiguration="&{false false false false false }" interface=lxcd6179029d734 k8sPodName=openstack/placement-db-init-t2t9n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f40edff66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1651 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/placement-db-init-t2t9n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f40edff66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1651 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=002645c0-f94b-4e78-992b-20dc478bfc62,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=002645c0-f94b-4e78-992b-20dc478bfc62,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/placement-db-init-t2t9n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=002645c0-f94b-4e78-992b-20dc478bfc62;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=002645c0-f94b-4e78-992b-20dc478bfc62;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f40edff66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1651 identity=43333 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=002645c0-f94b-4e78-992b-20dc478bfc62,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=002645c0-f94b-4e78-992b-20dc478bfc62,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/placement-db-init-t2t9n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f40edff66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1651 identity=43333 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/placement-db-init-t2t9n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7f40edff66 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1651 identity=43333 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/placement-db-init-t2t9n subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f40edff66 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1651 identity=43333 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/placement-db-init-t2t9n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7f40edff66 endpointID=1651 k8sNamespace=openstack k8sPodName=placement-db-init-t2t9n subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=002645c0-f94b-4e78-992b-20dc478bfc62 k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=002645c0-f94b-4e78-992b-20dc478bfc62 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=7f40edff66 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1651 identity=43333 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/placement-db-init-t2t9n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 7ccc2077-faa9-4ffb-a3d5-341b2b72204c default }" containerID=44477ce8428106599cdb1badc69476012c0cd0a38bc09fe8f7ddb684fad6b818 datapathConfiguration="&{false false false false false }" interface=lxc59cfc36b75ab k8sPodName=openstack/placement-db-sync-j2jf7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44477ce842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/placement-db-sync-j2jf7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44477ce842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=2c3c0bc2-158f-46eb-abf7-f53865bfe839,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=2c3c0bc2-158f-46eb-abf7-f53865bfe839,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/placement-db-sync-j2jf7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=2c3c0bc2-158f-46eb-abf7-f53865bfe839;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=2c3c0bc2-158f-46eb-abf7-f53865bfe839;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44477ce842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 identity=23739 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=2c3c0bc2-158f-46eb-abf7-f53865bfe839,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=2c3c0bc2-158f-46eb-abf7-f53865bfe839,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/placement-db-sync-j2jf7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=44477ce842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 identity=23739 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/placement-db-sync-j2jf7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=44477ce842 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1574 identity=23739 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/placement-db-sync-j2jf7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=44477ce842 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1574 identity=23739 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/placement-db-sync-j2jf7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=44477ce842 endpointID=1574 k8sNamespace=openstack k8sPodName=placement-db-sync-j2jf7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=2c3c0bc2-158f-46eb-abf7-f53865bfe839 k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=2c3c0bc2-158f-46eb-abf7-f53865bfe839 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=44477ce842 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1574 identity=23739 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/placement-db-sync-j2jf7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 8c0518b7-0307-42e5-b270-c7265bcf65d4 default }" containerID=a0026fd0f39d56f6b8f918827dc8326aad8b4706a0db75176ca80901043333ff datapathConfiguration="&{false false false false false }" interface=lxc4d9ab04f969b k8sPodName=openstack/placement-ks-service-ld7bz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a0026fd0f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3761 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/placement-ks-service-ld7bz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a0026fd0f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3761 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=98721816-c1db-4ab4-bada-adcb9de6db9a,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=98721816-c1db-4ab4-bada-adcb9de6db9a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/placement-ks-service-ld7bz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=98721816-c1db-4ab4-bada-adcb9de6db9a;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=98721816-c1db-4ab4-bada-adcb9de6db9a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a0026fd0f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3761 identity=30601 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=98721816-c1db-4ab4-bada-adcb9de6db9a,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=98721816-c1db-4ab4-bada-adcb9de6db9a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/placement-ks-service-ld7bz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a0026fd0f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3761 identity=30601 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/placement-ks-service-ld7bz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a0026fd0f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3761 identity=30601 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/placement-ks-service-ld7bz subsys=endpoint level=info msg="Successful endpoint creation" containerID=a0026fd0f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3761 identity=30601 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/placement-ks-service-ld7bz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a0026fd0f3 endpointID=3761 k8sNamespace=openstack k8sPodName=placement-ks-service-ld7bz subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=98721816-c1db-4ab4-bada-adcb9de6db9a k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=98721816-c1db-4ab4-bada-adcb9de6db9a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=a0026fd0f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3761 identity=30601 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/placement-ks-service-ld7bz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 0b6f67cb-2cda-4f63-8862-62aea696af96 default }" containerID=02028d745d61c1109935878100b1666c44544da882ee9be9a0d084ef7f4ca4b1 datapathConfiguration="&{false false false false false }" interface=lxc5dda1c6627a8 k8sPodName=openstack/placement-ks-user-jgb9v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=02028d745d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1667 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/placement-ks-user-jgb9v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=02028d745d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1667 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=d1d399be-1cfd-4556-943a-1c7b453783a5,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=d1d399be-1cfd-4556-943a-1c7b453783a5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/placement-ks-user-jgb9v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=d1d399be-1cfd-4556-943a-1c7b453783a5;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=d1d399be-1cfd-4556-943a-1c7b453783a5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=02028d745d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1667 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.217 ipv6= k8sPodName=openstack/placement-ks-user-jgb9v line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=02028d745d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1667 identity=35142 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=d1d399be-1cfd-4556-943a-1c7b453783a5,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=d1d399be-1cfd-4556-943a-1c7b453783a5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/placement-ks-user-jgb9v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=02028d745d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1667 identity=35142 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/placement-ks-user-jgb9v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=02028d745d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1667 identity=35142 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/placement-ks-user-jgb9v subsys=endpoint level=info msg="Successful endpoint creation" containerID=02028d745d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1667 identity=35142 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/placement-ks-user-jgb9v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=02028d745d endpointID=1667 k8sNamespace=openstack k8sPodName=placement-ks-user-jgb9v subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=d1d399be-1cfd-4556-943a-1c7b453783a5 k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=d1d399be-1cfd-4556-943a-1c7b453783a5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=02028d745d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1667 identity=35142 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/placement-ks-user-jgb9v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 98887a37-3449-412c-835d-a2d8e3c50f6e default }" containerID=36e17f85c7cd558119d65459b49e0a96f3755b97dabae9f23b8c3a4aa55f8db8 datapathConfiguration="&{false false false false false }" interface=lxc080a174f61cc k8sPodName=openstack/placement-ks-endpoints-k7kpv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=36e17f85c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/placement-ks-endpoints-k7kpv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36e17f85c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=b1676a10-30fb-4c63-9206-1feae64c03d7,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b1676a10-30fb-4c63-9206-1feae64c03d7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/placement-ks-endpoints-k7kpv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=b1676a10-30fb-4c63-9206-1feae64c03d7;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=b1676a10-30fb-4c63-9206-1feae64c03d7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=36e17f85c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 identity=6636 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=b1676a10-30fb-4c63-9206-1feae64c03d7,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b1676a10-30fb-4c63-9206-1feae64c03d7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/placement-ks-endpoints-k7kpv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=36e17f85c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 identity=6636 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/placement-ks-endpoints-k7kpv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=36e17f85c7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1549 identity=6636 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/placement-ks-endpoints-k7kpv subsys=endpoint level=info msg="Successful endpoint creation" containerID=36e17f85c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1549 identity=6636 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/placement-ks-endpoints-k7kpv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=36e17f85c7 endpointID=1549 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-k7kpv subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=b1676a10-30fb-4c63-9206-1feae64c03d7 k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=b1676a10-30fb-4c63-9206-1feae64c03d7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=36e17f85c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1549 identity=6636 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/placement-ks-endpoints-k7kpv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.236 45bd0236-5c33-4b94-891f-cab2a2df38b8 default }" containerID=4f925e86bdb933617e615c2fa39eaf835eae5a2ffadecc3de866145f8a960f9d datapathConfiguration="&{false false false false false }" interface=lxcdbbc4a9928a9 k8sPodName=openstack/neutron-coredns-7dd4958666-4kvrj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f925e86bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2811 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-4kvrj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f925e86bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2811 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-4kvrj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=neutron-coredns;k8s:app.kubernetes.io/name=coredns;k8s:application=neutron;k8s:component=coredns;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4f925e86bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2811 identity=15596 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-4kvrj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4f925e86bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2811 identity=15596 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-4kvrj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4f925e86bd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2811 identity=15596 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-4kvrj subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f925e86bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2811 identity=15596 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-4kvrj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.101 d7b75995-81a4-410f-87ae-a4afe4e81b34 default }" containerID=ae67aeb78d71afccc8aa496635ec78afbaab26a488d75cebae54a221696ffcdb datapathConfiguration="&{false false false false false }" interface=lxcaacecc45f547 k8sPodName=local-path-storage/helper-pod-create-pvc-c34fd80e-a604-477c-8f6c-850138dd218e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae67aeb78d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c34fd80e-a604-477c-8f6c-850138dd218e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae67aeb78d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c34fd80e-a604-477c-8f6c-850138dd218e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae67aeb78d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 identity=16789 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c34fd80e-a604-477c-8f6c-850138dd218e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae67aeb78d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 identity=16789 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c34fd80e-a604-477c-8f6c-850138dd218e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ae67aeb78d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=903 identity=16789 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c34fd80e-a604-477c-8f6c-850138dd218e subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae67aeb78d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=903 identity=16789 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c34fd80e-a604-477c-8f6c-850138dd218e subsys=daemon level=info msg="Delete endpoint request" containerID=ae67aeb78d endpointID=903 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c34fd80e-a604-477c-8f6c-850138dd218e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ae67aeb78d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=903 identity=16789 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c34fd80e-a604-477c-8f6c-850138dd218e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 45af81c2-5763-4dd3-9936-c5a9f0386b76 default }" containerID=f04aee0fbc0d930cc53f4b9e420b95b9ed86e2583bc6c8bb909777c5d10282a7 datapathConfiguration="&{false false false false false }" interface=lxcb6684b5e986d k8sPodName=openstack/rabbitmq-nova-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f04aee0fbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=860 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f04aee0fbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=860 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-nova;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f04aee0fbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=860 identity=37628 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f04aee0fbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=860 identity=37628 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f04aee0fbc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=860 identity=37628 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f04aee0fbc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=860 identity=37628 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.55 a154f522-6c16-44b7-b68d-908938cfd105 default }" containerID=0c24fd0187f5b8d51dc83d24ac7a4b53e39c67eef7c8a6c67e640860aff3c0a4 datapathConfiguration="&{false false false false false }" interface=lxc476d0eaf125e k8sPodName=openstack/nova-scheduler-564b6c69f4-dk66q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0c24fd0187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2844 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/nova-scheduler-564b6c69f4-dk66q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0c24fd0187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2844 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/nova-scheduler-564b6c69f4-dk66q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=0c24fd0187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2844 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.55 ipv6= k8sPodName=openstack/nova-scheduler-564b6c69f4-dk66q line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0c24fd0187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2844 identity=15947 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/nova-scheduler-564b6c69f4-dk66q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0c24fd0187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2844 identity=15947 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/nova-scheduler-564b6c69f4-dk66q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 4a557f53-12eb-4050-8568-fbee348d20ab default }" containerID=88b2b29bd63fabd84be8842a1bcf8ad4ad68280f4361f0bdfe4b8eb6c381f709 datapathConfiguration="&{false false false false false }" interface=lxce5b5c7cf2118 k8sPodName=openstack/nova-api-osapi-87c65b966-9xn82 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=88b2b29bd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/nova-api-osapi-87c65b966-9xn82 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=88b2b29bd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/nova-api-osapi-87c65b966-9xn82 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=os-api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=88b2b29bd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 identity=35890 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/nova-api-osapi-87c65b966-9xn82 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=88b2b29bd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 identity=35890 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/nova-api-osapi-87c65b966-9xn82 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 e57586c4-4ba2-463a-845e-99eaa4500271 default }" containerID=b14fa601717cf9d342d6a9e1f477a4c4ff982c88cd5e5266054bfc704e728345 datapathConfiguration="&{false false false false false }" interface=lxcc4c948613c26 k8sPodName=openstack/nova-bootstrap-8qzr4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b14fa60171 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1344 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/nova-bootstrap-8qzr4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b14fa60171 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1344 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=f75322d8-94bf-4d1c-b985-d10a131ad70a,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=f75322d8-94bf-4d1c-b985-d10a131ad70a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/nova-bootstrap-8qzr4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=f75322d8-94bf-4d1c-b985-d10a131ad70a;k8s:batch.kubernetes.io/job-name=nova-bootstrap;k8s:component=bootstrap;k8s:controller-uid=f75322d8-94bf-4d1c-b985-d10a131ad70a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-bootstrap;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b14fa60171 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1344 identity=49490 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=f75322d8-94bf-4d1c-b985-d10a131ad70a,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=f75322d8-94bf-4d1c-b985-d10a131ad70a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/nova-bootstrap-8qzr4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b14fa60171 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1344 identity=49490 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/nova-bootstrap-8qzr4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0c24fd0187 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2844 identity=15947 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/nova-scheduler-564b6c69f4-dk66q subsys=endpoint level=info msg="Successful endpoint creation" containerID=0c24fd0187 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2844 identity=15947 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/nova-scheduler-564b6c69f4-dk66q subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=88b2b29bd6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=88 identity=35890 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/nova-api-osapi-87c65b966-9xn82 subsys=endpoint level=info msg="Successful endpoint creation" containerID=88b2b29bd6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=88 identity=35890 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/nova-api-osapi-87c65b966-9xn82 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.219 ce944675-bae7-4c48-b7e6-efd1b3c72252 default }" containerID=ed216bdf83336ae8273cf4205f2adb774328add326ae9681f63e086c96eb2d9b datapathConfiguration="&{false false false false false }" interface=lxcfbeef3f1664c k8sPodName=openstack/nova-cell-setup-2vcsj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed216bdf83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=833 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/nova-cell-setup-2vcsj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed216bdf83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=833 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=d3724ec3-4347-4efe-9069-1bd2b5d53932,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=d3724ec3-4347-4efe-9069-1bd2b5d53932,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/nova-cell-setup-2vcsj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=d3724ec3-4347-4efe-9069-1bd2b5d53932;k8s:batch.kubernetes.io/job-name=nova-cell-setup;k8s:component=cell-setup;k8s:controller-uid=d3724ec3-4347-4efe-9069-1bd2b5d53932;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed216bdf83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=833 identity=38410 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=d3724ec3-4347-4efe-9069-1bd2b5d53932,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=d3724ec3-4347-4efe-9069-1bd2b5d53932,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/nova-cell-setup-2vcsj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed216bdf83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=833 identity=38410 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/nova-cell-setup-2vcsj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b14fa60171 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1344 identity=49490 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/nova-bootstrap-8qzr4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b14fa60171 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1344 identity=49490 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/nova-bootstrap-8qzr4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.124 7a00e921-a5b7-4a37-bb8b-23ab6ee722a9 default }" containerID=ae261e0a5e8f3b8ba7b9af2e740d877c28f7f7053faaaeeb526b2bac85394778 datapathConfiguration="&{false false false false false }" interface=lxccb284d62cb3c k8sPodName=openstack/nova-api-metadata-84ff68774b-kpmnd labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.176 1b743839-2db0-484a-8b4b-1306d413f241 default }" containerID=e6625a13f4388d35250a47282af438f441c7044cf2e420f5072f82bb062d7e35 datapathConfiguration="&{false false false false false }" interface=lxcfcf5643d259f k8sPodName=openstack/nova-db-init-84x4v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e6625a13f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2966 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/nova-db-init-84x4v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e6625a13f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2966 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=29ff2256-cf21-42cc-86d8-d7d613e19725,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=29ff2256-cf21-42cc-86d8-d7d613e19725,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/nova-db-init-84x4v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.151 f107b7d8-c183-4c26-86e4-fee419f12d80 default }" containerID=686447bee5fd39575dda91b83de5fe7500cad5b257ffb9820c099a28c7158f0b datapathConfiguration="&{false false false false false }" interface=lxc29ead26ae788 k8sPodName=openstack/nova-conductor-6d6b7ccf86-zwnbr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=686447bee5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/nova-conductor-6d6b7ccf86-zwnbr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=686447bee5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/nova-conductor-6d6b7ccf86-zwnbr subsys=endpoint level=info msg="New endpoint" containerID=ae261e0a5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2359 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/nova-api-metadata-84ff68774b-kpmnd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae261e0a5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2359 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/nova-api-metadata-84ff68774b-kpmnd subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=29ff2256-cf21-42cc-86d8-d7d613e19725;k8s:batch.kubernetes.io/job-name=nova-db-init;k8s:component=db-init;k8s:controller-uid=29ff2256-cf21-42cc-86d8-d7d613e19725;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e6625a13f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2966 identity=15207 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=29ff2256-cf21-42cc-86d8-d7d613e19725,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=29ff2256-cf21-42cc-86d8-d7d613e19725,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/nova-db-init-84x4v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e6625a13f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2966 identity=15207 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/nova-db-init-84x4v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=ed216bdf83 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=833 identity=38410 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/nova-cell-setup-2vcsj subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed216bdf83 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=833 identity=38410 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/nova-cell-setup-2vcsj subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=686447bee5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 identity=6546 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/nova-conductor-6d6b7ccf86-zwnbr oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=686447bee5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 identity=6546 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/nova-conductor-6d6b7ccf86-zwnbr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e6625a13f4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2966 identity=15207 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/nova-db-init-84x4v subsys=endpoint level=info msg="Successful endpoint creation" containerID=e6625a13f4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2966 identity=15207 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/nova-db-init-84x4v subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=686447bee5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=483 identity=6546 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/nova-conductor-6d6b7ccf86-zwnbr subsys=endpoint level=info msg="Successful endpoint creation" containerID=686447bee5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=483 identity=6546 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/nova-conductor-6d6b7ccf86-zwnbr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ae261e0a5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2359 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.124 ipv6= k8sPodName=openstack/nova-api-metadata-84ff68774b-kpmnd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=metadata;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae261e0a5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2359 identity=60918 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/nova-api-metadata-84ff68774b-kpmnd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae261e0a5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2359 identity=60918 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/nova-api-metadata-84ff68774b-kpmnd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ae261e0a5e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2359 identity=60918 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/nova-api-metadata-84ff68774b-kpmnd subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae261e0a5e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2359 identity=60918 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/nova-api-metadata-84ff68774b-kpmnd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.129 31a64e98-4181-430d-8c64-252ab8f98f1b default }" containerID=0b522e167b3287dd20c3b91f212907effc93048bb098b662a1ba495220b7c7b2 datapathConfiguration="&{false false false false false }" interface=lxc412af116033c k8sPodName=openstack/nova-novncproxy-959df5477-6bj9n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b522e167b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/nova-novncproxy-959df5477-6bj9n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b522e167b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/nova-novncproxy-959df5477-6bj9n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=novnc-proxy;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b522e167b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 identity=19537 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/nova-novncproxy-959df5477-6bj9n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b522e167b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 identity=19537 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/nova-novncproxy-959df5477-6bj9n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0b522e167b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=157 identity=19537 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/nova-novncproxy-959df5477-6bj9n subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b522e167b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=157 identity=19537 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/nova-novncproxy-959df5477-6bj9n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e6625a13f4 endpointID=2966 k8sNamespace=openstack k8sPodName=nova-db-init-84x4v subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=29ff2256-cf21-42cc-86d8-d7d613e19725 k8s:batch.kubernetes.io/job-name=nova-db-init k8s:component=db-init k8s:controller-uid=29ff2256-cf21-42cc-86d8-d7d613e19725 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=e6625a13f4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2966 identity=15207 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/nova-db-init-84x4v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 326fdcc3-d131-4087-adc3-6c5eb0280dff default }" containerID=6df6ce54d0977ae4d67e971ee73d80df67c3fd20070e3ab6afcb05a340b6831e datapathConfiguration="&{false false false false false }" interface=lxc9f2fc4085cdf k8sPodName=openstack/nova-db-sync-kzkc8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6df6ce54d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=44 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/nova-db-sync-kzkc8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6df6ce54d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=44 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=3a1542ba-7688-4da6-9ef2-1a269e0fc93c,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=3a1542ba-7688-4da6-9ef2-1a269e0fc93c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/nova-db-sync-kzkc8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=3a1542ba-7688-4da6-9ef2-1a269e0fc93c;k8s:batch.kubernetes.io/job-name=nova-db-sync;k8s:component=db-sync;k8s:controller-uid=3a1542ba-7688-4da6-9ef2-1a269e0fc93c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-sync;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6df6ce54d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=44 identity=49049 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=3a1542ba-7688-4da6-9ef2-1a269e0fc93c,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=3a1542ba-7688-4da6-9ef2-1a269e0fc93c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/nova-db-sync-kzkc8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6df6ce54d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=44 identity=49049 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/nova-db-sync-kzkc8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6df6ce54d0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=44 identity=49049 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/nova-db-sync-kzkc8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6df6ce54d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=44 identity=49049 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/nova-db-sync-kzkc8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6df6ce54d0 endpointID=44 k8sNamespace=openstack k8sPodName=nova-db-sync-kzkc8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=3a1542ba-7688-4da6-9ef2-1a269e0fc93c k8s:batch.kubernetes.io/job-name=nova-db-sync k8s:component=db-sync k8s:controller-uid=3a1542ba-7688-4da6-9ef2-1a269e0fc93c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-sync k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=6df6ce54d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=44 identity=49049 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/nova-db-sync-kzkc8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 89072fda-1d62-4a2d-b83c-ea89b413a58a default }" containerID=458b13acf84132fb22f8880d111e71b34565f263746948ec02bea207ffeb89f0 datapathConfiguration="&{false false false false false }" interface=lxce167cf6755fb k8sPodName=openstack/nova-rabbit-init-rb2lh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=458b13acf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/nova-rabbit-init-rb2lh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=458b13acf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=10417cba-40b6-42e0-b24e-75b0eec174d8,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=10417cba-40b6-42e0-b24e-75b0eec174d8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/nova-rabbit-init-rb2lh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=10417cba-40b6-42e0-b24e-75b0eec174d8;k8s:batch.kubernetes.io/job-name=nova-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=10417cba-40b6-42e0-b24e-75b0eec174d8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-rabbit-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=458b13acf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 identity=910 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=10417cba-40b6-42e0-b24e-75b0eec174d8,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=10417cba-40b6-42e0-b24e-75b0eec174d8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/nova-rabbit-init-rb2lh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=458b13acf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 identity=910 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/nova-rabbit-init-rb2lh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=458b13acf8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=431 identity=910 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/nova-rabbit-init-rb2lh subsys=endpoint level=info msg="Successful endpoint creation" containerID=458b13acf8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=431 identity=910 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/nova-rabbit-init-rb2lh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=458b13acf8 endpointID=431 k8sNamespace=openstack k8sPodName=nova-rabbit-init-rb2lh subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=10417cba-40b6-42e0-b24e-75b0eec174d8 k8s:batch.kubernetes.io/job-name=nova-rabbit-init k8s:component=rabbit-init k8s:controller-uid=10417cba-40b6-42e0-b24e-75b0eec174d8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-rabbit-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=458b13acf8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=431 identity=910 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/nova-rabbit-init-rb2lh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 1cd8bdc2-bda9-48ed-ad6a-cb8bbd36fb3a default }" containerID=4690fa3dba6358f9458b590af36a9cc470ff8876a5d87a9ee7472c121dce7b24 datapathConfiguration="&{false false false false false }" interface=lxcd727028c8d43 k8sPodName=openstack/nova-ks-service-nm2mf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4690fa3dba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4095 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/nova-ks-service-nm2mf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4690fa3dba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4095 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=1a20648f-bad9-4876-b519-8122cca03f08,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=1a20648f-bad9-4876-b519-8122cca03f08,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/nova-ks-service-nm2mf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=1a20648f-bad9-4876-b519-8122cca03f08;k8s:batch.kubernetes.io/job-name=nova-ks-service;k8s:component=ks-service;k8s:controller-uid=1a20648f-bad9-4876-b519-8122cca03f08;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-service;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4690fa3dba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4095 identity=57409 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=1a20648f-bad9-4876-b519-8122cca03f08,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=1a20648f-bad9-4876-b519-8122cca03f08,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/nova-ks-service-nm2mf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4690fa3dba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4095 identity=57409 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/nova-ks-service-nm2mf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4690fa3dba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4095 identity=57409 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/nova-ks-service-nm2mf subsys=endpoint level=info msg="Successful endpoint creation" containerID=4690fa3dba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4095 identity=57409 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/nova-ks-service-nm2mf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4690fa3dba endpointID=4095 k8sNamespace=openstack k8sPodName=nova-ks-service-nm2mf subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=1a20648f-bad9-4876-b519-8122cca03f08 k8s:batch.kubernetes.io/job-name=nova-ks-service k8s:component=ks-service k8s:controller-uid=1a20648f-bad9-4876-b519-8122cca03f08 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-service k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=4690fa3dba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4095 identity=57409 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/nova-ks-service-nm2mf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 4563161a-4df1-44a4-a096-ebda3c806f5d default }" containerID=14b3c876216403c26859b4801374614b71f20fa0a102a12e0c9c278609a9b36b datapathConfiguration="&{false false false false false }" interface=lxcb040434ddfc8 k8sPodName=openstack/nova-ks-endpoints-hxjxx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=14b3c87621 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3123 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/nova-ks-endpoints-hxjxx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=14b3c87621 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3123 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=054e3d9b-8ff8-408d-bf7b-68c6283af0b3,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=054e3d9b-8ff8-408d-bf7b-68c6283af0b3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/nova-ks-endpoints-hxjxx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=14b3c87621 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3123 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.133 ipv6= k8sPodName=openstack/nova-ks-endpoints-hxjxx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=054e3d9b-8ff8-408d-bf7b-68c6283af0b3;k8s:batch.kubernetes.io/job-name=nova-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=054e3d9b-8ff8-408d-bf7b-68c6283af0b3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-endpoints;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=14b3c87621 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3123 identity=27855 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=054e3d9b-8ff8-408d-bf7b-68c6283af0b3,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=054e3d9b-8ff8-408d-bf7b-68c6283af0b3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/nova-ks-endpoints-hxjxx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=14b3c87621 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3123 identity=27855 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/nova-ks-endpoints-hxjxx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=14b3c87621 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3123 identity=27855 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/nova-ks-endpoints-hxjxx subsys=endpoint level=info msg="Successful endpoint creation" containerID=14b3c87621 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3123 identity=27855 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/nova-ks-endpoints-hxjxx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=14b3c87621 endpointID=3123 k8sNamespace=openstack k8sPodName=nova-ks-endpoints-hxjxx subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=054e3d9b-8ff8-408d-bf7b-68c6283af0b3 k8s:batch.kubernetes.io/job-name=nova-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=054e3d9b-8ff8-408d-bf7b-68c6283af0b3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-endpoints k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=14b3c87621 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3123 identity=27855 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/nova-ks-endpoints-hxjxx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 42d76ac0-8c0b-4e20-9c4c-a446e8309e1e default }" containerID=c1dfc1a5815b5dbb5c265d69f2f1688376f6cd49431956267acfab8d42fe29ba datapathConfiguration="&{false false false false false }" interface=lxca4948168abbe k8sPodName=openstack/nova-ks-user-l8k5q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1dfc1a581 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=477 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/nova-ks-user-l8k5q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1dfc1a581 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=477 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=66de3b94-4e89-49b0-b53d-baceda843c87,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=66de3b94-4e89-49b0-b53d-baceda843c87,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/nova-ks-user-l8k5q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=66de3b94-4e89-49b0-b53d-baceda843c87;k8s:batch.kubernetes.io/job-name=nova-ks-user;k8s:component=ks-user;k8s:controller-uid=66de3b94-4e89-49b0-b53d-baceda843c87;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-user;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1dfc1a581 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=477 identity=760 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=66de3b94-4e89-49b0-b53d-baceda843c87,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=66de3b94-4e89-49b0-b53d-baceda843c87,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/nova-ks-user-l8k5q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1dfc1a581 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=477 identity=760 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/nova-ks-user-l8k5q subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c1dfc1a581 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=477 identity=760 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/nova-ks-user-l8k5q subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1dfc1a581 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=477 identity=760 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/nova-ks-user-l8k5q subsys=daemon level=info msg="Delete endpoint request" containerID=c1dfc1a581 endpointID=477 k8sNamespace=openstack k8sPodName=nova-ks-user-l8k5q subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=66de3b94-4e89-49b0-b53d-baceda843c87 k8s:batch.kubernetes.io/job-name=nova-ks-user k8s:component=ks-user k8s:controller-uid=66de3b94-4e89-49b0-b53d-baceda843c87 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-user k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=c1dfc1a581 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=477 identity=760 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/nova-ks-user-l8k5q subsys=endpoint level=info msg="Delete endpoint request" containerID=b14fa60171 endpointID=1344 k8sNamespace=openstack k8sPodName=nova-bootstrap-8qzr4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=f75322d8-94bf-4d1c-b985-d10a131ad70a k8s:batch.kubernetes.io/job-name=nova-bootstrap k8s:component=bootstrap k8s:controller-uid=f75322d8-94bf-4d1c-b985-d10a131ad70a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-bootstrap k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=b14fa60171 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1344 identity=49490 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/nova-bootstrap-8qzr4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 91e09566-88e2-42a6-becc-33e4535575b1 default }" containerID=ea63a64c34b5495b5159756be002553d550d12760b56032da5f149891f5a39b1 datapathConfiguration="&{false false false false false }" interface=lxc9355cbc787b2 k8sPodName=local-path-storage/helper-pod-create-pvc-8b7d9d31-605b-45fe-ac67-5aed4a517b1e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea63a64c34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2431 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b7d9d31-605b-45fe-ac67-5aed4a517b1e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea63a64c34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2431 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b7d9d31-605b-45fe-ac67-5aed4a517b1e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea63a64c34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2431 identity=16789 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b7d9d31-605b-45fe-ac67-5aed4a517b1e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea63a64c34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2431 identity=16789 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b7d9d31-605b-45fe-ac67-5aed4a517b1e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea63a64c34 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2431 identity=16789 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b7d9d31-605b-45fe-ac67-5aed4a517b1e subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea63a64c34 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2431 identity=16789 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b7d9d31-605b-45fe-ac67-5aed4a517b1e subsys=daemon level=info msg="Delete endpoint request" containerID=ea63a64c34 endpointID=2431 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8b7d9d31-605b-45fe-ac67-5aed4a517b1e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ea63a64c34 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2431 identity=16789 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b7d9d31-605b-45fe-ac67-5aed4a517b1e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 ad2114ec-6a03-4063-b89b-52f4143c25d3 default }" containerID=06730d7761d1efd23e8db4e43db6f53ff52a0b7296633f878ddca98f2f96124c datapathConfiguration="&{false false false false false }" interface=lxc3a385a776fc5 k8sPodName=openstack/rabbitmq-neutron-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=06730d7761 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2289 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=06730d7761 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2289 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-neutron;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=06730d7761 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2289 identity=54295 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=06730d7761 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2289 identity=54295 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=06730d7761 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2289 identity=54295 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=06730d7761 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2289 identity=54295 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.164 627bb9a2-a516-401a-b309-bf98171ddcde default }" containerID=d51c5840c810ac3a39a4fb403d0eca5dd9114739eac899590913248506a835b2 datapathConfiguration="&{false false false false false }" interface=lxcbae88564fba7 k8sPodName=openstack/neutron-rpc-server-74d6b796ff-6thf5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d51c5840c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2221 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/neutron-rpc-server-74d6b796ff-6thf5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d51c5840c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2221 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/neutron-rpc-server-74d6b796ff-6thf5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=rpc_server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d51c5840c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2221 identity=5717 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/neutron-rpc-server-74d6b796ff-6thf5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d51c5840c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2221 identity=5717 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/neutron-rpc-server-74d6b796ff-6thf5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 1acf826e-4427-4fc2-83c8-98fbcbc02aa8 default }" containerID=0454b01964a1e7cb5b01e238df97c7d880b363c8c728d35fe311098ec5e4b3d8 datapathConfiguration="&{false false false false false }" interface=lxc947354d52db1 k8sPodName=openstack/neutron-server-d95cc6bcb-w8q5w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0454b01964 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3300 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/neutron-server-d95cc6bcb-w8q5w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0454b01964 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3300 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/neutron-server-d95cc6bcb-w8q5w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0454b01964 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3300 identity=5792 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/neutron-server-d95cc6bcb-w8q5w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0454b01964 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3300 identity=5792 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/neutron-server-d95cc6bcb-w8q5w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 efd88bf8-adfe-46ad-bfc6-c16d9d3ebf2d default }" containerID=9247c07d25da54f668b0ce099821addceb119a69bdc6da143966568d6bbef8f7 datapathConfiguration="&{false false false false false }" interface=lxc7e148a7c09c9 k8sPodName=openstack/neutron-db-init-mbqwj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9247c07d25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/neutron-db-init-mbqwj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9247c07d25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=bbcfb582-ba44-462b-ba76-e4736981841e,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=bbcfb582-ba44-462b-ba76-e4736981841e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/neutron-db-init-mbqwj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=bbcfb582-ba44-462b-ba76-e4736981841e;k8s:batch.kubernetes.io/job-name=neutron-db-init;k8s:component=db-init;k8s:controller-uid=bbcfb582-ba44-462b-ba76-e4736981841e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9247c07d25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 identity=10615 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=bbcfb582-ba44-462b-ba76-e4736981841e,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=bbcfb582-ba44-462b-ba76-e4736981841e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/neutron-db-init-mbqwj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9247c07d25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 identity=10615 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/neutron-db-init-mbqwj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d51c5840c8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2221 identity=5717 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/neutron-rpc-server-74d6b796ff-6thf5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d51c5840c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2221 identity=5717 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/neutron-rpc-server-74d6b796ff-6thf5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0454b01964 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3300 identity=5792 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/neutron-server-d95cc6bcb-w8q5w subsys=endpoint level=info msg="Successful endpoint creation" containerID=0454b01964 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3300 identity=5792 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/neutron-server-d95cc6bcb-w8q5w subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9247c07d25 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1604 identity=10615 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/neutron-db-init-mbqwj subsys=endpoint level=info msg="Successful endpoint creation" containerID=9247c07d25 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1604 identity=10615 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/neutron-db-init-mbqwj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9247c07d25 endpointID=1604 k8sNamespace=openstack k8sPodName=neutron-db-init-mbqwj subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=bbcfb582-ba44-462b-ba76-e4736981841e k8s:batch.kubernetes.io/job-name=neutron-db-init k8s:component=db-init k8s:controller-uid=bbcfb582-ba44-462b-ba76-e4736981841e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=9247c07d25 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1604 identity=10615 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/neutron-db-init-mbqwj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 1e838705-d354-482f-9af3-8845286047a6 default }" containerID=5fe2a25749c546f0865329fcb530bfa0a9b5e14d2a746a10b878100344be5e67 datapathConfiguration="&{false false false false false }" interface=lxc81af33d6aa32 k8sPodName=openstack/neutron-db-sync-bkc7j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5fe2a25749 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/neutron-db-sync-bkc7j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5fe2a25749 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=61273b0a-a7ea-4dfd-aead-e446ddd57eea,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=61273b0a-a7ea-4dfd-aead-e446ddd57eea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/neutron-db-sync-bkc7j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=61273b0a-a7ea-4dfd-aead-e446ddd57eea;k8s:batch.kubernetes.io/job-name=neutron-db-sync;k8s:component=db-sync;k8s:controller-uid=61273b0a-a7ea-4dfd-aead-e446ddd57eea;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-sync;k8s:release_group=neutron;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5fe2a25749 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 identity=6390 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=61273b0a-a7ea-4dfd-aead-e446ddd57eea,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=61273b0a-a7ea-4dfd-aead-e446ddd57eea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/neutron-db-sync-bkc7j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5fe2a25749 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 identity=6390 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/neutron-db-sync-bkc7j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5fe2a25749 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=651 identity=6390 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/neutron-db-sync-bkc7j subsys=endpoint level=info msg="Successful endpoint creation" containerID=5fe2a25749 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=651 identity=6390 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/neutron-db-sync-bkc7j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5fe2a25749 endpointID=651 k8sNamespace=openstack k8sPodName=neutron-db-sync-bkc7j subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=61273b0a-a7ea-4dfd-aead-e446ddd57eea k8s:batch.kubernetes.io/job-name=neutron-db-sync k8s:component=db-sync k8s:controller-uid=61273b0a-a7ea-4dfd-aead-e446ddd57eea k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-sync k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=5fe2a25749 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=651 identity=6390 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/neutron-db-sync-bkc7j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 69567503-265e-4f7c-9a18-bbcd4577b57b default }" containerID=c7f0ffc63d780ccbb14ab83e5109b09d938751ccb5a3f09db836ed5d685bff93 datapathConfiguration="&{false false false false false }" interface=lxcf5c0860b23b9 k8sPodName=openstack/neutron-rabbit-init-w2zsv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7f0ffc63d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2392 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/neutron-rabbit-init-w2zsv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7f0ffc63d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2392 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=b9fbff7e-3d11-4f9f-b0c8-e6362c221e4f,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b9fbff7e-3d11-4f9f-b0c8-e6362c221e4f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/neutron-rabbit-init-w2zsv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=b9fbff7e-3d11-4f9f-b0c8-e6362c221e4f;k8s:batch.kubernetes.io/job-name=neutron-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=b9fbff7e-3d11-4f9f-b0c8-e6362c221e4f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-rabbit-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7f0ffc63d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2392 identity=8267 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=b9fbff7e-3d11-4f9f-b0c8-e6362c221e4f,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b9fbff7e-3d11-4f9f-b0c8-e6362c221e4f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/neutron-rabbit-init-w2zsv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7f0ffc63d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2392 identity=8267 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/neutron-rabbit-init-w2zsv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c7f0ffc63d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2392 identity=8267 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/neutron-rabbit-init-w2zsv subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7f0ffc63d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2392 identity=8267 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/neutron-rabbit-init-w2zsv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c7f0ffc63d endpointID=2392 k8sNamespace=openstack k8sPodName=neutron-rabbit-init-w2zsv subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=b9fbff7e-3d11-4f9f-b0c8-e6362c221e4f k8s:batch.kubernetes.io/job-name=neutron-rabbit-init k8s:component=rabbit-init k8s:controller-uid=b9fbff7e-3d11-4f9f-b0c8-e6362c221e4f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-rabbit-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=c7f0ffc63d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2392 identity=8267 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/neutron-rabbit-init-w2zsv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.248 e74341cf-7fb2-4155-b4b1-2dc0da4085bc default }" containerID=f6e4785103529d77cc74e0a956183fc196ac47c3a584b5b7e74bc3e3b876f416 datapathConfiguration="&{false false false false false }" interface=lxc58ced317ac07 k8sPodName=openstack/neutron-ks-service-4lf4j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f6e4785103 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2145 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/neutron-ks-service-4lf4j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f6e4785103 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2145 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=305cced7-2128-46ea-91aa-555f642a7dcd,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=305cced7-2128-46ea-91aa-555f642a7dcd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/neutron-ks-service-4lf4j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=305cced7-2128-46ea-91aa-555f642a7dcd;k8s:batch.kubernetes.io/job-name=neutron-ks-service;k8s:component=ks-service;k8s:controller-uid=305cced7-2128-46ea-91aa-555f642a7dcd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-service;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f6e4785103 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2145 identity=17389 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=305cced7-2128-46ea-91aa-555f642a7dcd,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=305cced7-2128-46ea-91aa-555f642a7dcd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/neutron-ks-service-4lf4j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f6e4785103 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2145 identity=17389 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/neutron-ks-service-4lf4j subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f6e4785103 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2145 identity=17389 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/neutron-ks-service-4lf4j subsys=endpoint level=info msg="Successful endpoint creation" containerID=f6e4785103 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2145 identity=17389 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/neutron-ks-service-4lf4j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f6e4785103 endpointID=2145 k8sNamespace=openstack k8sPodName=neutron-ks-service-4lf4j subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=305cced7-2128-46ea-91aa-555f642a7dcd k8s:batch.kubernetes.io/job-name=neutron-ks-service k8s:component=ks-service k8s:controller-uid=305cced7-2128-46ea-91aa-555f642a7dcd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-service k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=f6e4785103 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2145 identity=17389 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/neutron-ks-service-4lf4j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 e16aa148-3eaf-4443-871e-fa37aee00040 default }" containerID=79f8fcdda8daf68da0a2cc6f409ebb0c195ef4dc14910c090d81bf4ad01ca062 datapathConfiguration="&{false false false false false }" interface=lxcc3b8f4ef569f k8sPodName=openstack/neutron-ks-endpoints-wh6l6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79f8fcdda8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=359 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/neutron-ks-endpoints-wh6l6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79f8fcdda8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=359 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=d7adcdd5-53c9-41f8-ae78-9c8c67e470bc,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=d7adcdd5-53c9-41f8-ae78-9c8c67e470bc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/neutron-ks-endpoints-wh6l6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=d7adcdd5-53c9-41f8-ae78-9c8c67e470bc;k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=d7adcdd5-53c9-41f8-ae78-9c8c67e470bc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-endpoints;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=79f8fcdda8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=359 identity=31960 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=d7adcdd5-53c9-41f8-ae78-9c8c67e470bc,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=d7adcdd5-53c9-41f8-ae78-9c8c67e470bc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/neutron-ks-endpoints-wh6l6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=79f8fcdda8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=359 identity=31960 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/neutron-ks-endpoints-wh6l6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=79f8fcdda8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=359 identity=31960 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/neutron-ks-endpoints-wh6l6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=79f8fcdda8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=359 identity=31960 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/neutron-ks-endpoints-wh6l6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=79f8fcdda8 endpointID=359 k8sNamespace=openstack k8sPodName=neutron-ks-endpoints-wh6l6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=d7adcdd5-53c9-41f8-ae78-9c8c67e470bc k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=d7adcdd5-53c9-41f8-ae78-9c8c67e470bc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-endpoints k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=79f8fcdda8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=359 identity=31960 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/neutron-ks-endpoints-wh6l6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 b89b3bec-3438-4fd7-a93a-4292bfecd820 default }" containerID=1ef29328102acb06ffa62e0b93629b87709f543a9a09e15283c82a231cdc5a3b datapathConfiguration="&{false false false false false }" interface=lxca90ecc894d6e k8sPodName=openstack/neutron-ks-user-jz5r4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ef2932810 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1509 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/neutron-ks-user-jz5r4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ef2932810 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1509 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=caa2ae33-e41c-4b33-8b75-e1a73b000716,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=caa2ae33-e41c-4b33-8b75-e1a73b000716,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/neutron-ks-user-jz5r4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=caa2ae33-e41c-4b33-8b75-e1a73b000716;k8s:batch.kubernetes.io/job-name=neutron-ks-user;k8s:component=ks-user;k8s:controller-uid=caa2ae33-e41c-4b33-8b75-e1a73b000716;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-user;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ef2932810 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1509 identity=42578 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=caa2ae33-e41c-4b33-8b75-e1a73b000716,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=caa2ae33-e41c-4b33-8b75-e1a73b000716,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/neutron-ks-user-jz5r4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ef2932810 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1509 identity=42578 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/neutron-ks-user-jz5r4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1ef2932810 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1509 identity=42578 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/neutron-ks-user-jz5r4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ef2932810 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1509 identity=42578 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/neutron-ks-user-jz5r4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1ef2932810 endpointID=1509 k8sNamespace=openstack k8sPodName=neutron-ks-user-jz5r4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=caa2ae33-e41c-4b33-8b75-e1a73b000716 k8s:batch.kubernetes.io/job-name=neutron-ks-user k8s:component=ks-user k8s:controller-uid=caa2ae33-e41c-4b33-8b75-e1a73b000716 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-user k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=1ef2932810 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1509 identity=42578 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/neutron-ks-user-jz5r4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 9ca4f247-60f4-42a6-95d5-a1b9b2ecfe9e default }" containerID=a728b643b36f5769388e4e6678601a9c2e278a5bd90633341ae064c4556d34af datapathConfiguration="&{false false false false false }" interface=lxca05cdfe27c38 k8sPodName=openstack/nova-cell-setup-29685720-xm77s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a728b643b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/nova-cell-setup-29685720-xm77s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a728b643b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=e22fc1ed-68e3-407e-801d-74f7503f152a,k8s:batch.kubernetes.io/job-name=nova-cell-setup-29685720,k8s:component=cell-setup,k8s:controller-uid=e22fc1ed-68e3-407e-801d-74f7503f152a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup-29685720,k8s:release_group=nova" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/nova-cell-setup-29685720-xm77s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=e22fc1ed-68e3-407e-801d-74f7503f152a;k8s:batch.kubernetes.io/job-name=nova-cell-setup-29685720;k8s:component=cell-setup;k8s:controller-uid=e22fc1ed-68e3-407e-801d-74f7503f152a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup-29685720;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a728b643b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 identity=912 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=e22fc1ed-68e3-407e-801d-74f7503f152a,k8s:batch.kubernetes.io/job-name=nova-cell-setup-29685720,k8s:component=cell-setup,k8s:controller-uid=e22fc1ed-68e3-407e-801d-74f7503f152a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup-29685720,k8s:release_group=nova" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/nova-cell-setup-29685720-xm77s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a728b643b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 identity=912 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/nova-cell-setup-29685720-xm77s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.89 5e8fc91f-08b8-49c7-b9ae-43491e5a092b default }" containerID=debcf6a73aa00d46cca97b2b00d12eea9ca0cf45ae24450894034866513bdd91 datapathConfiguration="&{false false false false false }" interface=lxce9c88f1c69be k8sPodName=openstack/nova-service-cleaner-29685720-k5xch labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=debcf6a73a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2589 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/nova-service-cleaner-29685720-k5xch subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=debcf6a73a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2589 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=89300d7a-bc6e-42b8-9dd9-96e09246e19f,k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29685720,k8s:component=service-cleaner,k8s:controller-uid=89300d7a-bc6e-42b8-9dd9-96e09246e19f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-service-cleaner-29685720,k8s:release_group=nova" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/nova-service-cleaner-29685720-k5xch subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=89300d7a-bc6e-42b8-9dd9-96e09246e19f;k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29685720;k8s:component=service-cleaner;k8s:controller-uid=89300d7a-bc6e-42b8-9dd9-96e09246e19f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-service-cleaner-29685720;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=debcf6a73a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2589 identity=21456 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=89300d7a-bc6e-42b8-9dd9-96e09246e19f,k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29685720,k8s:component=service-cleaner,k8s:controller-uid=89300d7a-bc6e-42b8-9dd9-96e09246e19f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-service-cleaner-29685720,k8s:release_group=nova" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/nova-service-cleaner-29685720-k5xch oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=debcf6a73a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2589 identity=21456 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/nova-service-cleaner-29685720-k5xch subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a728b643b3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=620 identity=912 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/nova-cell-setup-29685720-xm77s subsys=endpoint level=info msg="Successful endpoint creation" containerID=a728b643b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=620 identity=912 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/nova-cell-setup-29685720-xm77s subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=debcf6a73a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2589 identity=21456 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/nova-service-cleaner-29685720-k5xch subsys=endpoint level=info msg="Successful endpoint creation" containerID=debcf6a73a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2589 identity=21456 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/nova-service-cleaner-29685720-k5xch subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=debcf6a73a endpointID=2589 k8sNamespace=openstack k8sPodName=nova-service-cleaner-29685720-k5xch subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=89300d7a-bc6e-42b8-9dd9-96e09246e19f k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29685720 k8s:component=service-cleaner k8s:controller-uid=89300d7a-bc6e-42b8-9dd9-96e09246e19f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-service-cleaner-29685720 k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=debcf6a73a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2589 identity=21456 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/nova-service-cleaner-29685720-k5xch subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 1412571d-d31a-4f85-af84-05240201efea default }" containerID=b7d7d20bb9a17242b8bb815ed6a4e545a471858099ed838262bebd5e6d7fc75e datapathConfiguration="&{false false false false false }" interface=lxc3f17e0bdbc96 k8sPodName=openstack/cinder-volume-usage-audit-29685725-ghr6p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7d7d20bb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=594 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29685725-ghr6p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7d7d20bb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=594 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=3d333460-e81c-4978-abdc-b8abd4801c99,k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29685725,k8s:component=volume-usage-audit,k8s:controller-uid=3d333460-e81c-4978-abdc-b8abd4801c99,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-volume-usage-audit-29685725,k8s:release_group=cinder" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29685725-ghr6p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=3d333460-e81c-4978-abdc-b8abd4801c99;k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29685725;k8s:component=volume-usage-audit;k8s:controller-uid=3d333460-e81c-4978-abdc-b8abd4801c99;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-volume-usage-audit-29685725;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b7d7d20bb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=594 identity=48791 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=3d333460-e81c-4978-abdc-b8abd4801c99,k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29685725,k8s:component=volume-usage-audit,k8s:controller-uid=3d333460-e81c-4978-abdc-b8abd4801c99,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-volume-usage-audit-29685725,k8s:release_group=cinder" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29685725-ghr6p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7d7d20bb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=594 identity=48791 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29685725-ghr6p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b7d7d20bb9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=594 identity=48791 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29685725-ghr6p subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7d7d20bb9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=594 identity=48791 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29685725-ghr6p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b7d7d20bb9 endpointID=594 k8sNamespace=openstack k8sPodName=cinder-volume-usage-audit-29685725-ghr6p subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=3d333460-e81c-4978-abdc-b8abd4801c99 k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29685725 k8s:component=volume-usage-audit k8s:controller-uid=3d333460-e81c-4978-abdc-b8abd4801c99 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-volume-usage-audit-29685725 k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=b7d7d20bb9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=594 identity=48791 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29685725-ghr6p subsys=endpoint