level=info msg="Memory available for map entries (0.003% of 67421646848B): 168554117B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.49555ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="84.842µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.624155ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="14.881µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=121.053289ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="16.221µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="51.612µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="90.612µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="80.042µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="93.443µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="538.753µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="3.51µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=7.839241ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=5.58315ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="37.071µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="36.521µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="227.476µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="89.454µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="57.292µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=47.451127ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="101.813µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="17.13µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.111.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.989919ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="25.04µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.395772ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="2.84µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.061256ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="5.14µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="4.151µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.25µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.33µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.72µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="27.971µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="30.751µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="48.422µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="264.027µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.54µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="6.52µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="187.566µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="799.972µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.409708ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.96µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="24.02µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.111 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.111 ipAddr.ipv6="" k8sNodeIP=199.19.213.111 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.111" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.80" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.111" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.111} {CiliumInternalIP 10.0.0.80}] 10.0.0.0/24 [] [] 10.0.0.198 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:38901" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.480637973s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="19.37µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="10.45µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="56.842µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="4.36µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1493 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1493 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1493 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.556148634s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=316.093628ms file-path=/var/run/cilium/state/templates/9ea3e2b41750c35e5e10cd78ce0a106d1148c77db8720e6a362a90111f1d718b/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1493 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 4b1c9c36-55f7-4083-bb75-4611dc897526 default }" containerID=133d0af5bc40cae3ad18d6b2d7e902effd8ba7ecb6dce2e8fae5c39d5433b521 datapathConfiguration="&{false false false false false }" interface=lxcfa35ca6f2929 k8sPodName=kube-system/coredns-7c96b6546b-f8b7t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=133d0af5bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2335 ipv4=10.0.0.41 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-f8b7t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=133d0af5bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2335 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.41 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-f8b7t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.85 b53e9357-5bd3-4c48-9c93-0d103229162e default }" containerID=a0bbf5e8a326867ddf401ae7232e67bc3a1814d5719ba347fd32e268ffb5f86c datapathConfiguration="&{false false false false false }" interface=lxc7e70b56be90a k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-w9hhm labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="New endpoint" containerID=a0bbf5e8a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3397 ipv4=10.0.0.85 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-w9hhm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a0bbf5e8a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3397 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=b783b241-158b-4f0e-83cf-97ca91634a53,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=b783b241-158b-4f0e-83cf-97ca91634a53,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.85 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-w9hhm subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=133d0af5bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2335 identity=50674 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.41 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-f8b7t oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a0bbf5e8a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3397 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.85 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-w9hhm line=611 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=133d0af5bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2335 identity=50674 ipv4=10.0.0.41 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-f8b7t subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=b783b241-158b-4f0e-83cf-97ca91634a53;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=b783b241-158b-4f0e-83cf-97ca91634a53;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a0bbf5e8a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3397 identity=27366 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=b783b241-158b-4f0e-83cf-97ca91634a53,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=b783b241-158b-4f0e-83cf-97ca91634a53,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.85 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-w9hhm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a0bbf5e8a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3397 identity=27366 ipv4=10.0.0.85 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-w9hhm subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3343 ipv4=10.0.0.198 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3343 identityLabels="reserved:health" ipv4=10.0.0.198 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3343 identity=4 identityLabels="reserved:health" ipv4=10.0.0.198 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.060440495s file-path=/var/run/cilium/state/templates/d46a5f630734005041259ed015c14fa9fa26d3ba056c4792980277ea6a28de63/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=133d0af5bc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2335 identity=50674 ipv4=10.0.0.41 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-f8b7t subsys=endpoint level=info msg="Successful endpoint creation" containerID=133d0af5bc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2335 identity=50674 ipv4=10.0.0.41 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-f8b7t subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a0bbf5e8a3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3397 identity=27366 ipv4=10.0.0.85 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-w9hhm subsys=endpoint level=info msg="Successful endpoint creation" containerID=a0bbf5e8a3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3397 identity=27366 ipv4=10.0.0.85 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-w9hhm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3343 identity=4 ipv4=10.0.0.198 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a0bbf5e8a3 endpointID=3397 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-w9hhm subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=b783b241-158b-4f0e-83cf-97ca91634a53 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=b783b241-158b-4f0e-83cf-97ca91634a53 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=a0bbf5e8a3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3397 identity=27366 ipv4=10.0.0.85 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-w9hhm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 fcabcb98-3638-4920-a32d-fbd9828882bb default }" containerID=b5c253f3007ad7083706e30105899d6526140c64a77dcdd3d12b77de91b16d9f datapathConfiguration="&{false false false false false }" interface=lxcc9aaa0c08c39 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-f2kkd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b5c253f300 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2053 ipv4=10.0.0.162 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-f2kkd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b5c253f300 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2053 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.162 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-f2kkd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b5c253f300 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2053 identity=17444 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.162 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-f2kkd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b5c253f300 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2053 identity=17444 ipv4=10.0.0.162 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-f2kkd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b5c253f300 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2053 identity=17444 ipv4=10.0.0.162 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-f2kkd subsys=endpoint level=info msg="Successful endpoint creation" containerID=b5c253f300 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2053 identity=17444 ipv4=10.0.0.162 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-f2kkd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1493 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01493 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01493 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01493 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01493:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1493 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 a75c118d-9bb4-4a0a-bf99-a41503d80cba default }" containerID=664f47f51559122b68e2d5563faa1a51f5d65123a9ae342b012b326f06cc4e6d datapathConfiguration="&{false false false false false }" interface=lxc2a2ecae7072e k8sPodName=kube-system/coredns-67659f764b-vhlbv labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.136 3bcf0620-4c3a-40b3-8892-1144031442c0 default }" containerID=0511b7f0ab9dd5fb576358b6fab4eecadab2ba53bbfbd365739019ba77fe9d79 datapathConfiguration="&{false false false false false }" interface=lxc06479d3be81f k8sPodName=kube-system/coredns-67659f764b-gm4vj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0511b7f0ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 ipv4=10.0.0.136 ipv6= k8sPodName=kube-system/coredns-67659f764b-gm4vj subsys=endpoint level=info msg="New endpoint" containerID=664f47f515 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=668 ipv4=10.0.0.149 ipv6= k8sPodName=kube-system/coredns-67659f764b-vhlbv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0511b7f0ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.136 ipv6= k8sPodName=kube-system/coredns-67659f764b-gm4vj subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0511b7f0ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 identity=50674 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.136 ipv6= k8sPodName=kube-system/coredns-67659f764b-gm4vj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0511b7f0ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 identity=50674 ipv4=10.0.0.136 ipv6= k8sPodName=kube-system/coredns-67659f764b-gm4vj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=664f47f515 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=668 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.149 ipv6= k8sPodName=kube-system/coredns-67659f764b-vhlbv subsys=endpoint level=info msg="Identity of endpoint changed" containerID=664f47f515 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=668 identity=50674 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.149 ipv6= k8sPodName=kube-system/coredns-67659f764b-vhlbv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=664f47f515 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=668 identity=50674 ipv4=10.0.0.149 ipv6= k8sPodName=kube-system/coredns-67659f764b-vhlbv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=664f47f515 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=668 identity=50674 ipv4=10.0.0.149 ipv6= k8sPodName=kube-system/coredns-67659f764b-vhlbv subsys=endpoint level=info msg="Successful endpoint creation" containerID=664f47f515 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=668 identity=50674 ipv4=10.0.0.149 ipv6= k8sPodName=kube-system/coredns-67659f764b-vhlbv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0511b7f0ab datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1350 identity=50674 ipv4=10.0.0.136 ipv6= k8sPodName=kube-system/coredns-67659f764b-gm4vj subsys=endpoint level=info msg="Successful endpoint creation" containerID=0511b7f0ab datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1350 identity=50674 ipv4=10.0.0.136 ipv6= k8sPodName=kube-system/coredns-67659f764b-gm4vj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.133 9c60274d-86f8-46a4-a2db-18842072e8e0 default }" containerID=d4d7730bf1a8fba14f0a051b9f69c6a8cac5f08640963e3c74a0328ed7e23bb9 datapathConfiguration="&{false false false false false }" interface=lxccb307736aed2 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-klhn5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d4d7730bf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=443 ipv4=10.0.0.133 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-klhn5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d4d7730bf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=443 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.133 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-klhn5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d4d7730bf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=443 identity=55718 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.133 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-klhn5 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d4d7730bf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=443 identity=55718 ipv4=10.0.0.133 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-klhn5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d4d7730bf1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=443 identity=55718 ipv4=10.0.0.133 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-klhn5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d4d7730bf1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=443 identity=55718 ipv4=10.0.0.133 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-klhn5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=133d0af5bc endpointID=2335 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-f8b7t subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=133d0af5bc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2335 identity=50674 ipv4=10.0.0.41 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-f8b7t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 d28b8133-bcce-42ba-95e3-d466f0393a87 default }" containerID=4f6531f7c593584b040e758111c3f1c2db6c0ed4d6d40b9bde10b12e789b16b0 datapathConfiguration="&{false false false false false }" interface=lxce163a714d122 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-tbknn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f6531f7c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 ipv4=10.0.0.159 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-tbknn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f6531f7c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.159 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-tbknn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4f6531f7c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.159 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-tbknn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4f6531f7c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 identity=25029 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.159 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-tbknn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4f6531f7c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 identity=25029 ipv4=10.0.0.159 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-tbknn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 b043693c-efb1-470b-8f2e-2e2fc2f34516 default }" containerID=5ae43421eae6584673f9705df423e60bd5db89a772db20fa9808f37167cad7d0 datapathConfiguration="&{false false false false false }" interface=lxc92fe24814fbb k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g8lzf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ae43421ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1682 ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g8lzf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ae43421ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1682 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g8lzf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ae43421ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1682 identity=25422 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g8lzf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5ae43421ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1682 identity=25422 ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g8lzf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4f6531f7c5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=589 identity=25029 ipv4=10.0.0.159 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-tbknn subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f6531f7c5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=589 identity=25029 ipv4=10.0.0.159 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-tbknn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.181 cc2d2185-5b60-4b37-a637-c6639147a6af default }" containerID=4d6d7c161b01a1b84cea6bab871742482a7bb918852a7d9c93e53db6e6b9519a datapathConfiguration="&{false false false false false }" interface=lxc90b948695de1 k8sPodName=cert-manager/cert-manager-75c4c745bc-mkfxv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d6d7c161b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2250 ipv4=10.0.0.181 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-mkfxv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d6d7c161b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2250 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.181 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-mkfxv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d6d7c161b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2250 identity=27196 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.181 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-mkfxv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d6d7c161b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2250 identity=27196 ipv4=10.0.0.181 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-mkfxv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5ae43421ea datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1682 identity=25422 ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g8lzf subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ae43421ea datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1682 identity=25422 ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g8lzf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4d6d7c161b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2250 identity=27196 ipv4=10.0.0.181 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-mkfxv subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d6d7c161b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2250 identity=27196 ipv4=10.0.0.181 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-mkfxv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.154 ab3d552d-4fd4-493d-94f8-ba7d711f82b1 default }" containerID=9ca094a9d42076c3d108024fc1c8967a6fabf5048e49f8f23a88621b1c550d59 datapathConfiguration="&{false false false false false }" interface=lxc921dd6392fe0 k8sPodName=cert-manager/cert-manager-startupapicheck-p88n9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ca094a9d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1835 ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-p88n9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ca094a9d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1835 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=74b4ad52-663c-463a-bf89-836a6a85412c,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=74b4ad52-663c-463a-bf89-836a6a85412c,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-p88n9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=74b4ad52-663c-463a-bf89-836a6a85412c;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=74b4ad52-663c-463a-bf89-836a6a85412c;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9ca094a9d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1835 identity=32636 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=74b4ad52-663c-463a-bf89-836a6a85412c,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=74b4ad52-663c-463a-bf89-836a6a85412c,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-p88n9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ca094a9d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1835 identity=32636 ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-p88n9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9ca094a9d4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1835 identity=32636 ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-p88n9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ca094a9d4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1835 identity=32636 ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-p88n9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9ca094a9d4 endpointID=1835 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-p88n9 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=74b4ad52-663c-463a-bf89-836a6a85412c k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=74b4ad52-663c-463a-bf89-836a6a85412c k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=9ca094a9d4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1835 identity=32636 ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-p88n9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.240 e41fd67e-fe2c-4a80-b486-f0a04ba40c9c default }" containerID=5df64cbd610346568fc06f9d62486f3878a18d00e9574352cf0c061aec64efb9 datapathConfiguration="&{false false false false false }" interface=lxcf57c326be30b k8sPodName=ingress-nginx/ingress-nginx-admission-create-99hwh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5df64cbd61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2328 ipv4=10.0.0.240 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-99hwh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5df64cbd61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2328 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=7f969340-6168-493b-9024-2776a25b347a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=7f969340-6168-493b-9024-2776a25b347a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.240 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-99hwh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=7f969340-6168-493b-9024-2776a25b347a;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=7f969340-6168-493b-9024-2776a25b347a;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5df64cbd61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2328 identity=65055 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=7f969340-6168-493b-9024-2776a25b347a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=7f969340-6168-493b-9024-2776a25b347a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.240 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-99hwh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5df64cbd61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2328 identity=65055 ipv4=10.0.0.240 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-99hwh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5df64cbd61 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2328 identity=65055 ipv4=10.0.0.240 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-99hwh subsys=endpoint level=info msg="Successful endpoint creation" containerID=5df64cbd61 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2328 identity=65055 ipv4=10.0.0.240 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-99hwh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5df64cbd61 endpointID=2328 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-99hwh subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=7f969340-6168-493b-9024-2776a25b347a k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=7f969340-6168-493b-9024-2776a25b347a k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=5df64cbd61 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2328 identity=65055 ipv4=10.0.0.240 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-99hwh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 5e1330a1-741a-47b4-baba-0f4ac4b88615 default }" containerID=f01bb1095f6c4f252bf55bc762ddf891c23922b261e1d2abf21bda144d890984 datapathConfiguration="&{false false false false false }" interface=lxc1310556561eb k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-kfnvn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f01bb1095f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 ipv4=10.0.0.31 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-kfnvn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f01bb1095f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.31 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-kfnvn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f01bb1095f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.31 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-kfnvn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f01bb1095f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 identity=39479 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.31 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-kfnvn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f01bb1095f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 identity=39479 ipv4=10.0.0.31 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-kfnvn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f01bb1095f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=257 identity=39479 ipv4=10.0.0.31 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-kfnvn subsys=endpoint level=info msg="Successful endpoint creation" containerID=f01bb1095f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=257 identity=39479 ipv4=10.0.0.31 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-kfnvn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.64 e36d6d81-dd10-4046-9e0d-55202307609b default }" containerID=998da5d10d6423e3d37398e287722549aa44f5c34def437ab9753e4e80364821 datapathConfiguration="&{false false false false false }" interface=lxc8e7e9db686b6 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cw9bv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=998da5d10d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3892 ipv4=10.0.0.64 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cw9bv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=998da5d10d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3892 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c6fde19d-3e93-4e8c-a290-90afe8cfcbc7,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=c6fde19d-3e93-4e8c-a290-90afe8cfcbc7,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.64 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cw9bv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=c6fde19d-3e93-4e8c-a290-90afe8cfcbc7;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=c6fde19d-3e93-4e8c-a290-90afe8cfcbc7;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=998da5d10d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3892 identity=31864 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c6fde19d-3e93-4e8c-a290-90afe8cfcbc7,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=c6fde19d-3e93-4e8c-a290-90afe8cfcbc7,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.64 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cw9bv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=998da5d10d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3892 identity=31864 ipv4=10.0.0.64 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cw9bv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=998da5d10d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3892 identity=31864 ipv4=10.0.0.64 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cw9bv subsys=endpoint level=info msg="Successful endpoint creation" containerID=998da5d10d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3892 identity=31864 ipv4=10.0.0.64 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cw9bv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=998da5d10d endpointID=3892 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-cw9bv subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=c6fde19d-3e93-4e8c-a290-90afe8cfcbc7 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=c6fde19d-3e93-4e8c-a290-90afe8cfcbc7 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=998da5d10d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3892 identity=31864 ipv4=10.0.0.64 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cw9bv subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=dcdd1bbc-ff3d-4c69-846d-968fe3a90ddf] Description:}]" policyAddRequest=25f091d7-9b3a-4431-a360-ddc20ba74e39 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=25f091d7-9b3a-4431-a360-ddc20ba74e39 policyRevision=2 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=e503a9ea-11af-4c1e-b9e1-8e83ef4de618] Description:}]" policyAddRequest=83babaec-5952-46ba-afbe-0309f585e857 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=83babaec-5952-46ba-afbe-0309f585e857 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.212 2c7a381f-8300-4e0a-9147-33ffcd26298d default }" containerID=425a59e42f669b0dc2533eb3147e87d3db36ecf5c3e2194227f17b88cec51c5c datapathConfiguration="&{false false false false false }" interface=lxc332c5ac7c8c3 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-c722c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=425a59e42f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-c722c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=425a59e42f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-c722c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=425a59e42f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identity=23418 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-c722c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=425a59e42f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identity=23418 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-c722c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=425a59e42f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=57 identity=23418 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-c722c subsys=endpoint level=info msg="Successful endpoint creation" containerID=425a59e42f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=57 identity=23418 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-c722c subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.180 f5a5085a-3aba-42cd-90de-d24a4e96760f default }" containerID=a6b794013079dc60735f19bc39cca9da5178c1a1fd5617d4f8d6803d3930b711 datapathConfiguration="&{false false false false false }" interface=lxcf100cd35e948 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-xrrzf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6b7940130 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2092 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-xrrzf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6b7940130 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2092 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-xrrzf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a6b7940130 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2092 identity=47845 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-xrrzf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a6b7940130 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2092 identity=47845 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-xrrzf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a6b7940130 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2092 identity=47845 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-xrrzf subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6b7940130 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2092 identity=47845 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-xrrzf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.232 a4e86897-bb40-42fc-a09e-ee1e18241972 default }" containerID=5648cb78ddcbb6d1f28fa2e8af2a96c01157c96df74fe15cff8bbc9802e792de datapathConfiguration="&{false false false false false }" interface=lxc3d5db93ada72 k8sPodName=openstack/pxc-operator-69cb5bbdb9-w4w59 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5648cb78dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1925 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-w4w59 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5648cb78dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1925 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-w4w59 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5648cb78dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1925 identity=26111 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-w4w59 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5648cb78dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1925 identity=26111 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-w4w59 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5648cb78dd datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1925 identity=26111 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-w4w59 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5648cb78dd datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1925 identity=26111 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-w4w59 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.27 3ac36f36-ef77-4989-836f-8c34bc9e8318 default }" containerID=867814683d70996f9c37a37ec80df8c3c69f27107e530d2564c5dede79e6f49a datapathConfiguration="&{false false false false false }" interface=lxcd1d9471dd760 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=867814683d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1287 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=867814683d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1287 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=867814683d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1287 identity=7637 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=867814683d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1287 identity=7637 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=867814683d datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1287 identity=7637 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=867814683d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1287 identity=7637 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.132 0b73fcfe-7199-471d-a89f-1f673f72b414 default }" containerID=9c618e337071c067681ea185ae3214d1ca9c58b8de8714e07d73aa91dd10460a datapathConfiguration="&{false false false false false }" interface=lxca0bcbdbbf05c k8sPodName=local-path-storage/helper-pod-create-pvc-e7bab801-0ff3-428c-bd0e-4900c642b6da labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c618e3370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 ipv4=10.0.0.132 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7bab801-0ff3-428c-bd0e-4900c642b6da subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c618e3370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.132 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7bab801-0ff3-428c-bd0e-4900c642b6da subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c618e3370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 identity=30459 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.132 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7bab801-0ff3-428c-bd0e-4900c642b6da oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c618e3370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 identity=30459 ipv4=10.0.0.132 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7bab801-0ff3-428c-bd0e-4900c642b6da subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9c618e3370 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=737 identity=30459 ipv4=10.0.0.132 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7bab801-0ff3-428c-bd0e-4900c642b6da subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c618e3370 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=737 identity=30459 ipv4=10.0.0.132 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7bab801-0ff3-428c-bd0e-4900c642b6da subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9c618e3370 endpointID=737 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e7bab801-0ff3-428c-bd0e-4900c642b6da subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9c618e3370 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=737 identity=30459 ipv4=10.0.0.132 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7bab801-0ff3-428c-bd0e-4900c642b6da subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 cf1fef4e-122e-4943-a75f-333bdaf9dff0 default }" containerID=c86a6850381c07d8de9e207a6623e84db43649475e7ac40d993a2ab23ea4a3e8 datapathConfiguration="&{false false false false false }" interface=lxc6c3bc255d892 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c86a685038 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2567 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c86a685038 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2567 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c86a685038 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2567 identity=15149 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c86a685038 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2567 identity=15149 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c86a685038 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2567 identity=15149 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c86a685038 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2567 identity=15149 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=79f312d7-9b8c-4830-8f16-b63ce8250d8a] Description:}]" policyAddRequest=e9bb69ed-8ea9-4167-a3dc-f6a4953623e5 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=e9bb69ed-8ea9-4167-a3dc-f6a4953623e5 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.150 2d74261c-1da1-4500-9303-df2b90ab9c99 default }" containerID=78539fbb8cc59304764b28e365c8fd13e4d3d55788afb2e95fe34e9e393361b9 datapathConfiguration="&{false false false false false }" interface=lxcadab9393f60d k8sPodName=local-path-storage/helper-pod-create-pvc-20668e20-e127-4cd9-b4d7-dabeb41b6842 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=78539fbb8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=474 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-20668e20-e127-4cd9-b4d7-dabeb41b6842 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=78539fbb8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=474 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-20668e20-e127-4cd9-b4d7-dabeb41b6842 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=78539fbb8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=474 identity=30459 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-20668e20-e127-4cd9-b4d7-dabeb41b6842 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=78539fbb8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=474 identity=30459 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-20668e20-e127-4cd9-b4d7-dabeb41b6842 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=78539fbb8c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=474 identity=30459 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-20668e20-e127-4cd9-b4d7-dabeb41b6842 subsys=endpoint level=info msg="Successful endpoint creation" containerID=78539fbb8c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=474 identity=30459 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-20668e20-e127-4cd9-b4d7-dabeb41b6842 subsys=daemon level=info msg="Delete endpoint request" containerID=78539fbb8c endpointID=474 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-20668e20-e127-4cd9-b4d7-dabeb41b6842 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=78539fbb8c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=474 identity=30459 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-20668e20-e127-4cd9-b4d7-dabeb41b6842 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.97 1868c302-83fc-4297-b985-75d2dccd0604 default }" containerID=eb5a495924c1cc1d0a24e1eb8b4086d122e7a3f3a10f87063be87a9f984be9a2 datapathConfiguration="&{false false false false false }" interface=lxc654cbca38de3 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb5a495924 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=854 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb5a495924 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=854 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eb5a495924 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=854 identity=48544 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=eb5a495924 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=854 identity=48544 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eb5a495924 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=854 identity=48544 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb5a495924 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=854 identity=48544 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=ebdda985-5013-48ec-831b-91d66aa10315] Description:}]" policyAddRequest=d0e21218-b1de-4ba2-84f4-f4599f95d78b subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=d0e21218-b1de-4ba2-84f4-f4599f95d78b policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.10 6c3a330d-b6bf-4a39-b85a-ddbd672627cc default }" containerID=e4b098dce43fdc29afdd214fb05c5ea2e0e502a6074025f581cd309eccf2a573 datapathConfiguration="&{false false false false false }" interface=lxc67d726c4f71f k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4b098dce4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1137 ipv4=10.0.0.10 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4b098dce4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1137 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.10 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e4b098dce4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1137 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.10 ipv6= k8sPodName=auth-system/keycloak-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e4b098dce4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1137 identity=2443 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.10 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4b098dce4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1137 identity=2443 ipv4=10.0.0.10 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e4b098dce4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1137 identity=2443 ipv4=10.0.0.10 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4b098dce4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1137 identity=2443 ipv4=10.0.0.10 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.008714677993155411 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.18 ede45830-4da2-4d16-8664-5fe90163b656 default }" containerID=7e3593ab8e4999f3e6f78b884773959e05df47a30ea050cd0089774953bd7213 datapathConfiguration="&{false false false false false }" interface=lxce2e2afa5aaaa k8sPodName=monitoring/node-feature-discovery-worker-vpxql labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e3593ab8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1717 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-vpxql subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e3593ab8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1717 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-vpxql subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.171 647d64c8-0aff-4bd7-9cec-05778f819389 default }" containerID=34e579db453e7d93b6b2351c43447596c7d5e5c90ef7c6387e4d984ddd837e4f datapathConfiguration="&{false false false false false }" interface=lxcbaa880bcb594 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-vlbb9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34e579db45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=718 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-vlbb9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34e579db45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=718 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-vlbb9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7e3593ab8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1717 identity=3348 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-vpxql oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7e3593ab8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1717 identity=3348 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-vpxql subsys=endpoint level=info msg="Invalid state transition skipped" containerID=34e579db45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=718 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-vlbb9 line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34e579db45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=718 identity=50098 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-vlbb9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34e579db45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=718 identity=50098 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-vlbb9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.177 20be97b2-6541-4e5e-9151-f94fa5c4b695 default }" containerID=1732230522754499c985c80b6d8ea31644d2e229c95f780fc06ac1382f20db63 datapathConfiguration="&{false false false false false }" interface=lxcbd175fafd6e1 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r4np2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1732230522 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1457 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r4np2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1732230522 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1457 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r4np2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1732230522 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1457 identity=5013 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r4np2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1732230522 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1457 identity=5013 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r4np2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7e3593ab8e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1717 identity=3348 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-vpxql subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e3593ab8e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1717 identity=3348 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-vpxql subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1732230522 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1457 identity=5013 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r4np2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1732230522 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1457 identity=5013 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r4np2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=34e579db45 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=718 identity=50098 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-vlbb9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=34e579db45 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=718 identity=50098 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-vlbb9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.14 f906787b-5f54-4f12-a441-0a6e67c6ea9b default }" containerID=a2aeb9129b6dfdb1ebae6589b4be185715a2d84e43adfc10b04ba1b3d5591264 datapathConfiguration="&{false false false false false }" interface=lxcd75143a0be19 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4hp9j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2aeb9129b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 ipv4=10.0.0.14 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4hp9j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2aeb9129b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.14 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4hp9j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a2aeb9129b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identity=28856 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.14 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4hp9j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a2aeb9129b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identity=28856 ipv4=10.0.0.14 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4hp9j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a2aeb9129b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=194 identity=28856 ipv4=10.0.0.14 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4hp9j subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2aeb9129b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=194 identity=28856 ipv4=10.0.0.14 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4hp9j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1493 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-179-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01493 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01493 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01493 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01493:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1493 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.235 881a97c1-e60a-4342-b83a-8dce86e7f8d1 default }" containerID=57a43ade777b5b25182d7a6a44b71ff042e0a14a1c7b294a9b6f8dd2d2d99623 datapathConfiguration="&{false false false false false }" interface=lxce31d201b9b60 k8sPodName=monitoring/kube-prometheus-stack-admission-create-mfmkh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57a43ade77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2969 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-mfmkh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57a43ade77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2969 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=f0c5ff6c-4e43-4eda-856a-cecfa91b994f,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=f0c5ff6c-4e43-4eda-856a-cecfa91b994f,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-mfmkh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=f0c5ff6c-4e43-4eda-856a-cecfa91b994f;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=f0c5ff6c-4e43-4eda-856a-cecfa91b994f;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=57a43ade77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2969 identity=29950 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=f0c5ff6c-4e43-4eda-856a-cecfa91b994f,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=f0c5ff6c-4e43-4eda-856a-cecfa91b994f,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-mfmkh oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=57a43ade77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2969 identity=29950 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-mfmkh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=57a43ade77 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2969 identity=29950 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-mfmkh subsys=endpoint level=info msg="Successful endpoint creation" containerID=57a43ade77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2969 identity=29950 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-mfmkh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=57a43ade77 endpointID=2969 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-mfmkh subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=f0c5ff6c-4e43-4eda-856a-cecfa91b994f k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=f0c5ff6c-4e43-4eda-856a-cecfa91b994f k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=57a43ade77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2969 identity=29950 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-mfmkh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 358a2583-4108-4a47-9ab9-ed425908bdec default }" containerID=fdeaf961012ed1a92d5e702b5d1bc8974af3eb677a36e423a6e2612b384c8545 datapathConfiguration="&{false false false false false }" interface=lxce09212a461b2 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mbsr7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fdeaf96101 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=335 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mbsr7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fdeaf96101 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=335 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mbsr7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fdeaf96101 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=335 identity=43242 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mbsr7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fdeaf96101 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=335 identity=43242 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mbsr7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.199 2f5dcc18-c796-42ae-913e-d2a4593e5b64 default }" containerID=d66a073d907c734746f0767d1520b93f1de059ef8e897f727ef9ab5c8cb018a7 datapathConfiguration="&{false false false false false }" interface=lxcf487c01d2857 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-vnfdh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d66a073d90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1478 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-vnfdh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d66a073d90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1478 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-vnfdh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d66a073d90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1478 identity=4089 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-vnfdh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d66a073d90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1478 identity=4089 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-vnfdh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 70f32186-f017-49ce-a40c-aacc703464ab default }" containerID=99d6aa543dc5f2d8564835c859d748de39d5cf242e71292495455f137b639db9 datapathConfiguration="&{false false false false false }" interface=lxc100c5eee5c3c k8sPodName=monitoring/kube-prometheus-stack-grafana-558f58b56b-xjgnv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=99d6aa543d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3653 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-558f58b56b-xjgnv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=99d6aa543d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3653 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-558f58b56b-xjgnv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=99d6aa543d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3653 identity=8189 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-558f58b56b-xjgnv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=99d6aa543d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3653 identity=8189 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-558f58b56b-xjgnv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fdeaf96101 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=335 identity=43242 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mbsr7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fdeaf96101 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=335 identity=43242 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mbsr7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d66a073d90 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1478 identity=4089 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-vnfdh subsys=endpoint level=info msg="Successful endpoint creation" containerID=d66a073d90 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1478 identity=4089 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-vnfdh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=99d6aa543d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3653 identity=8189 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-558f58b56b-xjgnv subsys=endpoint level=info msg="Successful endpoint creation" containerID=99d6aa543d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3653 identity=8189 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-558f58b56b-xjgnv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.115 3bcb4bbb-f48a-4bf9-89d8-6fe6b64a6520 default }" containerID=d95178f54a58b35dd0737cba482d7e3c8c45665831e9c27dbde9bc02a4a56098 datapathConfiguration="&{false false false false false }" interface=lxc4a2618a028b9 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-94qhh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d95178f54a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1258 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-94qhh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d95178f54a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1258 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=21ca6e5e-f658-43b0-827f-f4e6887180f2,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=21ca6e5e-f658-43b0-827f-f4e6887180f2,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-94qhh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=21ca6e5e-f658-43b0-827f-f4e6887180f2;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=21ca6e5e-f658-43b0-827f-f4e6887180f2;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d95178f54a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1258 identity=41976 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=21ca6e5e-f658-43b0-827f-f4e6887180f2,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=21ca6e5e-f658-43b0-827f-f4e6887180f2,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-94qhh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d95178f54a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1258 identity=41976 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-94qhh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d95178f54a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1258 identity=41976 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-94qhh subsys=endpoint level=info msg="Successful endpoint creation" containerID=d95178f54a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1258 identity=41976 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-94qhh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.106 d7b82af1-a705-4a22-824a-e67588215910 default }" containerID=cee808552c14d5fe93db5cddcdcd59367a7cedd6b540518720449c49e45d5777 datapathConfiguration="&{false false false false false }" interface=lxc76dbc618775c k8sPodName=local-path-storage/helper-pod-create-pvc-60db6530-bce1-48bd-bbbf-9d1982816383 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cee808552c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1577 ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-60db6530-bce1-48bd-bbbf-9d1982816383 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cee808552c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1577 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-60db6530-bce1-48bd-bbbf-9d1982816383 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cee808552c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1577 identity=30459 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-60db6530-bce1-48bd-bbbf-9d1982816383 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cee808552c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1577 identity=30459 ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-60db6530-bce1-48bd-bbbf-9d1982816383 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cee808552c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1577 identity=30459 ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-60db6530-bce1-48bd-bbbf-9d1982816383 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cee808552c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1577 identity=30459 ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-60db6530-bce1-48bd-bbbf-9d1982816383 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.26 28a98eba-8b05-44d4-ac2c-ebdbf044dd61 default }" containerID=0809e421bfa920bd6cbd772920b4ed3a3b633f20ffe9b09764161c97f9100c3a datapathConfiguration="&{false false false false false }" interface=lxc97e71e03da17 k8sPodName=local-path-storage/helper-pod-create-pvc-858306d1-bd39-468f-bbf3-2ef9087e33af labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0809e421bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3396 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-858306d1-bd39-468f-bbf3-2ef9087e33af subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0809e421bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3396 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-858306d1-bd39-468f-bbf3-2ef9087e33af subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0809e421bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3396 identity=30459 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-858306d1-bd39-468f-bbf3-2ef9087e33af oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0809e421bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3396 identity=30459 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-858306d1-bd39-468f-bbf3-2ef9087e33af subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0809e421bf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3396 identity=30459 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-858306d1-bd39-468f-bbf3-2ef9087e33af subsys=endpoint level=info msg="Successful endpoint creation" containerID=0809e421bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3396 identity=30459 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-858306d1-bd39-468f-bbf3-2ef9087e33af subsys=daemon level=info msg="Delete endpoint request" containerID=d95178f54a endpointID=1258 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-94qhh subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=21ca6e5e-f658-43b0-827f-f4e6887180f2 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=21ca6e5e-f658-43b0-827f-f4e6887180f2 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=d95178f54a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1258 identity=41976 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-94qhh subsys=endpoint level=info msg="Delete endpoint request" containerID=cee808552c endpointID=1577 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-60db6530-bce1-48bd-bbbf-9d1982816383 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=0809e421bf endpointID=3396 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-858306d1-bd39-468f-bbf3-2ef9087e33af subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=cee808552c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1577 identity=30459 ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-60db6530-bce1-48bd-bbbf-9d1982816383 subsys=endpoint level=info msg="Removed endpoint" containerID=0809e421bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3396 identity=30459 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-858306d1-bd39-468f-bbf3-2ef9087e33af subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 d68cc165-bbc3-4f3f-99c4-6b9ae3ccb85e default }" containerID=ab5635b14920f40532326215c3c3d856ec0ad84529db0e7b4e99d4d4531cf274 datapathConfiguration="&{false false false false false }" interface=lxcd13be5f8a8e2 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ab5635b149 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2461 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab5635b149 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2461 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ab5635b149 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2461 identity=43082 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ab5635b149 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2461 identity=43082 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ab5635b149 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2461 identity=43082 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab5635b149 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2461 identity=43082 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.244 25ff1dbb-e1b5-46ec-bf88-3da78a83fcf3 default }" containerID=23b3bb20b57d26a6ef27af899ca2cdf1c2f91c509e3fe4e0b5c708bae6204b29 datapathConfiguration="&{false false false false false }" interface=lxc1e847fdf76be k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23b3bb20b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2260 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23b3bb20b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2260 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23b3bb20b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2260 identity=12913 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23b3bb20b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2260 identity=12913 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=23b3bb20b5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2260 identity=12913 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=23b3bb20b5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2260 identity=12913 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.22 380f17df-adb3-4258-bd8f-f3e4ecec60dd default }" containerID=89a69ac5d6c431058ed59b95d3da4c42e7e66e4706b5b4bcd09b0688d3e5d26a datapathConfiguration="&{false false false false false }" interface=lxce54f40117b8b k8sPodName=monitoring/loki-gateway-cf54cb88c-4xw6l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=89a69ac5d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3152 ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-4xw6l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=89a69ac5d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3152 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-4xw6l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=89a69ac5d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3152 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-4xw6l line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=89a69ac5d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3152 identity=30818 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-4xw6l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=89a69ac5d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3152 identity=30818 ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-4xw6l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 2020078c-d6b5-4665-b8a5-32eda832e8de default }" containerID=449706ba1ab8ced2906521587fa4b0dfe1fc09b9111be91269c2d4a4b1fe254f datapathConfiguration="&{false false false false false }" interface=lxc7583f397ddb8 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.79 efd3d088-15b7-41ee-a1c7-3fd3836b261a default }" containerID=789a4cd3b388dd1e8685f88078a16a1c7f32488943f27ef5d30c9ff735321490 datapathConfiguration="&{false false false false false }" interface=lxc500655410a9f k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=449706ba1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3228 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="New endpoint" containerID=789a4cd3b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=449706ba1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3228 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=789a4cd3b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=449706ba1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3228 identity=28517 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=449706ba1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3228 identity=28517 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=789a4cd3b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 identity=15539 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=789a4cd3b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 identity=15539 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=89a69ac5d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3152 identity=30818 ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-4xw6l subsys=endpoint level=info msg="Successful endpoint creation" containerID=89a69ac5d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3152 identity=30818 ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-4xw6l subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.32 82d1039d-8384-459e-8470-e6f0b2321c74 default }" containerID=a0c905372f9322d1dac221b7bb0cfef7e9031aac16805a993a953fa736d45cc1 datapathConfiguration="&{false false false false false }" interface=lxc3092d9f45ad7 k8sPodName=local-path-storage/helper-pod-create-pvc-e09b80e3-d8bc-4e10-b3e0-91dc395906ab labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a0c905372f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e09b80e3-d8bc-4e10-b3e0-91dc395906ab subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a0c905372f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e09b80e3-d8bc-4e10-b3e0-91dc395906ab subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a0c905372f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 identity=30459 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e09b80e3-d8bc-4e10-b3e0-91dc395906ab oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a0c905372f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 identity=30459 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e09b80e3-d8bc-4e10-b3e0-91dc395906ab subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=789a4cd3b3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=423 identity=15539 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=789a4cd3b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=423 identity=15539 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=449706ba1a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3228 identity=28517 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=449706ba1a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3228 identity=28517 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a0c905372f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=587 identity=30459 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e09b80e3-d8bc-4e10-b3e0-91dc395906ab subsys=endpoint level=info msg="Successful endpoint creation" containerID=a0c905372f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=587 identity=30459 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e09b80e3-d8bc-4e10-b3e0-91dc395906ab subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.225 cd5b0103-8df0-4080-adfc-2397d311d2ed default }" containerID=d179badcdac1082cf60fdafbc6991f1aac22fc0a202d8e6de0a925e57c5a942f datapathConfiguration="&{false false false false false }" interface=lxc75651edd4883 k8sPodName=monitoring/vector-xthgq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d179badcda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1007 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/vector-xthgq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d179badcda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1007 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/vector-xthgq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d179badcda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1007 identity=9986 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/vector-xthgq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d179badcda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1007 identity=9986 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/vector-xthgq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d179badcda datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1007 identity=9986 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/vector-xthgq subsys=endpoint level=info msg="Successful endpoint creation" containerID=d179badcda datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1007 identity=9986 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/vector-xthgq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a0c905372f endpointID=587 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e09b80e3-d8bc-4e10-b3e0-91dc395906ab subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a0c905372f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=587 identity=30459 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e09b80e3-d8bc-4e10-b3e0-91dc395906ab subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 02a44d89-3aea-4892-a110-fce73fe3724b default }" containerID=b19036fc152f504b6aece927df82e69b0e58357b48c5776a975b352af8c2da1a datapathConfiguration="&{false false false false false }" interface=lxcd51c75c5c8c9 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b19036fc15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1209 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b19036fc15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1209 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b19036fc15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1209 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b19036fc15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1209 identity=53533 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b19036fc15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1209 identity=53533 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b19036fc15 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1209 identity=53533 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b19036fc15 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1209 identity=53533 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.20 2b24f1d1-a047-4902-a182-e482e05331b1 default }" containerID=cdc7879825e3d4c42dcaf844c327fc6ade04bbc4e7e4a883c487711df5d0cf9e datapathConfiguration="&{false false false false false }" interface=lxc142c7344b1b3 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-fb6rw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cdc7879825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1663 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-fb6rw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cdc7879825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1663 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-fb6rw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=cdc7879825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1663 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-fb6rw line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=cdc7879825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1663 identity=35684 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-fb6rw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cdc7879825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1663 identity=35684 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-fb6rw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cdc7879825 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1663 identity=35684 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-fb6rw subsys=endpoint level=info msg="Successful endpoint creation" containerID=cdc7879825 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1663 identity=35684 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-fb6rw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.12 61f091d9-80ae-4f3b-bfea-d38fe237ec22 default }" containerID=9baf56bf3b72daabd105bd83669b2a410e156b2ed770dec6c29b6fe3b0c3c8d6 datapathConfiguration="&{false false false false false }" interface=lxcb5ca72c16b23 k8sPodName=openstack/memcached-memcached-6479589586-f4wlr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9baf56bf3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-f4wlr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9baf56bf3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-f4wlr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9baf56bf3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 identity=45094 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-f4wlr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9baf56bf3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 identity=45094 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-f4wlr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9baf56bf3b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=412 identity=45094 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-f4wlr subsys=endpoint level=info msg="Successful endpoint creation" containerID=9baf56bf3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=412 identity=45094 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-f4wlr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.64 c4d3b38c-bcb8-4562-8bd7-0883cf2a9ccf default }" containerID=736f9f8e302ae3e7839708fd11b8e5e9b597a18a2439eb2ee89ee957e95ef342 datapathConfiguration="&{false false false false false }" interface=lxcb5a63d6c7af7 k8sPodName=local-path-storage/helper-pod-create-pvc-99841666-d12d-4e13-9fe6-f99a4394ba6f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=736f9f8e30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-99841666-d12d-4e13-9fe6-f99a4394ba6f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=736f9f8e30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-99841666-d12d-4e13-9fe6-f99a4394ba6f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=736f9f8e30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 identity=30459 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-99841666-d12d-4e13-9fe6-f99a4394ba6f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=736f9f8e30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 identity=30459 ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-99841666-d12d-4e13-9fe6-f99a4394ba6f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=736f9f8e30 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=77 identity=30459 ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-99841666-d12d-4e13-9fe6-f99a4394ba6f subsys=endpoint level=info msg="Successful endpoint creation" containerID=736f9f8e30 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=77 identity=30459 ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-99841666-d12d-4e13-9fe6-f99a4394ba6f subsys=daemon level=info msg="Delete endpoint request" containerID=736f9f8e30 endpointID=77 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-99841666-d12d-4e13-9fe6-f99a4394ba6f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=736f9f8e30 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=77 identity=30459 ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-99841666-d12d-4e13-9fe6-f99a4394ba6f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 fadcd8f5-0873-4e6c-badc-5f0714794b79 default }" containerID=c53f6375b86dcb528b0d113982a09c0391c0928ad150bb0ef8d03acb77d01e2e datapathConfiguration="&{false false false false false }" interface=lxcfe573b674c49 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c53f6375b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2076 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c53f6375b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2076 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c53f6375b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2076 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.116 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c53f6375b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2076 identity=41476 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c53f6375b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2076 identity=41476 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c53f6375b8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2076 identity=41476 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c53f6375b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2076 identity=41476 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.228 d04241ea-84e6-4afa-92fc-87912970b3c8 default }" containerID=0a90ca0b1065d0d433bf21760c48538e6285379c1d812a5ee91aff40c93ed9f2 datapathConfiguration="&{false false false false false }" interface=lxc27c8bf421a9a k8sPodName=openstack/keystone-api-85d5ff78dd-mxsdc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a90ca0b10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2575 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-api-85d5ff78dd-mxsdc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a90ca0b10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2575 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-api-85d5ff78dd-mxsdc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a90ca0b10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2575 identity=12021 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-api-85d5ff78dd-mxsdc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a90ca0b10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2575 identity=12021 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-api-85d5ff78dd-mxsdc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.141 7e1653f7-b5fd-4409-a0f2-eb6e4f24a3e8 default }" containerID=d9aefdb5b9764f2c8ddfa3dce69a8134ed8bc12be67adf5e57c5e886a6586229 datapathConfiguration="&{false false false false false }" interface=lxc7e584a290d4a k8sPodName=openstack/keystone-credential-setup-b8w7q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d9aefdb5b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=133 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-credential-setup-b8w7q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d9aefdb5b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=133 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d7f4f622-f1c1-4776-81b4-659a062c4396,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=d7f4f622-f1c1-4776-81b4-659a062c4396,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-credential-setup-b8w7q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d7f4f622-f1c1-4776-81b4-659a062c4396;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=d7f4f622-f1c1-4776-81b4-659a062c4396;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d9aefdb5b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=133 identity=17421 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d7f4f622-f1c1-4776-81b4-659a062c4396,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=d7f4f622-f1c1-4776-81b4-659a062c4396,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-credential-setup-b8w7q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d9aefdb5b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=133 identity=17421 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-credential-setup-b8w7q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0a90ca0b10 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2575 identity=12021 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-api-85d5ff78dd-mxsdc subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a90ca0b10 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2575 identity=12021 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-api-85d5ff78dd-mxsdc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d9aefdb5b9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=133 identity=17421 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-credential-setup-b8w7q subsys=endpoint level=info msg="Successful endpoint creation" containerID=d9aefdb5b9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=133 identity=17421 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-credential-setup-b8w7q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d9aefdb5b9 endpointID=133 k8sNamespace=openstack k8sPodName=keystone-credential-setup-b8w7q subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d7f4f622-f1c1-4776-81b4-659a062c4396 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=d7f4f622-f1c1-4776-81b4-659a062c4396 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d9aefdb5b9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=133 identity=17421 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-credential-setup-b8w7q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 e19a13bb-05aa-4bc7-abf6-435f280eb973 default }" containerID=058fda7ee5a81b872126efd7a78c918aaf65969a7cd6c22e6cd3725f52056c51 datapathConfiguration="&{false false false false false }" interface=lxca5a565c9ecb7 k8sPodName=openstack/keystone-db-init-76cqk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=058fda7ee5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-db-init-76cqk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=058fda7ee5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a21d71dd-2746-4a35-bb5b-d6cb7d02cbc0,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=a21d71dd-2746-4a35-bb5b-d6cb7d02cbc0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-db-init-76cqk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a21d71dd-2746-4a35-bb5b-d6cb7d02cbc0;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=a21d71dd-2746-4a35-bb5b-d6cb7d02cbc0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=058fda7ee5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 identity=45627 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a21d71dd-2746-4a35-bb5b-d6cb7d02cbc0,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=a21d71dd-2746-4a35-bb5b-d6cb7d02cbc0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-db-init-76cqk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=058fda7ee5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 identity=45627 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-db-init-76cqk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=058fda7ee5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=891 identity=45627 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-db-init-76cqk subsys=endpoint level=info msg="Successful endpoint creation" containerID=058fda7ee5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=891 identity=45627 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-db-init-76cqk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=058fda7ee5 endpointID=891 k8sNamespace=openstack k8sPodName=keystone-db-init-76cqk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a21d71dd-2746-4a35-bb5b-d6cb7d02cbc0 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=a21d71dd-2746-4a35-bb5b-d6cb7d02cbc0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=058fda7ee5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=891 identity=45627 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-db-init-76cqk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.19 ec126f65-c7ee-47fd-b6f4-f7e065cd8b60 default }" containerID=a2e37c1dada08f9a596528f87ef7ce103d8b6c18b2bc773dedb7c3b315d0b24e datapathConfiguration="&{false false false false false }" interface=lxcc1cb935ff170 k8sPodName=openstack/keystone-fernet-setup-h82sm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2e37c1dad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=458 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/keystone-fernet-setup-h82sm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2e37c1dad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=458 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=87db0437-127b-4db6-be85-09326a15f377,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=87db0437-127b-4db6-be85-09326a15f377,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/keystone-fernet-setup-h82sm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=87db0437-127b-4db6-be85-09326a15f377;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=87db0437-127b-4db6-be85-09326a15f377;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a2e37c1dad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=458 identity=23347 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=87db0437-127b-4db6-be85-09326a15f377,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=87db0437-127b-4db6-be85-09326a15f377,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/keystone-fernet-setup-h82sm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a2e37c1dad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=458 identity=23347 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/keystone-fernet-setup-h82sm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a2e37c1dad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=458 identity=23347 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/keystone-fernet-setup-h82sm subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2e37c1dad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=458 identity=23347 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/keystone-fernet-setup-h82sm subsys=daemon level=info msg="Delete endpoint request" containerID=a2e37c1dad endpointID=458 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-h82sm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=87db0437-127b-4db6-be85-09326a15f377 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=87db0437-127b-4db6-be85-09326a15f377 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a2e37c1dad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=458 identity=23347 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/keystone-fernet-setup-h82sm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.24 00ea3820-0575-4e40-bb53-0608f308c833 default }" containerID=66320499e0f25c2280308bbd2254aee91381fca51cd08f56ea6aaf14c5d9ed98 datapathConfiguration="&{false false false false false }" interface=lxc2df0b04a34d8 k8sPodName=openstack/keystone-db-sync-jvc6b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=66320499e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=680 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/keystone-db-sync-jvc6b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=66320499e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=680 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c87792cc-ef9c-412e-9a85-4242e6c0b2e1,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=c87792cc-ef9c-412e-9a85-4242e6c0b2e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/keystone-db-sync-jvc6b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c87792cc-ef9c-412e-9a85-4242e6c0b2e1;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=c87792cc-ef9c-412e-9a85-4242e6c0b2e1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=66320499e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=680 identity=23303 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c87792cc-ef9c-412e-9a85-4242e6c0b2e1,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=c87792cc-ef9c-412e-9a85-4242e6c0b2e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/keystone-db-sync-jvc6b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=66320499e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=680 identity=23303 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/keystone-db-sync-jvc6b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=66320499e0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=680 identity=23303 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/keystone-db-sync-jvc6b subsys=endpoint level=info msg="Successful endpoint creation" containerID=66320499e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=680 identity=23303 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/keystone-db-sync-jvc6b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=66320499e0 endpointID=680 k8sNamespace=openstack k8sPodName=keystone-db-sync-jvc6b subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c87792cc-ef9c-412e-9a85-4242e6c0b2e1 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=c87792cc-ef9c-412e-9a85-4242e6c0b2e1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=66320499e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=680 identity=23303 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/keystone-db-sync-jvc6b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 674a8041-a865-4f9a-91e2-ea9fe6532c37 default }" containerID=84d6426f99dbdc515a90d5b0d3f3b84c1425b7dcf62393dcc86171be6b7ecdcc datapathConfiguration="&{false false false false false }" interface=lxcb7ac2b6c2d6d k8sPodName=openstack/keystone-rabbit-init-p768w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=84d6426f99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2892 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-rabbit-init-p768w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=84d6426f99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2892 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=459fd782-d448-49c6-88be-3dd9451937b7,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=459fd782-d448-49c6-88be-3dd9451937b7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-rabbit-init-p768w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=459fd782-d448-49c6-88be-3dd9451937b7;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=459fd782-d448-49c6-88be-3dd9451937b7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=84d6426f99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2892 identity=37006 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=459fd782-d448-49c6-88be-3dd9451937b7,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=459fd782-d448-49c6-88be-3dd9451937b7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-rabbit-init-p768w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=84d6426f99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2892 identity=37006 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-rabbit-init-p768w subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=84d6426f99 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2892 identity=37006 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-rabbit-init-p768w subsys=endpoint level=info msg="Successful endpoint creation" containerID=84d6426f99 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2892 identity=37006 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-rabbit-init-p768w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=84d6426f99 endpointID=2892 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-p768w subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=459fd782-d448-49c6-88be-3dd9451937b7 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=459fd782-d448-49c6-88be-3dd9451937b7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=84d6426f99 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2892 identity=37006 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-rabbit-init-p768w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 897d54e5-2810-4b3c-86b3-ff83255bb8bc default }" containerID=3a5966fc18ffa61a54397759a50f58c300ec8266adec8e9be99eddd2e13b8fae datapathConfiguration="&{false false false false false }" interface=lxc2e55dd33a150 k8sPodName=openstack/keystone-domain-manage-xpw8k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3a5966fc18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-domain-manage-xpw8k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a5966fc18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9d2e8470-9ed0-4c4c-b2ae-a7814d170905,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=9d2e8470-9ed0-4c4c-b2ae-a7814d170905,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-domain-manage-xpw8k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9d2e8470-9ed0-4c4c-b2ae-a7814d170905;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=9d2e8470-9ed0-4c4c-b2ae-a7814d170905;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=3a5966fc18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 identity=7310 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9d2e8470-9ed0-4c4c-b2ae-a7814d170905,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=9d2e8470-9ed0-4c4c-b2ae-a7814d170905,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-domain-manage-xpw8k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a5966fc18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 identity=7310 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-domain-manage-xpw8k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3a5966fc18 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=236 identity=7310 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-domain-manage-xpw8k subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a5966fc18 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=236 identity=7310 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-domain-manage-xpw8k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3a5966fc18 endpointID=236 k8sNamespace=openstack k8sPodName=keystone-domain-manage-xpw8k subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9d2e8470-9ed0-4c4c-b2ae-a7814d170905 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=9d2e8470-9ed0-4c4c-b2ae-a7814d170905 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3a5966fc18 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=236 identity=7310 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-domain-manage-xpw8k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.211 8dbd86f7-0d4d-4249-8ca6-929d2362dd23 default }" containerID=ff447d76f0fb91d5ab594c08a48cfd9ce441cc0e8740ba2f67f1dac908f7033d datapathConfiguration="&{false false false false false }" interface=lxcecfa4ee64a61 k8sPodName=openstack/keystone-bootstrap-qrz4g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff447d76f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-bootstrap-qrz4g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff447d76f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b62d3b0f-2164-4a33-8767-03de591adab3,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b62d3b0f-2164-4a33-8767-03de591adab3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-bootstrap-qrz4g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b62d3b0f-2164-4a33-8767-03de591adab3;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=b62d3b0f-2164-4a33-8767-03de591adab3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff447d76f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 identity=31840 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b62d3b0f-2164-4a33-8767-03de591adab3,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b62d3b0f-2164-4a33-8767-03de591adab3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-bootstrap-qrz4g oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ff447d76f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 identity=31840 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-bootstrap-qrz4g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ff447d76f0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=785 identity=31840 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-bootstrap-qrz4g subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff447d76f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=785 identity=31840 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-bootstrap-qrz4g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ff447d76f0 endpointID=785 k8sNamespace=openstack k8sPodName=keystone-bootstrap-qrz4g subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b62d3b0f-2164-4a33-8767-03de591adab3 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=b62d3b0f-2164-4a33-8767-03de591adab3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ff447d76f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=785 identity=31840 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-bootstrap-qrz4g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 e1c6e4ec-f7bf-42e0-99ba-17079c85472d default }" containerID=f352754f2b732010979cdc27e1257f1115cb029c1d8f8aaa6f0221564f7839e3 datapathConfiguration="&{false false false false false }" interface=lxc3febf0008f7b k8sPodName=local-path-storage/helper-pod-create-pvc-34b85ab4-4949-4b0d-8166-3de183fcae5a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f352754f2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3825 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-34b85ab4-4949-4b0d-8166-3de183fcae5a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f352754f2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3825 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-34b85ab4-4949-4b0d-8166-3de183fcae5a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f352754f2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3825 identity=30459 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-34b85ab4-4949-4b0d-8166-3de183fcae5a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f352754f2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3825 identity=30459 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-34b85ab4-4949-4b0d-8166-3de183fcae5a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f352754f2b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3825 identity=30459 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-34b85ab4-4949-4b0d-8166-3de183fcae5a subsys=endpoint level=info msg="Successful endpoint creation" containerID=f352754f2b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3825 identity=30459 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-34b85ab4-4949-4b0d-8166-3de183fcae5a subsys=daemon level=info msg="Delete endpoint request" containerID=f352754f2b endpointID=3825 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-34b85ab4-4949-4b0d-8166-3de183fcae5a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f352754f2b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3825 identity=30459 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-34b85ab4-4949-4b0d-8166-3de183fcae5a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 83e8ba0b-17a9-4013-a99a-47e31deb1fdd default }" containerID=e66c7846b1004c0d200816b296c669c44e408edb8161dde88cc968b2bf3965fc datapathConfiguration="&{false false false false false }" interface=lxc5b7536ad758b k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e66c7846b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=758 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e66c7846b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=758 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=e66c7846b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=758 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e66c7846b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=758 identity=19273 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e66c7846b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=758 identity=19273 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e66c7846b1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=758 identity=19273 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e66c7846b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=758 identity=19273 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.034087681090805795 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.238 ad46d828-c856-4334-9e4b-11ec3f6fd22c default }" containerID=6ed5e121adaaf892c48d1e3b1861e6314cdbd6871eddeadefd32ba455c4d3a5d datapathConfiguration="&{false false false false false }" interface=lxce078e8bd1674 k8sPodName=openstack/barbican-api-75f6ccf74d-jms2k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ed5e121ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=296 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/barbican-api-75f6ccf74d-jms2k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ed5e121ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=296 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/barbican-api-75f6ccf74d-jms2k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ed5e121ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=296 identity=5472 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/barbican-api-75f6ccf74d-jms2k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ed5e121ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=296 identity=5472 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/barbican-api-75f6ccf74d-jms2k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.11 72efb32b-f022-4a7f-9098-d49cc6c97af6 default }" containerID=be7d717137d10f8ecc60ac89870a855bb0d6952a708fda85aa997e194d8ea516 datapathConfiguration="&{false false false false false }" interface=lxccaf7506c36e0 k8sPodName=openstack/barbican-db-init-c4bwm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=be7d717137 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/barbican-db-init-c4bwm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=be7d717137 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3f54a61d-2912-475c-8043-740d0f7e353d,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=3f54a61d-2912-475c-8043-740d0f7e353d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/barbican-db-init-c4bwm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3f54a61d-2912-475c-8043-740d0f7e353d;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=3f54a61d-2912-475c-8043-740d0f7e353d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=be7d717137 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 identity=8395 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3f54a61d-2912-475c-8043-740d0f7e353d,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=3f54a61d-2912-475c-8043-740d0f7e353d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/barbican-db-init-c4bwm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=be7d717137 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 identity=8395 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/barbican-db-init-c4bwm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6ed5e121ad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=296 identity=5472 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/barbican-api-75f6ccf74d-jms2k subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ed5e121ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=296 identity=5472 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/barbican-api-75f6ccf74d-jms2k subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=be7d717137 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=904 identity=8395 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/barbican-db-init-c4bwm subsys=endpoint level=info msg="Successful endpoint creation" containerID=be7d717137 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=904 identity=8395 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/barbican-db-init-c4bwm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=be7d717137 endpointID=904 k8sNamespace=openstack k8sPodName=barbican-db-init-c4bwm subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3f54a61d-2912-475c-8043-740d0f7e353d k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=3f54a61d-2912-475c-8043-740d0f7e353d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=be7d717137 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=904 identity=8395 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/barbican-db-init-c4bwm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 4542aa02-6bf2-496c-9d5f-0fc896f27214 default }" containerID=a162c8fd804100b66ede36df951f0447fcc916565fbc3789ece5907659cd3c93 datapathConfiguration="&{false false false false false }" interface=lxc461e1affee66 k8sPodName=openstack/barbican-db-sync-stcz7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a162c8fd80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=844 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/barbican-db-sync-stcz7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a162c8fd80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=844 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a93f72e0-795b-46c3-983c-973bd861715d,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=a93f72e0-795b-46c3-983c-973bd861715d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/barbican-db-sync-stcz7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a162c8fd80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=844 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.15 ipv6= k8sPodName=openstack/barbican-db-sync-stcz7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a93f72e0-795b-46c3-983c-973bd861715d;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=a93f72e0-795b-46c3-983c-973bd861715d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a162c8fd80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=844 identity=34501 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a93f72e0-795b-46c3-983c-973bd861715d,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=a93f72e0-795b-46c3-983c-973bd861715d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/barbican-db-sync-stcz7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a162c8fd80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=844 identity=34501 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/barbican-db-sync-stcz7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a162c8fd80 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=844 identity=34501 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/barbican-db-sync-stcz7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a162c8fd80 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=844 identity=34501 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/barbican-db-sync-stcz7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a162c8fd80 endpointID=844 k8sNamespace=openstack k8sPodName=barbican-db-sync-stcz7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a93f72e0-795b-46c3-983c-973bd861715d k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=a93f72e0-795b-46c3-983c-973bd861715d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=a162c8fd80 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=844 identity=34501 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/barbican-db-sync-stcz7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 a16eee27-6c38-4929-b6bd-42903899be26 default }" containerID=d242bbba9af4107aafe7662fa59d9f9a0b362748000ee439537096ca1fdf69f4 datapathConfiguration="&{false false false false false }" interface=lxc1ec820903ede k8sPodName=openstack/barbican-rabbit-init-bkggv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d242bbba9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3258 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/barbican-rabbit-init-bkggv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d242bbba9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3258 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=95aaa266-c392-4308-b864-3d4620498d97,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=95aaa266-c392-4308-b864-3d4620498d97,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/barbican-rabbit-init-bkggv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=95aaa266-c392-4308-b864-3d4620498d97;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=95aaa266-c392-4308-b864-3d4620498d97;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d242bbba9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3258 identity=4418 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=95aaa266-c392-4308-b864-3d4620498d97,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=95aaa266-c392-4308-b864-3d4620498d97,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/barbican-rabbit-init-bkggv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d242bbba9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3258 identity=4418 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/barbican-rabbit-init-bkggv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d242bbba9a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3258 identity=4418 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/barbican-rabbit-init-bkggv subsys=endpoint level=info msg="Successful endpoint creation" containerID=d242bbba9a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3258 identity=4418 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/barbican-rabbit-init-bkggv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d242bbba9a endpointID=3258 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-bkggv subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=95aaa266-c392-4308-b864-3d4620498d97 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=95aaa266-c392-4308-b864-3d4620498d97 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d242bbba9a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3258 identity=4418 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/barbican-rabbit-init-bkggv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.206 6082502f-9846-433c-879b-68d94c4e6e90 default }" containerID=0ccfcb3fa27e43972ea74db8bc713f72b242c72f3c9cb13811b9efff7c6423ac datapathConfiguration="&{false false false false false }" interface=lxcb1ef8a13263a k8sPodName=openstack/barbican-ks-service-v6wsd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ccfcb3fa2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=258 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/barbican-ks-service-v6wsd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ccfcb3fa2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=258 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=aa4faa78-f73c-4d9a-a2eb-bffdb49e0e7d,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=aa4faa78-f73c-4d9a-a2eb-bffdb49e0e7d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/barbican-ks-service-v6wsd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0ccfcb3fa2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=258 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.206 ipv6= k8sPodName=openstack/barbican-ks-service-v6wsd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=aa4faa78-f73c-4d9a-a2eb-bffdb49e0e7d;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=aa4faa78-f73c-4d9a-a2eb-bffdb49e0e7d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0ccfcb3fa2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=258 identity=28418 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=aa4faa78-f73c-4d9a-a2eb-bffdb49e0e7d,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=aa4faa78-f73c-4d9a-a2eb-bffdb49e0e7d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/barbican-ks-service-v6wsd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ccfcb3fa2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=258 identity=28418 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/barbican-ks-service-v6wsd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0ccfcb3fa2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=258 identity=28418 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/barbican-ks-service-v6wsd subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ccfcb3fa2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=258 identity=28418 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/barbican-ks-service-v6wsd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0ccfcb3fa2 endpointID=258 k8sNamespace=openstack k8sPodName=barbican-ks-service-v6wsd subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=aa4faa78-f73c-4d9a-a2eb-bffdb49e0e7d k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=aa4faa78-f73c-4d9a-a2eb-bffdb49e0e7d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=0ccfcb3fa2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=258 identity=28418 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/barbican-ks-service-v6wsd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 5c96fb04-d6c6-4e7b-afe2-8a6df4d08c4e default }" containerID=acc44d39ceb73b88ac572c7072c270a7a52a6408ec7ca5d66be353dbe4b2da5f datapathConfiguration="&{false false false false false }" interface=lxc19bd393a15a9 k8sPodName=openstack/barbican-ks-endpoints-nl582 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=acc44d39ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3937 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/barbican-ks-endpoints-nl582 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=acc44d39ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3937 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=89aa95ff-e8d6-49c7-b8e5-357b1e5bc055,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=89aa95ff-e8d6-49c7-b8e5-357b1e5bc055,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/barbican-ks-endpoints-nl582 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=89aa95ff-e8d6-49c7-b8e5-357b1e5bc055;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=89aa95ff-e8d6-49c7-b8e5-357b1e5bc055;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=acc44d39ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3937 identity=33693 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=89aa95ff-e8d6-49c7-b8e5-357b1e5bc055,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=89aa95ff-e8d6-49c7-b8e5-357b1e5bc055,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/barbican-ks-endpoints-nl582 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=acc44d39ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3937 identity=33693 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/barbican-ks-endpoints-nl582 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=acc44d39ce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3937 identity=33693 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/barbican-ks-endpoints-nl582 subsys=endpoint level=info msg="Successful endpoint creation" containerID=acc44d39ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3937 identity=33693 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/barbican-ks-endpoints-nl582 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=acc44d39ce endpointID=3937 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-nl582 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=89aa95ff-e8d6-49c7-b8e5-357b1e5bc055 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=89aa95ff-e8d6-49c7-b8e5-357b1e5bc055 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=acc44d39ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3937 identity=33693 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/barbican-ks-endpoints-nl582 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 8ba0222a-8efd-4c25-955e-0f76c47a6d01 default }" containerID=474a54e55a1815520750bc1fcf19d8c3eabc974ffa16f7c895793b475ae35308 datapathConfiguration="&{false false false false false }" interface=lxcd8adc0500c61 k8sPodName=openstack/barbican-ks-user-5rm85 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=474a54e55a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1188 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/barbican-ks-user-5rm85 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=474a54e55a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1188 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=83770f60-6742-4848-a48b-2fd697c860e7,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=83770f60-6742-4848-a48b-2fd697c860e7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/barbican-ks-user-5rm85 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=83770f60-6742-4848-a48b-2fd697c860e7;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=83770f60-6742-4848-a48b-2fd697c860e7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=474a54e55a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1188 identity=21144 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=83770f60-6742-4848-a48b-2fd697c860e7,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=83770f60-6742-4848-a48b-2fd697c860e7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/barbican-ks-user-5rm85 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=474a54e55a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1188 identity=21144 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/barbican-ks-user-5rm85 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=474a54e55a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1188 identity=21144 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/barbican-ks-user-5rm85 subsys=endpoint level=info msg="Successful endpoint creation" containerID=474a54e55a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1188 identity=21144 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/barbican-ks-user-5rm85 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=474a54e55a endpointID=1188 k8sNamespace=openstack k8sPodName=barbican-ks-user-5rm85 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=83770f60-6742-4848-a48b-2fd697c860e7 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=83770f60-6742-4848-a48b-2fd697c860e7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=474a54e55a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1188 identity=21144 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/barbican-ks-user-5rm85 subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.155 685ff84e-a64e-4a03-a9dd-af100496a546 default }" containerID=aff160f6aac77f2aafbdfacf6c9c7ab202be1eb93915384ce741338c2aa670a7 datapathConfiguration="&{false false false false false }" interface=lxca643a352ca92 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-j6fjg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aff160f6aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 ipv4=10.0.0.155 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-j6fjg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aff160f6aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.155 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-j6fjg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=aff160f6aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.155 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-j6fjg line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=aff160f6aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 identity=63517 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.155 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-j6fjg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aff160f6aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 identity=63517 ipv4=10.0.0.155 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-j6fjg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aff160f6aa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=975 identity=63517 ipv4=10.0.0.155 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-j6fjg subsys=endpoint level=info msg="Successful endpoint creation" containerID=aff160f6aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=975 identity=63517 ipv4=10.0.0.155 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-j6fjg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.237 83a2367e-a253-4a17-8245-7ab3f79430ee default }" containerID=fc4b2288445d0e6f966a406a92608560b4d2ea360bccec6774e644ec4484248b datapathConfiguration="&{false false false false false }" interface=lxc12524fe2d55e k8sPodName=openstack/rook-ceph-detect-version-vk9ks labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc4b228844 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1042 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vk9ks subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc4b228844 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1042 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=738c7ecf-44df-4d26-b1b3-223c7052812a,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=738c7ecf-44df-4d26-b1b3-223c7052812a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vk9ks subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=738c7ecf-44df-4d26-b1b3-223c7052812a;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=738c7ecf-44df-4d26-b1b3-223c7052812a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc4b228844 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1042 identity=29676 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=738c7ecf-44df-4d26-b1b3-223c7052812a,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=738c7ecf-44df-4d26-b1b3-223c7052812a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vk9ks oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc4b228844 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1042 identity=29676 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vk9ks subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fc4b228844 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1042 identity=29676 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vk9ks subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc4b228844 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1042 identity=29676 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vk9ks subsys=daemon level=info msg="Delete endpoint request" containerID=fc4b228844 endpointID=1042 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-vk9ks subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=738c7ecf-44df-4d26-b1b3-223c7052812a k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=738c7ecf-44df-4d26-b1b3-223c7052812a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=fc4b228844 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1042 identity=29676 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vk9ks subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 16b996c5-ea5b-4cbc-9330-427d90d81bfb default }" containerID=adfd1d4a5ae450d4aed564d743cd93fbb389d6a74fcb41bb270294a2351a47e6 datapathConfiguration="&{false false false false false }" interface=lxcdaab292ef066 k8sPodName=openstack/ceph-object-controller-detect-version-jfrv4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=adfd1d4a5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jfrv4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=adfd1d4a5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=6444fa35-ebf8-452a-8734-8ca1e427c811,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=6444fa35-ebf8-452a-8734-8ca1e427c811,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jfrv4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=6444fa35-ebf8-452a-8734-8ca1e427c811;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=6444fa35-ebf8-452a-8734-8ca1e427c811;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=adfd1d4a5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 identity=43129 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=6444fa35-ebf8-452a-8734-8ca1e427c811,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=6444fa35-ebf8-452a-8734-8ca1e427c811,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jfrv4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=adfd1d4a5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 identity=43129 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jfrv4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=adfd1d4a5a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=866 identity=43129 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jfrv4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=adfd1d4a5a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=866 identity=43129 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jfrv4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=adfd1d4a5a endpointID=866 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-jfrv4 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=6444fa35-ebf8-452a-8734-8ca1e427c811 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=6444fa35-ebf8-452a-8734-8ca1e427c811 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=adfd1d4a5a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=866 identity=43129 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jfrv4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 c00875ed-2563-4fb1-b647-0e4ce54fdfca default }" containerID=7c892d236ebf00db3ccde0af0d35be47ccef17faff777aaf83ce3b0d28565aff datapathConfiguration="&{false false false false false }" interface=lxcf698d0e01feb k8sPodName=local-path-storage/helper-pod-create-pvc-6a6c9d5d-285a-44ec-a9ef-cfb229d94f22 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c892d236e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1897 ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a6c9d5d-285a-44ec-a9ef-cfb229d94f22 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c892d236e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1897 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a6c9d5d-285a-44ec-a9ef-cfb229d94f22 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c892d236e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1897 identity=30459 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a6c9d5d-285a-44ec-a9ef-cfb229d94f22 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c892d236e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1897 identity=30459 ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a6c9d5d-285a-44ec-a9ef-cfb229d94f22 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c892d236e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1897 identity=30459 ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a6c9d5d-285a-44ec-a9ef-cfb229d94f22 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c892d236e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1897 identity=30459 ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a6c9d5d-285a-44ec-a9ef-cfb229d94f22 subsys=daemon level=info msg="Delete endpoint request" containerID=7c892d236e endpointID=1897 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6a6c9d5d-285a-44ec-a9ef-cfb229d94f22 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7c892d236e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1897 identity=30459 ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a6c9d5d-285a-44ec-a9ef-cfb229d94f22 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 5917a547-97d6-459b-a1f9-415601f7518b default }" containerID=e810cba2b7d25ea662e9e6f0ae20c06ece3b65f10a890c84013e5f602197fd79 datapathConfiguration="&{false false false false false }" interface=lxc9e21b7b6c6cd k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e810cba2b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2496 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e810cba2b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2496 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e810cba2b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2496 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.200 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e810cba2b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2496 identity=41577 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e810cba2b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2496 identity=41577 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e810cba2b7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2496 identity=41577 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e810cba2b7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2496 identity=41577 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.51 98dc85a1-8861-461f-ac80-64b951d2f5a2 default }" containerID=55b3f741142620ffce5127e617076d1af5e69a1cc49396148488da96a6d0a114 datapathConfiguration="&{false false false false false }" interface=lxc97fd5be09d24 k8sPodName=openstack/glance-db-init-z7kpw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=55b3f74114 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=427 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-init-z7kpw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=55b3f74114 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=427 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=430549a8-183a-4e4e-934e-b1b3590b85de,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=430549a8-183a-4e4e-934e-b1b3590b85de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-init-z7kpw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=430549a8-183a-4e4e-934e-b1b3590b85de;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=430549a8-183a-4e4e-934e-b1b3590b85de;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=55b3f74114 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=427 identity=4751 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=430549a8-183a-4e4e-934e-b1b3590b85de,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=430549a8-183a-4e4e-934e-b1b3590b85de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-init-z7kpw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=55b3f74114 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=427 identity=4751 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-init-z7kpw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=55b3f74114 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=427 identity=4751 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-init-z7kpw subsys=endpoint level=info msg="Successful endpoint creation" containerID=55b3f74114 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=427 identity=4751 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-init-z7kpw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.144 3edcfeb4-d735-469e-a879-24b12a92a43f default }" containerID=048fd6837ca17007d5cc8bec75072fdf3ed8706a815e526bd2423932a1cb709d datapathConfiguration="&{false false false false false }" interface=lxc748d1394da6f k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-7sgcd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=048fd6837c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2524 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-7sgcd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=048fd6837c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2524 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-7sgcd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=048fd6837c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2524 identity=29698 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-7sgcd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=048fd6837c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2524 identity=29698 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-7sgcd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.32 928b41d8-0206-4822-ba96-42566c55e275 default }" containerID=c02dfc8262bf4a304300d8f7311c846fc10d9f0988bcb06ff757bb4e58448f13 datapathConfiguration="&{false false false false false }" interface=lxcaa02af0f56c3 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9prpl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c02dfc8262 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9prpl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c02dfc8262 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9prpl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c02dfc8262 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 identity=1295 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9prpl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c02dfc8262 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 identity=1295 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9prpl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=048fd6837c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2524 identity=29698 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-7sgcd subsys=endpoint level=info msg="Successful endpoint creation" containerID=048fd6837c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2524 identity=29698 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-7sgcd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c02dfc8262 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=6 identity=1295 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9prpl subsys=endpoint level=info msg="Successful endpoint creation" containerID=c02dfc8262 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=6 identity=1295 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9prpl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=55b3f74114 endpointID=427 k8sNamespace=openstack k8sPodName=glance-db-init-z7kpw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=430549a8-183a-4e4e-934e-b1b3590b85de k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=430549a8-183a-4e4e-934e-b1b3590b85de k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=55b3f74114 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=427 identity=4751 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-init-z7kpw subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.115 4bf4df8d-34b4-43db-a538-368315017289 default }" containerID=648dc923e0b1197136c7bd19cb37264a4ba6a68d01984927e7593a2fb3c87582 datapathConfiguration="&{false false false false false }" interface=lxcc39b75f930c8 k8sPodName=openstack/glance-db-sync-kqqpg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=648dc923e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-db-sync-kqqpg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=648dc923e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a4b9edae-9645-49db-bf52-8301977aa25a,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=a4b9edae-9645-49db-bf52-8301977aa25a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-db-sync-kqqpg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=648dc923e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-db-sync-kqqpg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a4b9edae-9645-49db-bf52-8301977aa25a;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=a4b9edae-9645-49db-bf52-8301977aa25a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=648dc923e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 identity=26989 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a4b9edae-9645-49db-bf52-8301977aa25a,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=a4b9edae-9645-49db-bf52-8301977aa25a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-db-sync-kqqpg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=648dc923e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 identity=26989 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-db-sync-kqqpg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=648dc923e0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=159 identity=26989 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-db-sync-kqqpg subsys=endpoint level=info msg="Successful endpoint creation" containerID=648dc923e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=159 identity=26989 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-db-sync-kqqpg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=648dc923e0 endpointID=159 k8sNamespace=openstack k8sPodName=glance-db-sync-kqqpg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a4b9edae-9645-49db-bf52-8301977aa25a k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=a4b9edae-9645-49db-bf52-8301977aa25a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=648dc923e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=159 identity=26989 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-db-sync-kqqpg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.168 37e6376b-8de3-456e-b3e6-c466ef6805af default }" containerID=9145b75362d46906b008731001d52646da0cda31f799e6cd45ea3b2efb13d992 datapathConfiguration="&{false false false false false }" interface=lxcb814fee89e68 k8sPodName=openstack/glance-rabbit-init-bhcc6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9145b75362 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=792 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/glance-rabbit-init-bhcc6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9145b75362 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=792 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ba6d4d06-b6e6-4168-9e90-c1ef323fd318,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ba6d4d06-b6e6-4168-9e90-c1ef323fd318,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/glance-rabbit-init-bhcc6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ba6d4d06-b6e6-4168-9e90-c1ef323fd318;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ba6d4d06-b6e6-4168-9e90-c1ef323fd318;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9145b75362 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=792 identity=14960 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ba6d4d06-b6e6-4168-9e90-c1ef323fd318,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ba6d4d06-b6e6-4168-9e90-c1ef323fd318,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/glance-rabbit-init-bhcc6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9145b75362 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=792 identity=14960 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/glance-rabbit-init-bhcc6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9145b75362 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=792 identity=14960 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/glance-rabbit-init-bhcc6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9145b75362 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=792 identity=14960 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/glance-rabbit-init-bhcc6 subsys=daemon level=info msg="Delete endpoint request" containerID=9145b75362 endpointID=792 k8sNamespace=openstack k8sPodName=glance-rabbit-init-bhcc6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ba6d4d06-b6e6-4168-9e90-c1ef323fd318 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ba6d4d06-b6e6-4168-9e90-c1ef323fd318 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9145b75362 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=792 identity=14960 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/glance-rabbit-init-bhcc6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.11 2488c911-b880-4c70-89d2-7266d6993ceb default }" containerID=082e5470a51e1f699cdc20af661300fc0f347c0405c192d48d75f44174027282 datapathConfiguration="&{false false false false false }" interface=lxc9637fd9e0e0d k8sPodName=openstack/glance-ks-service-d2rvv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=082e5470a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=308 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-service-d2rvv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=082e5470a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=308 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=449abe88-fe25-4496-9de9-3fdfe9733c9c,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=449abe88-fe25-4496-9de9-3fdfe9733c9c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-service-d2rvv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=449abe88-fe25-4496-9de9-3fdfe9733c9c;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=449abe88-fe25-4496-9de9-3fdfe9733c9c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=082e5470a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=308 identity=19911 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=449abe88-fe25-4496-9de9-3fdfe9733c9c,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=449abe88-fe25-4496-9de9-3fdfe9733c9c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-service-d2rvv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=082e5470a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=308 identity=19911 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-service-d2rvv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=082e5470a5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=308 identity=19911 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-service-d2rvv subsys=endpoint level=info msg="Successful endpoint creation" containerID=082e5470a5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=308 identity=19911 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-service-d2rvv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=082e5470a5 endpointID=308 k8sNamespace=openstack k8sPodName=glance-ks-service-d2rvv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=449abe88-fe25-4496-9de9-3fdfe9733c9c k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=449abe88-fe25-4496-9de9-3fdfe9733c9c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=082e5470a5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=308 identity=19911 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-service-d2rvv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.30 d99d8132-a943-4708-bad0-271e0b0a1ecf default }" containerID=c1e0e66291232112d5a364ab41d295f5f61783ca6ee918a9be14b2444f4e4b67 datapathConfiguration="&{false false false false false }" interface=lxc8854901e4ec2 k8sPodName=openstack/glance-ks-endpoints-f8xzr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1e0e66291 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2142 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-ks-endpoints-f8xzr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1e0e66291 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2142 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b8f9af56-c241-4406-8992-b31c14dfc3ee,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b8f9af56-c241-4406-8992-b31c14dfc3ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-ks-endpoints-f8xzr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c1e0e66291 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2142 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-ks-endpoints-f8xzr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b8f9af56-c241-4406-8992-b31c14dfc3ee;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=b8f9af56-c241-4406-8992-b31c14dfc3ee;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1e0e66291 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2142 identity=13849 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b8f9af56-c241-4406-8992-b31c14dfc3ee,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b8f9af56-c241-4406-8992-b31c14dfc3ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-ks-endpoints-f8xzr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1e0e66291 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2142 identity=13849 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-ks-endpoints-f8xzr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c1e0e66291 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2142 identity=13849 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-ks-endpoints-f8xzr subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1e0e66291 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2142 identity=13849 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-ks-endpoints-f8xzr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c1e0e66291 endpointID=2142 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-f8xzr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b8f9af56-c241-4406-8992-b31c14dfc3ee k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=b8f9af56-c241-4406-8992-b31c14dfc3ee k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c1e0e66291 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2142 identity=13849 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-ks-endpoints-f8xzr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 1669cccc-0ea0-4dee-a071-cb030a04d5e0 default }" containerID=5d8a35c8f66946b05d1e0a827dd7efa39e6f37508b52366d7a56b384cc5eb266 datapathConfiguration="&{false false false false false }" interface=lxc934e1e919c88 k8sPodName=openstack/glance-ks-user-tthbk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d8a35c8f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=999 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-ks-user-tthbk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d8a35c8f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=999 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f2f6536c-9ebc-4a75-b1ec-43447eb9d3a4,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=f2f6536c-9ebc-4a75-b1ec-43447eb9d3a4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-ks-user-tthbk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f2f6536c-9ebc-4a75-b1ec-43447eb9d3a4;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=f2f6536c-9ebc-4a75-b1ec-43447eb9d3a4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d8a35c8f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=999 identity=25448 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f2f6536c-9ebc-4a75-b1ec-43447eb9d3a4,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=f2f6536c-9ebc-4a75-b1ec-43447eb9d3a4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-ks-user-tthbk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5d8a35c8f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=999 identity=25448 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-ks-user-tthbk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5d8a35c8f6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=999 identity=25448 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-ks-user-tthbk subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d8a35c8f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=999 identity=25448 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-ks-user-tthbk subsys=daemon level=info msg="Delete endpoint request" containerID=5d8a35c8f6 endpointID=999 k8sNamespace=openstack k8sPodName=glance-ks-user-tthbk subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f2f6536c-9ebc-4a75-b1ec-43447eb9d3a4 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=f2f6536c-9ebc-4a75-b1ec-43447eb9d3a4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5d8a35c8f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=999 identity=25448 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-ks-user-tthbk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 1fe4ec0f-235b-413b-9593-9ea9e55f45f0 default }" containerID=42ebf1e4a9b964d2a83d00d9fa4db445a97b2d8fee48790043eee28a38a45ca0 datapathConfiguration="&{false false false false false }" interface=lxcd34f79a6e085 k8sPodName=openstack/glance-metadefs-load-bsv4l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=42ebf1e4a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1042 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-metadefs-load-bsv4l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=42ebf1e4a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1042 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d0a20f5b-7c7c-498b-8ef7-d2a2362b63a7,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=d0a20f5b-7c7c-498b-8ef7-d2a2362b63a7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-metadefs-load-bsv4l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d0a20f5b-7c7c-498b-8ef7-d2a2362b63a7;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=d0a20f5b-7c7c-498b-8ef7-d2a2362b63a7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=42ebf1e4a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1042 identity=19089 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d0a20f5b-7c7c-498b-8ef7-d2a2362b63a7,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=d0a20f5b-7c7c-498b-8ef7-d2a2362b63a7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-metadefs-load-bsv4l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=42ebf1e4a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1042 identity=19089 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-metadefs-load-bsv4l subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=42ebf1e4a9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1042 identity=19089 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-metadefs-load-bsv4l subsys=endpoint level=info msg="Successful endpoint creation" containerID=42ebf1e4a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1042 identity=19089 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-metadefs-load-bsv4l subsys=daemon level=info msg="Delete endpoint request" containerID=42ebf1e4a9 endpointID=1042 k8sNamespace=openstack k8sPodName=glance-metadefs-load-bsv4l subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d0a20f5b-7c7c-498b-8ef7-d2a2362b63a7 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=d0a20f5b-7c7c-498b-8ef7-d2a2362b63a7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=42ebf1e4a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1042 identity=19089 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-metadefs-load-bsv4l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 df549d2d-9402-42e3-994f-5e6188ea70be default }" containerID=de6fc1600853d533ca2f33af0f29a5fc462e08a601348e4b15df0a0a46fceddf datapathConfiguration="&{false false false false false }" interface=lxcaac3a4ff1c91 k8sPodName=openstack/glance-storage-init-r8nqz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de6fc16008 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2329 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-storage-init-r8nqz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de6fc16008 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2329 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=190c0603-7ca1-477d-a972-9c70fc3f1d90,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=190c0603-7ca1-477d-a972-9c70fc3f1d90,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-storage-init-r8nqz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=190c0603-7ca1-477d-a972-9c70fc3f1d90;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=190c0603-7ca1-477d-a972-9c70fc3f1d90;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de6fc16008 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2329 identity=4049 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=190c0603-7ca1-477d-a972-9c70fc3f1d90,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=190c0603-7ca1-477d-a972-9c70fc3f1d90,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-storage-init-r8nqz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de6fc16008 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2329 identity=4049 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-storage-init-r8nqz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=de6fc16008 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2329 identity=4049 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-storage-init-r8nqz subsys=endpoint level=info msg="Successful endpoint creation" containerID=de6fc16008 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2329 identity=4049 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-storage-init-r8nqz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=de6fc16008 endpointID=2329 k8sNamespace=openstack k8sPodName=glance-storage-init-r8nqz subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=190c0603-7ca1-477d-a972-9c70fc3f1d90 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=190c0603-7ca1-477d-a972-9c70fc3f1d90 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=de6fc16008 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2329 identity=4049 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-storage-init-r8nqz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 47c93ff6-e048-4817-a7bc-224145a21d14 default }" containerID=bad7ee6f90ee320f10e4a121eae7e31f1eaa564a48a05a57f33d42593c48be77 datapathConfiguration="&{false false false false false }" interface=lxc0edf632ab266 k8sPodName=openstack/glance-api-6c9c5794f7-crqrj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bad7ee6f90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1687 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-api-6c9c5794f7-crqrj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bad7ee6f90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1687 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-api-6c9c5794f7-crqrj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bad7ee6f90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1687 identity=30003 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-api-6c9c5794f7-crqrj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bad7ee6f90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1687 identity=30003 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-api-6c9c5794f7-crqrj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bad7ee6f90 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1687 identity=30003 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-api-6c9c5794f7-crqrj subsys=endpoint level=info msg="Successful endpoint creation" containerID=bad7ee6f90 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1687 identity=30003 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-api-6c9c5794f7-crqrj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.95 1067fbf1-424e-4eb2-925f-d9124d5c61f7 default }" containerID=454d50d649fedc20f8946470de36ec6c56e5b31699c69dd71a56486ddfb145e0 datapathConfiguration="&{false false false false false }" interface=lxc564ddd4180e4 k8sPodName=openstack/staffeln-conductor-6d78b78c69-f7lwn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=454d50d649 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=361 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/staffeln-conductor-6d78b78c69-f7lwn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=454d50d649 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=361 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/staffeln-conductor-6d78b78c69-f7lwn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=454d50d649 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=361 identity=10956 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/staffeln-conductor-6d78b78c69-f7lwn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=454d50d649 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=361 identity=10956 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/staffeln-conductor-6d78b78c69-f7lwn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.178 eea50ef8-fd4f-4042-85d1-4aea9e1e0518 default }" containerID=84954c7d82619062817e8e48fee03b1f35dfbca05ce3b8e369eca8f0a0ad80cc datapathConfiguration="&{false false false false false }" interface=lxcc3c52e98c172 k8sPodName=openstack/staffeln-db-init-zkncp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=84954c7d82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=374 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/staffeln-db-init-zkncp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=84954c7d82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=374 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=c9eac5db-15cb-4039-9be4-ab3d7000097d,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=c9eac5db-15cb-4039-9be4-ab3d7000097d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/staffeln-db-init-zkncp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=c9eac5db-15cb-4039-9be4-ab3d7000097d;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=c9eac5db-15cb-4039-9be4-ab3d7000097d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=84954c7d82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=374 identity=765 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=c9eac5db-15cb-4039-9be4-ab3d7000097d,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=c9eac5db-15cb-4039-9be4-ab3d7000097d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/staffeln-db-init-zkncp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=84954c7d82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=374 identity=765 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/staffeln-db-init-zkncp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 b67e3fd1-d4c3-404c-ae34-96179053c988 default }" containerID=1de70afd0b787a7a935a40f763c9d5318f76d1929a427e33b099d90fed4a8b49 datapathConfiguration="&{false false false false false }" interface=lxce9ee3dfd9521 k8sPodName=openstack/staffeln-api-744ff64ff8-jqzxz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1de70afd0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/staffeln-api-744ff64ff8-jqzxz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1de70afd0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/staffeln-api-744ff64ff8-jqzxz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1de70afd0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 identity=11140 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/staffeln-api-744ff64ff8-jqzxz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1de70afd0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 identity=11140 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/staffeln-api-744ff64ff8-jqzxz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=454d50d649 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=361 identity=10956 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/staffeln-conductor-6d78b78c69-f7lwn subsys=endpoint level=info msg="Successful endpoint creation" containerID=454d50d649 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=361 identity=10956 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/staffeln-conductor-6d78b78c69-f7lwn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1de70afd0b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=397 identity=11140 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/staffeln-api-744ff64ff8-jqzxz subsys=endpoint level=info msg="Successful endpoint creation" containerID=1de70afd0b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=397 identity=11140 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/staffeln-api-744ff64ff8-jqzxz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=84954c7d82 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=374 identity=765 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/staffeln-db-init-zkncp subsys=endpoint level=info msg="Successful endpoint creation" containerID=84954c7d82 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=374 identity=765 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/staffeln-db-init-zkncp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=84954c7d82 endpointID=374 k8sNamespace=openstack k8sPodName=staffeln-db-init-zkncp subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=c9eac5db-15cb-4039-9be4-ab3d7000097d k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=c9eac5db-15cb-4039-9be4-ab3d7000097d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=84954c7d82 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=374 identity=765 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/staffeln-db-init-zkncp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 d2df27ac-9791-4a3b-baec-58d0b6e5416f default }" containerID=aaa16e4d2837cd017c458ad787071ca9b8c93ed0b86bc4d2860afb45e1045999 datapathConfiguration="&{false false false false false }" interface=lxcf92204a2ab8c k8sPodName=openstack/staffeln-db-sync-dzrpq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aaa16e4d28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=451 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/staffeln-db-sync-dzrpq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aaa16e4d28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=451 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=82de457e-4453-4681-8f16-ee5b417bb047,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=82de457e-4453-4681-8f16-ee5b417bb047,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/staffeln-db-sync-dzrpq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=82de457e-4453-4681-8f16-ee5b417bb047;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=82de457e-4453-4681-8f16-ee5b417bb047;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aaa16e4d28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=451 identity=14961 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=82de457e-4453-4681-8f16-ee5b417bb047,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=82de457e-4453-4681-8f16-ee5b417bb047,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/staffeln-db-sync-dzrpq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=aaa16e4d28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=451 identity=14961 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/staffeln-db-sync-dzrpq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aaa16e4d28 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=451 identity=14961 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/staffeln-db-sync-dzrpq subsys=endpoint level=info msg="Successful endpoint creation" containerID=aaa16e4d28 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=451 identity=14961 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/staffeln-db-sync-dzrpq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aaa16e4d28 endpointID=451 k8sNamespace=openstack k8sPodName=staffeln-db-sync-dzrpq subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=82de457e-4453-4681-8f16-ee5b417bb047 k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=82de457e-4453-4681-8f16-ee5b417bb047 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=aaa16e4d28 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=451 identity=14961 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/staffeln-db-sync-dzrpq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 6087fa07-2504-43ee-bc33-ad1e55f65aed default }" containerID=1b4514af49373970a5376f3a7cd37a44cc2f596b54e97dc1e129c2bec1e2ad5c datapathConfiguration="&{false false false false false }" interface=lxc40e4aa6cedad k8sPodName=local-path-storage/helper-pod-create-pvc-588d0d76-48e5-4fa8-b853-9d88352e9881 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b4514af49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1211 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-588d0d76-48e5-4fa8-b853-9d88352e9881 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b4514af49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1211 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-588d0d76-48e5-4fa8-b853-9d88352e9881 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1b4514af49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1211 identity=30459 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-588d0d76-48e5-4fa8-b853-9d88352e9881 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b4514af49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1211 identity=30459 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-588d0d76-48e5-4fa8-b853-9d88352e9881 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1b4514af49 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1211 identity=30459 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-588d0d76-48e5-4fa8-b853-9d88352e9881 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b4514af49 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1211 identity=30459 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-588d0d76-48e5-4fa8-b853-9d88352e9881 subsys=daemon level=info msg="Delete endpoint request" containerID=1b4514af49 endpointID=1211 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-588d0d76-48e5-4fa8-b853-9d88352e9881 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1b4514af49 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1211 identity=30459 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-588d0d76-48e5-4fa8-b853-9d88352e9881 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 c84d5ef3-6320-4688-a216-f919b5205869 default }" containerID=e9ceb3580b827ec4957db416930badadf21ae589713cbdba7b34a4924e7caf9b datapathConfiguration="&{false false false false false }" interface=lxc26adae04647a k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e9ceb3580b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e9ceb3580b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e9ceb3580b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e9ceb3580b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 identity=3912 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e9ceb3580b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 identity=3912 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e9ceb3580b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=837 identity=3912 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e9ceb3580b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=837 identity=3912 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.85 8c98a021-d60b-4a4a-b5a0-26e4deac70ce default }" containerID=b09c5830e93ec20a29c8b87783247066105c7beb98e349b387f96739a31a3cad datapathConfiguration="&{false false false false false }" interface=lxce0668a5f94f5 k8sPodName=openstack/cinder-api-59484ff9db-ss8sm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b09c5830e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/cinder-api-59484ff9db-ss8sm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b09c5830e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/cinder-api-59484ff9db-ss8sm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b09c5830e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identity=40359 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/cinder-api-59484ff9db-ss8sm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b09c5830e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identity=40359 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/cinder-api-59484ff9db-ss8sm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 394d933c-2ba2-4180-8c7d-7e4c9e456075 default }" containerID=133b5a9712b62cbf306c3f4d93c09de615d37226aca75fddbde2652ef38366a4 datapathConfiguration="&{false false false false false }" interface=lxc1e299aaadcb5 k8sPodName=openstack/cinder-scheduler-76cf6b99f8-jdd8q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=133b5a9712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/cinder-scheduler-76cf6b99f8-jdd8q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=133b5a9712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/cinder-scheduler-76cf6b99f8-jdd8q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=133b5a9712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identity=44257 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/cinder-scheduler-76cf6b99f8-jdd8q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=133b5a9712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identity=44257 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/cinder-scheduler-76cf6b99f8-jdd8q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b09c5830e9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1152 identity=40359 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/cinder-api-59484ff9db-ss8sm subsys=endpoint level=info msg="Successful endpoint creation" containerID=b09c5830e9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1152 identity=40359 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/cinder-api-59484ff9db-ss8sm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.29 3f44eec4-f14c-42a0-83e0-ac311eb90cb2 default }" containerID=9288596a777fb07d85e4edb503a0a40f3aa91a92854e673b55d2db25bdc30f2a datapathConfiguration="&{false false false false false }" interface=lxc58377810a11a k8sPodName=openstack/cinder-db-init-nwpnm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9288596a77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=708 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/cinder-db-init-nwpnm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9288596a77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=708 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=645dd2de-5acf-417d-97fa-e2f665b72233,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=645dd2de-5acf-417d-97fa-e2f665b72233,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/cinder-db-init-nwpnm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=645dd2de-5acf-417d-97fa-e2f665b72233;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=645dd2de-5acf-417d-97fa-e2f665b72233;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9288596a77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=708 identity=54686 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=645dd2de-5acf-417d-97fa-e2f665b72233,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=645dd2de-5acf-417d-97fa-e2f665b72233,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/cinder-db-init-nwpnm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9288596a77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=708 identity=54686 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/cinder-db-init-nwpnm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=133b5a9712 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=776 identity=44257 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/cinder-scheduler-76cf6b99f8-jdd8q subsys=endpoint level=info msg="Successful endpoint creation" containerID=133b5a9712 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=776 identity=44257 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/cinder-scheduler-76cf6b99f8-jdd8q subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9288596a77 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=708 identity=54686 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/cinder-db-init-nwpnm subsys=endpoint level=info msg="Successful endpoint creation" containerID=9288596a77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=708 identity=54686 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/cinder-db-init-nwpnm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9288596a77 endpointID=708 k8sNamespace=openstack k8sPodName=cinder-db-init-nwpnm subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=645dd2de-5acf-417d-97fa-e2f665b72233 k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=645dd2de-5acf-417d-97fa-e2f665b72233 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=9288596a77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=708 identity=54686 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/cinder-db-init-nwpnm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 2354b20d-957d-4711-9f6f-7a8d14aa43d6 default }" containerID=14bd09c3bb987132fdae53299a4d2376badb0dd3714f237609977eacc7672c2f datapathConfiguration="&{false false false false false }" interface=lxca5fd346959af k8sPodName=openstack/cinder-db-sync-8fbqs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=14bd09c3bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=647 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/cinder-db-sync-8fbqs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=14bd09c3bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=647 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=8d0752fb-09d0-4820-9f14-ffbd1e3ead92,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=8d0752fb-09d0-4820-9f14-ffbd1e3ead92,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/cinder-db-sync-8fbqs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=8d0752fb-09d0-4820-9f14-ffbd1e3ead92;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=8d0752fb-09d0-4820-9f14-ffbd1e3ead92;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=14bd09c3bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=647 identity=47058 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=8d0752fb-09d0-4820-9f14-ffbd1e3ead92,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=8d0752fb-09d0-4820-9f14-ffbd1e3ead92,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/cinder-db-sync-8fbqs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=14bd09c3bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=647 identity=47058 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/cinder-db-sync-8fbqs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=14bd09c3bb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=647 identity=47058 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/cinder-db-sync-8fbqs subsys=endpoint level=info msg="Successful endpoint creation" containerID=14bd09c3bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=647 identity=47058 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/cinder-db-sync-8fbqs subsys=daemon level=info msg="Delete endpoint request" containerID=14bd09c3bb endpointID=647 k8sNamespace=openstack k8sPodName=cinder-db-sync-8fbqs subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=8d0752fb-09d0-4820-9f14-ffbd1e3ead92 k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=8d0752fb-09d0-4820-9f14-ffbd1e3ead92 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=14bd09c3bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=647 identity=47058 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/cinder-db-sync-8fbqs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 b12463c7-fa25-4ae9-8934-8f1d6d96f931 default }" containerID=a7eacf3ba9d0401ac67ca17119a3b1cf633943bcc537a3671e245d25782dd164 datapathConfiguration="&{false false false false false }" interface=lxcb3d6716ca9e4 k8sPodName=openstack/cinder-rabbit-init-hh6hl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a7eacf3ba9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4093 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-rabbit-init-hh6hl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a7eacf3ba9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4093 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=20af2ad5-ebd4-473f-a7f0-b4451c211c98,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=20af2ad5-ebd4-473f-a7f0-b4451c211c98,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-rabbit-init-hh6hl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a7eacf3ba9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4093 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-rabbit-init-hh6hl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=20af2ad5-ebd4-473f-a7f0-b4451c211c98;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=20af2ad5-ebd4-473f-a7f0-b4451c211c98;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a7eacf3ba9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4093 identity=2364 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=20af2ad5-ebd4-473f-a7f0-b4451c211c98,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=20af2ad5-ebd4-473f-a7f0-b4451c211c98,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-rabbit-init-hh6hl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a7eacf3ba9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4093 identity=2364 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-rabbit-init-hh6hl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a7eacf3ba9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4093 identity=2364 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-rabbit-init-hh6hl subsys=endpoint level=info msg="Successful endpoint creation" containerID=a7eacf3ba9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4093 identity=2364 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-rabbit-init-hh6hl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a7eacf3ba9 endpointID=4093 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-hh6hl subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=20af2ad5-ebd4-473f-a7f0-b4451c211c98 k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=20af2ad5-ebd4-473f-a7f0-b4451c211c98 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=a7eacf3ba9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4093 identity=2364 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-rabbit-init-hh6hl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 65f1a97f-b621-48b7-ab8e-10a962bf95f2 default }" containerID=57d762b2b0fff02c47c4de41b1ddd2a7617dd53e42e29ee893ff743ce4d5e45d datapathConfiguration="&{false false false false false }" interface=lxc4ee38aa9afd5 k8sPodName=openstack/cinder-ks-service-8c9ws labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57d762b2b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/cinder-ks-service-8c9ws subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57d762b2b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=4c076fd3-81ec-4a0f-89f8-5f0771d06736,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=4c076fd3-81ec-4a0f-89f8-5f0771d06736,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/cinder-ks-service-8c9ws subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=4c076fd3-81ec-4a0f-89f8-5f0771d06736;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=4c076fd3-81ec-4a0f-89f8-5f0771d06736;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=57d762b2b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 identity=50957 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=4c076fd3-81ec-4a0f-89f8-5f0771d06736,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=4c076fd3-81ec-4a0f-89f8-5f0771d06736,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/cinder-ks-service-8c9ws oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=57d762b2b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 identity=50957 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/cinder-ks-service-8c9ws subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=57d762b2b0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=153 identity=50957 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/cinder-ks-service-8c9ws subsys=endpoint level=info msg="Successful endpoint creation" containerID=57d762b2b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=153 identity=50957 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/cinder-ks-service-8c9ws subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=57d762b2b0 endpointID=153 k8sNamespace=openstack k8sPodName=cinder-ks-service-8c9ws subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=4c076fd3-81ec-4a0f-89f8-5f0771d06736 k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=4c076fd3-81ec-4a0f-89f8-5f0771d06736 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=57d762b2b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=153 identity=50957 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/cinder-ks-service-8c9ws subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 20690a83-1134-4a6c-98cb-64fb0dce1e8c default }" containerID=7f876d7d62d08dd3939bdb01d1c1b013afd686fd27164bef9949335631cc67c2 datapathConfiguration="&{false false false false false }" interface=lxccbb115d46008 k8sPodName=openstack/cinder-ks-endpoints-glzzj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f876d7d62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/cinder-ks-endpoints-glzzj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f876d7d62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ba832cba-0838-4838-935c-afcc6052bb52,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=ba832cba-0838-4838-935c-afcc6052bb52,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/cinder-ks-endpoints-glzzj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=ba832cba-0838-4838-935c-afcc6052bb52;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=ba832cba-0838-4838-935c-afcc6052bb52;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f876d7d62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 identity=55823 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ba832cba-0838-4838-935c-afcc6052bb52,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=ba832cba-0838-4838-935c-afcc6052bb52,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/cinder-ks-endpoints-glzzj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7f876d7d62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 identity=55823 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/cinder-ks-endpoints-glzzj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7f876d7d62 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=174 identity=55823 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/cinder-ks-endpoints-glzzj subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f876d7d62 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=174 identity=55823 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/cinder-ks-endpoints-glzzj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7f876d7d62 endpointID=174 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-glzzj subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=ba832cba-0838-4838-935c-afcc6052bb52 k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=ba832cba-0838-4838-935c-afcc6052bb52 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=7f876d7d62 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=174 identity=55823 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/cinder-ks-endpoints-glzzj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 5556da67-a721-439c-b0b8-9f013896c690 default }" containerID=8ec7c9ecd96e0a79eae16a5908b9fa37544e068c65fbf782cb5994491f1b0c04 datapathConfiguration="&{false false false false false }" interface=lxca95cdd4ae69b k8sPodName=openstack/cinder-ks-user-g998j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ec7c9ecd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1312 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-ks-user-g998j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ec7c9ecd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1312 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=55659f31-ed6b-474d-a30e-7e025209caca,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=55659f31-ed6b-474d-a30e-7e025209caca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-ks-user-g998j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=55659f31-ed6b-474d-a30e-7e025209caca;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=55659f31-ed6b-474d-a30e-7e025209caca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=8ec7c9ecd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1312 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-ks-user-g998j line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8ec7c9ecd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1312 identity=43770 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=55659f31-ed6b-474d-a30e-7e025209caca,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=55659f31-ed6b-474d-a30e-7e025209caca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-ks-user-g998j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ec7c9ecd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1312 identity=43770 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-ks-user-g998j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8ec7c9ecd9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1312 identity=43770 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-ks-user-g998j subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ec7c9ecd9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1312 identity=43770 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-ks-user-g998j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8ec7c9ecd9 endpointID=1312 k8sNamespace=openstack k8sPodName=cinder-ks-user-g998j subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=55659f31-ed6b-474d-a30e-7e025209caca k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=55659f31-ed6b-474d-a30e-7e025209caca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=8ec7c9ecd9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1312 identity=43770 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-ks-user-g998j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 2ba39bdf-2d8a-4dd4-826c-53bc18f4ada8 default }" containerID=0ea73b386546bc6f232e3f8362868616d1462172145d3506468688c16360c218 datapathConfiguration="&{false false false false false }" interface=lxc4aa4d25a80c9 k8sPodName=openstack/cinder-backup-storage-init-r8x5v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ea73b3865 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3090 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/cinder-backup-storage-init-r8x5v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ea73b3865 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3090 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=0249b352-8ac6-4957-80a7-40bebe7aec7c,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=0249b352-8ac6-4957-80a7-40bebe7aec7c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/cinder-backup-storage-init-r8x5v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0ea73b3865 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3090 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.21 ipv6= k8sPodName=openstack/cinder-backup-storage-init-r8x5v line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=0249b352-8ac6-4957-80a7-40bebe7aec7c;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=0249b352-8ac6-4957-80a7-40bebe7aec7c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0ea73b3865 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3090 identity=59629 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=0249b352-8ac6-4957-80a7-40bebe7aec7c,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=0249b352-8ac6-4957-80a7-40bebe7aec7c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/cinder-backup-storage-init-r8x5v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ea73b3865 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3090 identity=59629 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/cinder-backup-storage-init-r8x5v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0ea73b3865 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3090 identity=59629 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/cinder-backup-storage-init-r8x5v subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ea73b3865 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3090 identity=59629 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/cinder-backup-storage-init-r8x5v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0ea73b3865 endpointID=3090 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-r8x5v subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=0249b352-8ac6-4957-80a7-40bebe7aec7c k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=0249b352-8ac6-4957-80a7-40bebe7aec7c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=0ea73b3865 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3090 identity=59629 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/cinder-backup-storage-init-r8x5v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 6233010c-e758-4f8f-a757-1ead69c828da default }" containerID=e2883a772ac2695a05808a10632d4ae9d0848e2b02b7631c4fac12e77f059add datapathConfiguration="&{false false false false false }" interface=lxca431a813981d k8sPodName=openstack/cinder-create-internal-tenant-6t7w5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e2883a772a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-6t7w5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e2883a772a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=98e90428-36bc-40bd-8f5b-5ca7ceb5c356,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=98e90428-36bc-40bd-8f5b-5ca7ceb5c356,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-6t7w5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=98e90428-36bc-40bd-8f5b-5ca7ceb5c356;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=98e90428-36bc-40bd-8f5b-5ca7ceb5c356;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e2883a772a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 identity=20770 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=98e90428-36bc-40bd-8f5b-5ca7ceb5c356,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=98e90428-36bc-40bd-8f5b-5ca7ceb5c356,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-6t7w5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e2883a772a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 identity=20770 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-6t7w5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e2883a772a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1259 identity=20770 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-6t7w5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e2883a772a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1259 identity=20770 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-6t7w5 subsys=daemon level=info msg="Delete endpoint request" containerID=e2883a772a endpointID=1259 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-6t7w5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=98e90428-36bc-40bd-8f5b-5ca7ceb5c356 k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=98e90428-36bc-40bd-8f5b-5ca7ceb5c356 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=e2883a772a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1259 identity=20770 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-6t7w5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.211 0f262e76-372f-4b99-9585-2d35ca1f5feb default }" containerID=119a6b6968c685b565ac98270c00d7290c660abe3fd0442d5238503ddf9fb7c3 datapathConfiguration="&{false false false false false }" interface=lxc8b6cf7c98b0b k8sPodName=openstack/cinder-storage-init-dsdmd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=119a6b6968 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/cinder-storage-init-dsdmd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=119a6b6968 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c436bf9b-e848-4344-af27-e07075618713,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=c436bf9b-e848-4344-af27-e07075618713,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/cinder-storage-init-dsdmd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=c436bf9b-e848-4344-af27-e07075618713;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=c436bf9b-e848-4344-af27-e07075618713;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=119a6b6968 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 identity=1942 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c436bf9b-e848-4344-af27-e07075618713,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=c436bf9b-e848-4344-af27-e07075618713,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/cinder-storage-init-dsdmd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=119a6b6968 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 identity=1942 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/cinder-storage-init-dsdmd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=119a6b6968 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=144 identity=1942 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/cinder-storage-init-dsdmd subsys=endpoint level=info msg="Successful endpoint creation" containerID=119a6b6968 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=144 identity=1942 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/cinder-storage-init-dsdmd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=119a6b6968 endpointID=144 k8sNamespace=openstack k8sPodName=cinder-storage-init-dsdmd subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=c436bf9b-e848-4344-af27-e07075618713 k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=c436bf9b-e848-4344-af27-e07075618713 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=119a6b6968 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=144 identity=1942 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/cinder-storage-init-dsdmd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.224 98451ea2-9300-4e46-9526-cc11391c09d6 default }" containerID=8d26fbf7e8d2a330f97c8f8245cfea94acc7f5c4ae8a3c77dbd7d471fceb5b5d datapathConfiguration="&{false false false false false }" interface=lxc387a44a320c2 k8sPodName=openstack/cinder-bootstrap-65g2x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d26fbf7e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2895 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/cinder-bootstrap-65g2x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d26fbf7e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2895 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=bb7ebafe-0d5e-4019-baaf-67a93bc4ef0d,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=bb7ebafe-0d5e-4019-baaf-67a93bc4ef0d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/cinder-bootstrap-65g2x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=bb7ebafe-0d5e-4019-baaf-67a93bc4ef0d;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=bb7ebafe-0d5e-4019-baaf-67a93bc4ef0d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d26fbf7e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2895 identity=8021 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=bb7ebafe-0d5e-4019-baaf-67a93bc4ef0d,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=bb7ebafe-0d5e-4019-baaf-67a93bc4ef0d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/cinder-bootstrap-65g2x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d26fbf7e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2895 identity=8021 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/cinder-bootstrap-65g2x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8d26fbf7e8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2895 identity=8021 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/cinder-bootstrap-65g2x subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d26fbf7e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2895 identity=8021 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/cinder-bootstrap-65g2x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.56 93a2460f-d120-4806-b7b8-26f541e38f4c default }" containerID=f0c4f75a562e4ecd8438ce254472450e3899dc16c2bac0558bbd42fe8d10867d datapathConfiguration="&{false false false false false }" interface=lxcb4926f6f409f k8sPodName=openstack/cinder-volume-6645f4d9f9-v9q2m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f0c4f75a56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3990 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/cinder-volume-6645f4d9f9-v9q2m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f0c4f75a56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3990 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/cinder-volume-6645f4d9f9-v9q2m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f0c4f75a56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3990 identity=44737 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/cinder-volume-6645f4d9f9-v9q2m oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f0c4f75a56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3990 identity=44737 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/cinder-volume-6645f4d9f9-v9q2m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f0c4f75a56 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3990 identity=44737 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/cinder-volume-6645f4d9f9-v9q2m subsys=endpoint level=info msg="Successful endpoint creation" containerID=f0c4f75a56 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3990 identity=44737 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/cinder-volume-6645f4d9f9-v9q2m subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.233 58dcfa70-7d1e-460d-be72-875a0dd8182b default }" containerID=a4a13b7ce78e67918a220ed73cd2cd39ce1ad9553d5860da957afdd318bb71a1 datapathConfiguration="&{false false false false false }" interface=lxc657cad891650 k8sPodName=openstack/cinder-backup-78b67d8cfd-m4bwm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a4a13b7ce7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-backup-78b67d8cfd-m4bwm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a4a13b7ce7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-backup-78b67d8cfd-m4bwm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a4a13b7ce7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identity=27035 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-backup-78b67d8cfd-m4bwm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a4a13b7ce7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identity=27035 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-backup-78b67d8cfd-m4bwm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a4a13b7ce7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=10 identity=27035 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-backup-78b67d8cfd-m4bwm subsys=endpoint level=info msg="Successful endpoint creation" containerID=a4a13b7ce7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=10 identity=27035 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-backup-78b67d8cfd-m4bwm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8d26fbf7e8 endpointID=2895 k8sNamespace=openstack k8sPodName=cinder-bootstrap-65g2x subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=bb7ebafe-0d5e-4019-baaf-67a93bc4ef0d k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=bb7ebafe-0d5e-4019-baaf-67a93bc4ef0d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=8d26fbf7e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2895 identity=8021 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/cinder-bootstrap-65g2x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 f8149d20-3720-4d89-aad7-180d656691db default }" containerID=0cb4d80bf0861b1d15783dd3d4830cb4d93744ce13090df9b25f77799f2062ec datapathConfiguration="&{false false false false false }" interface=lxce7419492148a k8sPodName=openstack/placement-api-5fd97c7cb9-rx62q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0cb4d80bf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=656 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/placement-api-5fd97c7cb9-rx62q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0cb4d80bf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=656 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/placement-api-5fd97c7cb9-rx62q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0cb4d80bf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=656 identity=49888 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/placement-api-5fd97c7cb9-rx62q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0cb4d80bf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=656 identity=49888 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/placement-api-5fd97c7cb9-rx62q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 a592b9a9-a382-423c-b974-27077e1eaa5a default }" containerID=1c0f4cf9d8a0190db0c23b37a9e79c5c291d3e782d2ca15d03f54762313e7766 datapathConfiguration="&{false false false false false }" interface=lxc63409dd2ef78 k8sPodName=openstack/placement-db-init-2vqm8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c0f4cf9d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3615 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/placement-db-init-2vqm8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c0f4cf9d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3615 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=87bdba12-834a-4a44-ab17-dc21b46f48a9,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=87bdba12-834a-4a44-ab17-dc21b46f48a9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/placement-db-init-2vqm8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=87bdba12-834a-4a44-ab17-dc21b46f48a9;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=87bdba12-834a-4a44-ab17-dc21b46f48a9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1c0f4cf9d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3615 identity=20457 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=87bdba12-834a-4a44-ab17-dc21b46f48a9,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=87bdba12-834a-4a44-ab17-dc21b46f48a9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/placement-db-init-2vqm8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1c0f4cf9d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3615 identity=20457 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/placement-db-init-2vqm8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0cb4d80bf0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=656 identity=49888 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/placement-api-5fd97c7cb9-rx62q subsys=endpoint level=info msg="Successful endpoint creation" containerID=0cb4d80bf0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=656 identity=49888 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/placement-api-5fd97c7cb9-rx62q subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1c0f4cf9d8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3615 identity=20457 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/placement-db-init-2vqm8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c0f4cf9d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3615 identity=20457 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/placement-db-init-2vqm8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1c0f4cf9d8 endpointID=3615 k8sNamespace=openstack k8sPodName=placement-db-init-2vqm8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=87bdba12-834a-4a44-ab17-dc21b46f48a9 k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=87bdba12-834a-4a44-ab17-dc21b46f48a9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=1c0f4cf9d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3615 identity=20457 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/placement-db-init-2vqm8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 24214396-96dd-438b-a4ea-5defbee4c1ea default }" containerID=2417110ef1f4fc011b6f9495d771ea38ef8c4331f166e8ca69a692ad55f95369 datapathConfiguration="&{false false false false false }" interface=lxcd8fb4ccb4670 k8sPodName=openstack/placement-db-sync-hgrjh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2417110ef1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/placement-db-sync-hgrjh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2417110ef1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=07dedc67-4ef7-49e0-b0bc-8c3a2152c8ef,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=07dedc67-4ef7-49e0-b0bc-8c3a2152c8ef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/placement-db-sync-hgrjh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=07dedc67-4ef7-49e0-b0bc-8c3a2152c8ef;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=07dedc67-4ef7-49e0-b0bc-8c3a2152c8ef;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2417110ef1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 identity=35448 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=07dedc67-4ef7-49e0-b0bc-8c3a2152c8ef,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=07dedc67-4ef7-49e0-b0bc-8c3a2152c8ef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/placement-db-sync-hgrjh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2417110ef1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 identity=35448 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/placement-db-sync-hgrjh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2417110ef1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=868 identity=35448 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/placement-db-sync-hgrjh subsys=endpoint level=info msg="Successful endpoint creation" containerID=2417110ef1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=868 identity=35448 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/placement-db-sync-hgrjh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2417110ef1 endpointID=868 k8sNamespace=openstack k8sPodName=placement-db-sync-hgrjh subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=07dedc67-4ef7-49e0-b0bc-8c3a2152c8ef k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=07dedc67-4ef7-49e0-b0bc-8c3a2152c8ef k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=2417110ef1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=868 identity=35448 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/placement-db-sync-hgrjh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 f86699ea-4e16-43fc-b256-8eb75c2f2305 default }" containerID=b0f33743bd2c7f94b3112059c65ec76ffe827a972d76ca182d153157a8f80fc3 datapathConfiguration="&{false false false false false }" interface=lxcaa2ef05914da k8sPodName=openstack/placement-ks-service-bmw58 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0f33743bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/placement-ks-service-bmw58 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0f33743bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=c6e47986-4285-4c05-bfec-56963166b69f,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=c6e47986-4285-4c05-bfec-56963166b69f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/placement-ks-service-bmw58 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=c6e47986-4285-4c05-bfec-56963166b69f;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=c6e47986-4285-4c05-bfec-56963166b69f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b0f33743bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 identity=9518 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=c6e47986-4285-4c05-bfec-56963166b69f,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=c6e47986-4285-4c05-bfec-56963166b69f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/placement-ks-service-bmw58 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b0f33743bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 identity=9518 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/placement-ks-service-bmw58 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b0f33743bd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=480 identity=9518 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/placement-ks-service-bmw58 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0f33743bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=480 identity=9518 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/placement-ks-service-bmw58 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b0f33743bd endpointID=480 k8sNamespace=openstack k8sPodName=placement-ks-service-bmw58 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=c6e47986-4285-4c05-bfec-56963166b69f k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=c6e47986-4285-4c05-bfec-56963166b69f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=b0f33743bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=480 identity=9518 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/placement-ks-service-bmw58 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 75b31c6a-3205-4667-a208-1c0b031fa31e default }" containerID=9a7ea1743a6f1149fbe620fdfbbda937364e09a63dad779dfc442add20aabfbb datapathConfiguration="&{false false false false false }" interface=lxc1f690b265bfb k8sPodName=openstack/placement-ks-user-jflsg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a7ea1743a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/placement-ks-user-jflsg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a7ea1743a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=eda4ff36-73be-4d01-accd-60101bceaa4d,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=eda4ff36-73be-4d01-accd-60101bceaa4d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/placement-ks-user-jflsg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=eda4ff36-73be-4d01-accd-60101bceaa4d;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=eda4ff36-73be-4d01-accd-60101bceaa4d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a7ea1743a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 identity=22933 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=eda4ff36-73be-4d01-accd-60101bceaa4d,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=eda4ff36-73be-4d01-accd-60101bceaa4d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/placement-ks-user-jflsg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a7ea1743a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 identity=22933 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/placement-ks-user-jflsg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9a7ea1743a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2176 identity=22933 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/placement-ks-user-jflsg subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a7ea1743a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2176 identity=22933 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/placement-ks-user-jflsg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9a7ea1743a endpointID=2176 k8sNamespace=openstack k8sPodName=placement-ks-user-jflsg subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=eda4ff36-73be-4d01-accd-60101bceaa4d k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=eda4ff36-73be-4d01-accd-60101bceaa4d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=9a7ea1743a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2176 identity=22933 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/placement-ks-user-jflsg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 e15cc2dc-806e-4e24-9a46-494a9e55bc8c default }" containerID=70ec3e76a7dba26d9fce099be82800cbdcf5f501c8ee2d7e556c05e4f8e2f139 datapathConfiguration="&{false false false false false }" interface=lxc1229616fe41c k8sPodName=openstack/placement-ks-endpoints-2bf7c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=70ec3e76a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=511 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/placement-ks-endpoints-2bf7c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=70ec3e76a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=511 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=0a2c1a11-db2f-4d4d-baa7-1e245c478959,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0a2c1a11-db2f-4d4d-baa7-1e245c478959,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/placement-ks-endpoints-2bf7c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=0a2c1a11-db2f-4d4d-baa7-1e245c478959;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=0a2c1a11-db2f-4d4d-baa7-1e245c478959;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=70ec3e76a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=511 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.89 ipv6= k8sPodName=openstack/placement-ks-endpoints-2bf7c line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=70ec3e76a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=511 identity=4756 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=0a2c1a11-db2f-4d4d-baa7-1e245c478959,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0a2c1a11-db2f-4d4d-baa7-1e245c478959,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/placement-ks-endpoints-2bf7c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=70ec3e76a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=511 identity=4756 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/placement-ks-endpoints-2bf7c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=70ec3e76a7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=511 identity=4756 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/placement-ks-endpoints-2bf7c subsys=endpoint level=info msg="Successful endpoint creation" containerID=70ec3e76a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=511 identity=4756 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/placement-ks-endpoints-2bf7c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=70ec3e76a7 endpointID=511 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-2bf7c subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=0a2c1a11-db2f-4d4d-baa7-1e245c478959 k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=0a2c1a11-db2f-4d4d-baa7-1e245c478959 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=70ec3e76a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=511 identity=4756 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/placement-ks-endpoints-2bf7c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 8a9baf71-dacc-413e-ba17-cbb1c7f560eb default }" containerID=ddc411d42129b95315c573938c04f92a0add934fc1c42832fcabb65adfeef80a datapathConfiguration="&{false false false false false }" interface=lxcdef8a4fc78a3 k8sPodName=openstack/neutron-coredns-7dd4958666-jxgcj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ddc411d421 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-jxgcj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ddc411d421 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-jxgcj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=neutron-coredns;k8s:app.kubernetes.io/name=coredns;k8s:application=neutron;k8s:component=coredns;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ddc411d421 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identity=55894 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-jxgcj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ddc411d421 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identity=55894 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-jxgcj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ddc411d421 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=502 identity=55894 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-jxgcj subsys=endpoint level=info msg="Successful endpoint creation" containerID=ddc411d421 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=502 identity=55894 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-jxgcj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.126 3b6e45f1-78fc-41e4-b3f8-197089540cd1 default }" containerID=56d5b3884255d348e6bea823241fba75766dcaf47a3cb9e67532152a165dce2e datapathConfiguration="&{false false false false false }" interface=lxcc253b1ee57c1 k8sPodName=local-path-storage/helper-pod-create-pvc-355c22a3-ff31-4f24-8138-73d777f53859 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=56d5b38842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1750 ipv4=10.0.0.126 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-355c22a3-ff31-4f24-8138-73d777f53859 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=56d5b38842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1750 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.126 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-355c22a3-ff31-4f24-8138-73d777f53859 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=56d5b38842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1750 identity=30459 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.126 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-355c22a3-ff31-4f24-8138-73d777f53859 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=56d5b38842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1750 identity=30459 ipv4=10.0.0.126 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-355c22a3-ff31-4f24-8138-73d777f53859 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=56d5b38842 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1750 identity=30459 ipv4=10.0.0.126 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-355c22a3-ff31-4f24-8138-73d777f53859 subsys=endpoint level=info msg="Successful endpoint creation" containerID=56d5b38842 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1750 identity=30459 ipv4=10.0.0.126 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-355c22a3-ff31-4f24-8138-73d777f53859 subsys=daemon level=info msg="Delete endpoint request" containerID=56d5b38842 endpointID=1750 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-355c22a3-ff31-4f24-8138-73d777f53859 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=56d5b38842 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1750 identity=30459 ipv4=10.0.0.126 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-355c22a3-ff31-4f24-8138-73d777f53859 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 5a0e91c7-0618-42e1-869b-20a3e68535c0 default }" containerID=153de5802bedc3b64bb4811ac1bb4a9657aff89581d8eb5c47e0b5f3b1b6904d datapathConfiguration="&{false false false false false }" interface=lxc6fd294b2e733 k8sPodName=openstack/rabbitmq-nova-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=153de5802b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1044 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=153de5802b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1044 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-nova;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=153de5802b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1044 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.90 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=153de5802b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1044 identity=55938 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=153de5802b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1044 identity=55938 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=153de5802b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1044 identity=55938 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=153de5802b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1044 identity=55938 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.43 c8d03b51-97ae-4bd4-8635-7d9553c84c0a default }" containerID=e6e971e1803f339d60026f5bcbef60861b74c2b82187f57160520a286f6fd1b2 datapathConfiguration="&{false false false false false }" interface=lxc6d3adbe56b8d k8sPodName=openstack/nova-cell-setup-xrxm9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e6e971e180 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/nova-cell-setup-xrxm9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e6e971e180 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=3169eece-cfa4-4dc6-9589-595fe5d7e975,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=3169eece-cfa4-4dc6-9589-595fe5d7e975,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/nova-cell-setup-xrxm9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=3169eece-cfa4-4dc6-9589-595fe5d7e975;k8s:batch.kubernetes.io/job-name=nova-cell-setup;k8s:component=cell-setup;k8s:controller-uid=3169eece-cfa4-4dc6-9589-595fe5d7e975;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e6e971e180 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identity=52909 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=3169eece-cfa4-4dc6-9589-595fe5d7e975,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=3169eece-cfa4-4dc6-9589-595fe5d7e975,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/nova-cell-setup-xrxm9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e6e971e180 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identity=52909 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/nova-cell-setup-xrxm9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.196 a170cdd1-efed-43d3-9f74-96ec842f2dfd default }" containerID=e497e55d254c19d4c73301ba6047241fee42f1db030ffbdae3f7e3b5a1ca5a71 datapathConfiguration="&{false false false false false }" interface=lxc456ddd61a129 k8sPodName=openstack/nova-bootstrap-72l9s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e497e55d25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3494 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/nova-bootstrap-72l9s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e497e55d25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3494 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=3f3e0b52-853c-4c72-95d0-04bbaaa9a6e1,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=3f3e0b52-853c-4c72-95d0-04bbaaa9a6e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/nova-bootstrap-72l9s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=3f3e0b52-853c-4c72-95d0-04bbaaa9a6e1;k8s:batch.kubernetes.io/job-name=nova-bootstrap;k8s:component=bootstrap;k8s:controller-uid=3f3e0b52-853c-4c72-95d0-04bbaaa9a6e1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-bootstrap;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e497e55d25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3494 identity=3030 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=3f3e0b52-853c-4c72-95d0-04bbaaa9a6e1,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=3f3e0b52-853c-4c72-95d0-04bbaaa9a6e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/nova-bootstrap-72l9s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e497e55d25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3494 identity=3030 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/nova-bootstrap-72l9s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 c9759f3a-6eab-4196-944c-fed4583b0a7e default }" containerID=8c71d001603002db980d753d71260a4d6c68b54df6793878e48d6efa5ac285f6 datapathConfiguration="&{false false false false false }" interface=lxcf18df1fbcec8 k8sPodName=openstack/nova-scheduler-749646c7b8-hskwn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c71d00160 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/nova-scheduler-749646c7b8-hskwn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c71d00160 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/nova-scheduler-749646c7b8-hskwn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8c71d00160 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identity=8201 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/nova-scheduler-749646c7b8-hskwn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8c71d00160 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identity=8201 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/nova-scheduler-749646c7b8-hskwn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e6e971e180 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=662 identity=52909 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/nova-cell-setup-xrxm9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e6e971e180 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=662 identity=52909 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/nova-cell-setup-xrxm9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.221 b5e40afe-9046-42c2-b568-3c3553d0012b default }" containerID=53ccb873f5efb773b326b85ebdca4e7adaf644ab8f2411607c5e297716bb1ed5 datapathConfiguration="&{false false false false false }" interface=lxc05987cbee378 k8sPodName=openstack/nova-api-metadata-5dbd9c7f47-rlkhj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=53ccb873f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1793 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/nova-api-metadata-5dbd9c7f47-rlkhj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=53ccb873f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1793 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/nova-api-metadata-5dbd9c7f47-rlkhj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=metadata;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=53ccb873f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1793 identity=8207 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/nova-api-metadata-5dbd9c7f47-rlkhj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=53ccb873f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1793 identity=8207 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/nova-api-metadata-5dbd9c7f47-rlkhj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 695a331c-cd21-429d-bfa9-185179764045 default }" containerID=9054abf50feacdbe7cf804e23254b0d82dc77592aed8e174041a777746926d73 datapathConfiguration="&{false false false false false }" interface=lxcddb6ceccb946 k8sPodName=openstack/nova-conductor-6c8f44b96d-8x2kp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9054abf50f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1541 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/nova-conductor-6c8f44b96d-8x2kp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9054abf50f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1541 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/nova-conductor-6c8f44b96d-8x2kp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.204 66db9c24-2355-4bda-8265-4bca95f9eeed default }" containerID=bf2de7a5610542ff21ac455d4920d34fc33c76ea5978c059877d9d744075dadb datapathConfiguration="&{false false false false false }" interface=lxce19a9db77a58 k8sPodName=openstack/nova-api-osapi-56dc946dbd-55ff4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf2de7a561 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=704 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/nova-api-osapi-56dc946dbd-55ff4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf2de7a561 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=704 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/nova-api-osapi-56dc946dbd-55ff4 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9054abf50f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1541 identity=8222 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/nova-conductor-6c8f44b96d-8x2kp oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=9054abf50f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1541 identity=8222 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/nova-conductor-6c8f44b96d-8x2kp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e497e55d25 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3494 identity=3030 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/nova-bootstrap-72l9s subsys=endpoint level=info msg="Successful endpoint creation" containerID=e497e55d25 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3494 identity=3030 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/nova-bootstrap-72l9s subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8c71d00160 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=279 identity=8201 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/nova-scheduler-749646c7b8-hskwn subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c71d00160 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=279 identity=8201 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/nova-scheduler-749646c7b8-hskwn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=53ccb873f5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1793 identity=8207 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/nova-api-metadata-5dbd9c7f47-rlkhj subsys=endpoint level=info msg="Successful endpoint creation" containerID=53ccb873f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1793 identity=8207 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/nova-api-metadata-5dbd9c7f47-rlkhj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.234 4b44b28d-fe98-45c9-b68a-adf105fd5c2a default }" containerID=6cb3927c9fcd88a9fdc2856cae6f4d30e93212ea406a9fb18b24700d4a415713 datapathConfiguration="&{false false false false false }" interface=lxc2fd58a85e91d k8sPodName=openstack/nova-db-init-cdjvm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6cb3927c9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=219 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/nova-db-init-cdjvm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6cb3927c9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=219 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=0a6f5c53-9ecc-44e6-914d-12f76ac05203,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=0a6f5c53-9ecc-44e6-914d-12f76ac05203,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/nova-db-init-cdjvm subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=os-api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf2de7a561 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=704 identity=27766 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/nova-api-osapi-56dc946dbd-55ff4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf2de7a561 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=704 identity=27766 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/nova-api-osapi-56dc946dbd-55ff4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=9054abf50f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1541 identity=8222 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/nova-conductor-6c8f44b96d-8x2kp subsys=endpoint level=info msg="Successful endpoint creation" containerID=9054abf50f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1541 identity=8222 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/nova-conductor-6c8f44b96d-8x2kp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6cb3927c9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=219 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.234 ipv6= k8sPodName=openstack/nova-db-init-cdjvm line=611 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bf2de7a561 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=704 identity=27766 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/nova-api-osapi-56dc946dbd-55ff4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf2de7a561 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=704 identity=27766 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/nova-api-osapi-56dc946dbd-55ff4 subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=0a6f5c53-9ecc-44e6-914d-12f76ac05203;k8s:batch.kubernetes.io/job-name=nova-db-init;k8s:component=db-init;k8s:controller-uid=0a6f5c53-9ecc-44e6-914d-12f76ac05203;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6cb3927c9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=219 identity=42197 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=0a6f5c53-9ecc-44e6-914d-12f76ac05203,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=0a6f5c53-9ecc-44e6-914d-12f76ac05203,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/nova-db-init-cdjvm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6cb3927c9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=219 identity=42197 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/nova-db-init-cdjvm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6cb3927c9f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=219 identity=42197 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/nova-db-init-cdjvm subsys=endpoint level=info msg="Successful endpoint creation" containerID=6cb3927c9f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=219 identity=42197 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/nova-db-init-cdjvm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.75 b15f9e9e-9abd-400a-afba-2d329b9a03e3 default }" containerID=dd71edada2d3ed298696069b16f64bd011f2b9a17e2c8c88508147061f3b08f8 datapathConfiguration="&{false false false false false }" interface=lxc348c981414f2 k8sPodName=openstack/nova-novncproxy-6dc45fd577-xfhpv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd71edada2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/nova-novncproxy-6dc45fd577-xfhpv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd71edada2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/nova-novncproxy-6dc45fd577-xfhpv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=novnc-proxy;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd71edada2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 identity=25053 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/nova-novncproxy-6dc45fd577-xfhpv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dd71edada2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 identity=25053 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/nova-novncproxy-6dc45fd577-xfhpv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dd71edada2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1549 identity=25053 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/nova-novncproxy-6dc45fd577-xfhpv subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd71edada2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1549 identity=25053 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/nova-novncproxy-6dc45fd577-xfhpv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6cb3927c9f endpointID=219 k8sNamespace=openstack k8sPodName=nova-db-init-cdjvm subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=0a6f5c53-9ecc-44e6-914d-12f76ac05203 k8s:batch.kubernetes.io/job-name=nova-db-init k8s:component=db-init k8s:controller-uid=0a6f5c53-9ecc-44e6-914d-12f76ac05203 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=6cb3927c9f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=219 identity=42197 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/nova-db-init-cdjvm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 6ed636d4-70e6-46af-b8da-c8218f27aa6e default }" containerID=da639f5a3ab61906d3cfce7bcf6a564954c575f40e7118c1447c32ca07612fb7 datapathConfiguration="&{false false false false false }" interface=lxc25ac00c4a4c1 k8sPodName=openstack/nova-db-sync-wzv7m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da639f5a3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3227 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/nova-db-sync-wzv7m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da639f5a3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3227 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=e7a17d9a-0faf-4365-9290-239abe19ad0f,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=e7a17d9a-0faf-4365-9290-239abe19ad0f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/nova-db-sync-wzv7m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=e7a17d9a-0faf-4365-9290-239abe19ad0f;k8s:batch.kubernetes.io/job-name=nova-db-sync;k8s:component=db-sync;k8s:controller-uid=e7a17d9a-0faf-4365-9290-239abe19ad0f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-sync;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da639f5a3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3227 identity=34512 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=e7a17d9a-0faf-4365-9290-239abe19ad0f,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=e7a17d9a-0faf-4365-9290-239abe19ad0f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/nova-db-sync-wzv7m oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=da639f5a3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3227 identity=34512 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/nova-db-sync-wzv7m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=da639f5a3a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3227 identity=34512 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/nova-db-sync-wzv7m subsys=endpoint level=info msg="Successful endpoint creation" containerID=da639f5a3a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3227 identity=34512 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/nova-db-sync-wzv7m subsys=daemon level=info msg="Delete endpoint request" containerID=da639f5a3a endpointID=3227 k8sNamespace=openstack k8sPodName=nova-db-sync-wzv7m subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=e7a17d9a-0faf-4365-9290-239abe19ad0f k8s:batch.kubernetes.io/job-name=nova-db-sync k8s:component=db-sync k8s:controller-uid=e7a17d9a-0faf-4365-9290-239abe19ad0f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-sync k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=da639f5a3a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3227 identity=34512 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/nova-db-sync-wzv7m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 28a4c3ed-dc84-4964-8523-bb3f068524a9 default }" containerID=368be99fc04efdd04cc2368ef99188ed3666ef3299bba679a1fc2805db2640b1 datapathConfiguration="&{false false false false false }" interface=lxc5c817a899792 k8sPodName=openstack/nova-rabbit-init-s8lkg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=368be99fc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=357 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/nova-rabbit-init-s8lkg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=368be99fc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=357 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=cbf73bb6-46bc-4e47-aeed-4047a09d6ec2,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=cbf73bb6-46bc-4e47-aeed-4047a09d6ec2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/nova-rabbit-init-s8lkg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=cbf73bb6-46bc-4e47-aeed-4047a09d6ec2;k8s:batch.kubernetes.io/job-name=nova-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=cbf73bb6-46bc-4e47-aeed-4047a09d6ec2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-rabbit-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=368be99fc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=357 identity=55363 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=cbf73bb6-46bc-4e47-aeed-4047a09d6ec2,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=cbf73bb6-46bc-4e47-aeed-4047a09d6ec2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/nova-rabbit-init-s8lkg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=368be99fc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=357 identity=55363 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/nova-rabbit-init-s8lkg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=368be99fc0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=357 identity=55363 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/nova-rabbit-init-s8lkg subsys=endpoint level=info msg="Successful endpoint creation" containerID=368be99fc0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=357 identity=55363 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/nova-rabbit-init-s8lkg subsys=daemon level=info msg="Delete endpoint request" containerID=368be99fc0 endpointID=357 k8sNamespace=openstack k8sPodName=nova-rabbit-init-s8lkg subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=cbf73bb6-46bc-4e47-aeed-4047a09d6ec2 k8s:batch.kubernetes.io/job-name=nova-rabbit-init k8s:component=rabbit-init k8s:controller-uid=cbf73bb6-46bc-4e47-aeed-4047a09d6ec2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-rabbit-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=368be99fc0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=357 identity=55363 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/nova-rabbit-init-s8lkg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.150 98722c9a-89c3-47da-ac02-4b4b2a723164 default }" containerID=d53e094f82d75275b13e936d118819e5e974981040347a139a38a97029006729 datapathConfiguration="&{false false false false false }" interface=lxcd754e0ead390 k8sPodName=openstack/nova-ks-service-vcjxw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d53e094f82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=251 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/nova-ks-service-vcjxw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d53e094f82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=251 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=8d6f6c5f-b55e-448d-87a4-5fea70cded48,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=8d6f6c5f-b55e-448d-87a4-5fea70cded48,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/nova-ks-service-vcjxw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d53e094f82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=251 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.150 ipv6= k8sPodName=openstack/nova-ks-service-vcjxw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=8d6f6c5f-b55e-448d-87a4-5fea70cded48;k8s:batch.kubernetes.io/job-name=nova-ks-service;k8s:component=ks-service;k8s:controller-uid=8d6f6c5f-b55e-448d-87a4-5fea70cded48;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-service;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d53e094f82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=251 identity=60102 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=8d6f6c5f-b55e-448d-87a4-5fea70cded48,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=8d6f6c5f-b55e-448d-87a4-5fea70cded48,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/nova-ks-service-vcjxw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d53e094f82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=251 identity=60102 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/nova-ks-service-vcjxw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d53e094f82 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=251 identity=60102 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/nova-ks-service-vcjxw subsys=endpoint level=info msg="Successful endpoint creation" containerID=d53e094f82 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=251 identity=60102 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/nova-ks-service-vcjxw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d53e094f82 endpointID=251 k8sNamespace=openstack k8sPodName=nova-ks-service-vcjxw subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=8d6f6c5f-b55e-448d-87a4-5fea70cded48 k8s:batch.kubernetes.io/job-name=nova-ks-service k8s:component=ks-service k8s:controller-uid=8d6f6c5f-b55e-448d-87a4-5fea70cded48 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-service k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=d53e094f82 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=251 identity=60102 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/nova-ks-service-vcjxw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.193 a03f77d0-5df2-4857-ac51-238302c71356 default }" containerID=3963721be47eed49d68e71cceba2094a636583166866df6fdd44eb99358129e0 datapathConfiguration="&{false false false false false }" interface=lxceb0afe542bd5 k8sPodName=openstack/nova-ks-endpoints-7df2z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3963721be4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=262 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/nova-ks-endpoints-7df2z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3963721be4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=262 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=4e55c6f5-dcb5-4da1-a8a0-c67279a621ac,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=4e55c6f5-dcb5-4da1-a8a0-c67279a621ac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/nova-ks-endpoints-7df2z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=4e55c6f5-dcb5-4da1-a8a0-c67279a621ac;k8s:batch.kubernetes.io/job-name=nova-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=4e55c6f5-dcb5-4da1-a8a0-c67279a621ac;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-endpoints;k8s:release_group=nova;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=3963721be4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=262 identity=31049 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=4e55c6f5-dcb5-4da1-a8a0-c67279a621ac,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=4e55c6f5-dcb5-4da1-a8a0-c67279a621ac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/nova-ks-endpoints-7df2z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3963721be4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=262 identity=31049 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/nova-ks-endpoints-7df2z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3963721be4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=262 identity=31049 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/nova-ks-endpoints-7df2z subsys=endpoint level=info msg="Successful endpoint creation" containerID=3963721be4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=262 identity=31049 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/nova-ks-endpoints-7df2z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3963721be4 endpointID=262 k8sNamespace=openstack k8sPodName=nova-ks-endpoints-7df2z subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=4e55c6f5-dcb5-4da1-a8a0-c67279a621ac k8s:batch.kubernetes.io/job-name=nova-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=4e55c6f5-dcb5-4da1-a8a0-c67279a621ac k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-endpoints k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=3963721be4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=262 identity=31049 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/nova-ks-endpoints-7df2z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.215 2720ce60-bcdb-47e5-9416-5936d4d56627 default }" containerID=79eb465ac7b8e8c6e826022f12093ce3e7ab9bac32f20b6c9b9affbdbd01c513 datapathConfiguration="&{false false false false false }" interface=lxcfc2635a2d144 k8sPodName=openstack/nova-ks-user-nkbxb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79eb465ac7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2434 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/nova-ks-user-nkbxb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79eb465ac7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2434 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=718295f4-4516-494f-bd4b-62007a985a1c,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=718295f4-4516-494f-bd4b-62007a985a1c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/nova-ks-user-nkbxb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=79eb465ac7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2434 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.215 ipv6= k8sPodName=openstack/nova-ks-user-nkbxb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=718295f4-4516-494f-bd4b-62007a985a1c;k8s:batch.kubernetes.io/job-name=nova-ks-user;k8s:component=ks-user;k8s:controller-uid=718295f4-4516-494f-bd4b-62007a985a1c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-user;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=79eb465ac7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2434 identity=452 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=718295f4-4516-494f-bd4b-62007a985a1c,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=718295f4-4516-494f-bd4b-62007a985a1c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/nova-ks-user-nkbxb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=79eb465ac7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2434 identity=452 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/nova-ks-user-nkbxb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=79eb465ac7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2434 identity=452 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/nova-ks-user-nkbxb subsys=endpoint level=info msg="Successful endpoint creation" containerID=79eb465ac7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2434 identity=452 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/nova-ks-user-nkbxb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=79eb465ac7 endpointID=2434 k8sNamespace=openstack k8sPodName=nova-ks-user-nkbxb subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=718295f4-4516-494f-bd4b-62007a985a1c k8s:batch.kubernetes.io/job-name=nova-ks-user k8s:component=ks-user k8s:controller-uid=718295f4-4516-494f-bd4b-62007a985a1c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-user k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=79eb465ac7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2434 identity=452 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/nova-ks-user-nkbxb subsys=endpoint level=info msg="Delete endpoint request" containerID=e497e55d25 endpointID=3494 k8sNamespace=openstack k8sPodName=nova-bootstrap-72l9s subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=3f3e0b52-853c-4c72-95d0-04bbaaa9a6e1 k8s:batch.kubernetes.io/job-name=nova-bootstrap k8s:component=bootstrap k8s:controller-uid=3f3e0b52-853c-4c72-95d0-04bbaaa9a6e1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-bootstrap k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=e497e55d25 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3494 identity=3030 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/nova-bootstrap-72l9s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 1df829b7-16d0-4622-aafc-ac0fe4ba54cf default }" containerID=b8b5d3196ba31ab384ed02c9e5b308cd79ec2f31129571a696696028f0ef9262 datapathConfiguration="&{false false false false false }" interface=lxc3f78530a9128 k8sPodName=local-path-storage/helper-pod-create-pvc-0b833864-5ab3-4a26-b2b4-274d888bec94 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8b5d3196b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2418 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b833864-5ab3-4a26-b2b4-274d888bec94 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8b5d3196b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2418 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b833864-5ab3-4a26-b2b4-274d888bec94 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8b5d3196b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2418 identity=30459 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b833864-5ab3-4a26-b2b4-274d888bec94 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8b5d3196b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2418 identity=30459 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b833864-5ab3-4a26-b2b4-274d888bec94 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b8b5d3196b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2418 identity=30459 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b833864-5ab3-4a26-b2b4-274d888bec94 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8b5d3196b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2418 identity=30459 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b833864-5ab3-4a26-b2b4-274d888bec94 subsys=daemon level=info msg="Delete endpoint request" containerID=b8b5d3196b endpointID=2418 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0b833864-5ab3-4a26-b2b4-274d888bec94 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b8b5d3196b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2418 identity=30459 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b833864-5ab3-4a26-b2b4-274d888bec94 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.82 249e44e9-6cd9-42d6-bf75-d3860c6c81e0 default }" containerID=cf56e3e9071befae39ea513347013b7c3238151bbef5da879fc6ac34a13fc5a4 datapathConfiguration="&{false false false false false }" interface=lxc3dbacd3b350c k8sPodName=openstack/rabbitmq-neutron-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf56e3e907 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf56e3e907 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-neutron;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cf56e3e907 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identity=36778 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cf56e3e907 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identity=36778 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cf56e3e907 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=653 identity=36778 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf56e3e907 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=653 identity=36778 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.122 d0560066-16d6-413e-83f4-d880920c416c default }" containerID=0ca59764b6b191e7bc42cd2c6ce30096e8abc1be91d5ab2a9b222bf745fdf248 datapathConfiguration="&{false false false false false }" interface=lxc855f16bebe8f k8sPodName=openstack/neutron-rpc-server-78fcc4f788-grq85 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ca59764b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2387 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/neutron-rpc-server-78fcc4f788-grq85 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ca59764b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2387 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/neutron-rpc-server-78fcc4f788-grq85 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=rpc_server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0ca59764b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2387 identity=65438 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/neutron-rpc-server-78fcc4f788-grq85 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ca59764b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2387 identity=65438 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/neutron-rpc-server-78fcc4f788-grq85 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.192 3f64f920-f92d-4dff-94d8-a0636dd8ecf9 default }" containerID=f571ca6867d2314a65533b7ff2c5829019c7382f4314d350b2cd36446e1f1ba8 datapathConfiguration="&{false false false false false }" interface=lxca001b6c5e7e7 k8sPodName=openstack/neutron-server-6b4fd4449d-xbcj6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f571ca6867 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=91 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/neutron-server-6b4fd4449d-xbcj6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f571ca6867 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=91 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/neutron-server-6b4fd4449d-xbcj6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f571ca6867 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=91 identity=24096 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/neutron-server-6b4fd4449d-xbcj6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f571ca6867 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=91 identity=24096 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/neutron-server-6b4fd4449d-xbcj6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 899a0e54-5fa8-4cb9-8bec-de6fa4d4aae7 default }" containerID=ad67ce4ec3d107de694062fbb51192dcb2e64b36df6b40f34999154bccaf5f68 datapathConfiguration="&{false false false false false }" interface=lxce087f9e1d944 k8sPodName=openstack/neutron-db-init-cwxsn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad67ce4ec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=429 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/neutron-db-init-cwxsn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad67ce4ec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=429 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=63fac4f9-a6df-479f-a77e-2b64a3ffae42,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=63fac4f9-a6df-479f-a77e-2b64a3ffae42,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/neutron-db-init-cwxsn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=63fac4f9-a6df-479f-a77e-2b64a3ffae42;k8s:batch.kubernetes.io/job-name=neutron-db-init;k8s:component=db-init;k8s:controller-uid=63fac4f9-a6df-479f-a77e-2b64a3ffae42;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad67ce4ec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=429 identity=11212 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=63fac4f9-a6df-479f-a77e-2b64a3ffae42,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=63fac4f9-a6df-479f-a77e-2b64a3ffae42,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/neutron-db-init-cwxsn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad67ce4ec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=429 identity=11212 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/neutron-db-init-cwxsn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0ca59764b6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2387 identity=65438 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/neutron-rpc-server-78fcc4f788-grq85 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ca59764b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2387 identity=65438 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/neutron-rpc-server-78fcc4f788-grq85 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f571ca6867 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=91 identity=24096 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/neutron-server-6b4fd4449d-xbcj6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f571ca6867 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=91 identity=24096 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/neutron-server-6b4fd4449d-xbcj6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ad67ce4ec3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=429 identity=11212 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/neutron-db-init-cwxsn subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad67ce4ec3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=429 identity=11212 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/neutron-db-init-cwxsn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ad67ce4ec3 endpointID=429 k8sNamespace=openstack k8sPodName=neutron-db-init-cwxsn subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=63fac4f9-a6df-479f-a77e-2b64a3ffae42 k8s:batch.kubernetes.io/job-name=neutron-db-init k8s:component=db-init k8s:controller-uid=63fac4f9-a6df-479f-a77e-2b64a3ffae42 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=ad67ce4ec3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=429 identity=11212 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/neutron-db-init-cwxsn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 76d5896d-91c3-4df7-92c5-972791ccc809 default }" containerID=e7874a68ef04dff47ee9ec1937abc124195b1c430783d0853adbf4637eb8c27a datapathConfiguration="&{false false false false false }" interface=lxc3bf5e220f329 k8sPodName=openstack/neutron-db-sync-ltksl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7874a68ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/neutron-db-sync-ltksl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7874a68ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=05ac0e7b-d175-48b4-b98c-49682d537706,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=05ac0e7b-d175-48b4-b98c-49682d537706,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/neutron-db-sync-ltksl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e7874a68ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.216 ipv6= k8sPodName=openstack/neutron-db-sync-ltksl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=05ac0e7b-d175-48b4-b98c-49682d537706;k8s:batch.kubernetes.io/job-name=neutron-db-sync;k8s:component=db-sync;k8s:controller-uid=05ac0e7b-d175-48b4-b98c-49682d537706;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-sync;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e7874a68ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 identity=33117 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=05ac0e7b-d175-48b4-b98c-49682d537706,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=05ac0e7b-d175-48b4-b98c-49682d537706,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/neutron-db-sync-ltksl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e7874a68ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 identity=33117 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/neutron-db-sync-ltksl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e7874a68ef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3235 identity=33117 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/neutron-db-sync-ltksl subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7874a68ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3235 identity=33117 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/neutron-db-sync-ltksl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e7874a68ef endpointID=3235 k8sNamespace=openstack k8sPodName=neutron-db-sync-ltksl subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=05ac0e7b-d175-48b4-b98c-49682d537706 k8s:batch.kubernetes.io/job-name=neutron-db-sync k8s:component=db-sync k8s:controller-uid=05ac0e7b-d175-48b4-b98c-49682d537706 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-sync k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=e7874a68ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3235 identity=33117 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/neutron-db-sync-ltksl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 a1ef82c6-c92d-463b-a980-b703066a6aff default }" containerID=abf32ac6f0685e608508ff5d55773512df2a467cbcb2393a6792ef132fe195cf datapathConfiguration="&{false false false false false }" interface=lxc0cc7be392355 k8sPodName=openstack/neutron-rabbit-init-9nx29 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=abf32ac6f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3427 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/neutron-rabbit-init-9nx29 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=abf32ac6f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3427 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=fb634b79-d328-4e8e-b26b-729b8048aceb,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=fb634b79-d328-4e8e-b26b-729b8048aceb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/neutron-rabbit-init-9nx29 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=fb634b79-d328-4e8e-b26b-729b8048aceb;k8s:batch.kubernetes.io/job-name=neutron-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=fb634b79-d328-4e8e-b26b-729b8048aceb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-rabbit-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=abf32ac6f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3427 identity=4370 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=fb634b79-d328-4e8e-b26b-729b8048aceb,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=fb634b79-d328-4e8e-b26b-729b8048aceb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/neutron-rabbit-init-9nx29 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=abf32ac6f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3427 identity=4370 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/neutron-rabbit-init-9nx29 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=abf32ac6f0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3427 identity=4370 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/neutron-rabbit-init-9nx29 subsys=endpoint level=info msg="Successful endpoint creation" containerID=abf32ac6f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3427 identity=4370 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/neutron-rabbit-init-9nx29 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=abf32ac6f0 endpointID=3427 k8sNamespace=openstack k8sPodName=neutron-rabbit-init-9nx29 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=fb634b79-d328-4e8e-b26b-729b8048aceb k8s:batch.kubernetes.io/job-name=neutron-rabbit-init k8s:component=rabbit-init k8s:controller-uid=fb634b79-d328-4e8e-b26b-729b8048aceb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-rabbit-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=abf32ac6f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3427 identity=4370 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/neutron-rabbit-init-9nx29 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 a13dbace-75fa-45bd-8076-9dee67045757 default }" containerID=2037b8c6327a3adc2b3cc9b801f105d2338b40d21b5f575ba7b122e97fb4c72b datapathConfiguration="&{false false false false false }" interface=lxc0d93bb851f32 k8sPodName=openstack/neutron-ks-service-dvwm2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2037b8c632 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1054 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/neutron-ks-service-dvwm2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2037b8c632 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1054 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=1299d9c2-4811-4ea2-a2b4-6251f0b32d95,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=1299d9c2-4811-4ea2-a2b4-6251f0b32d95,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/neutron-ks-service-dvwm2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=1299d9c2-4811-4ea2-a2b4-6251f0b32d95;k8s:batch.kubernetes.io/job-name=neutron-ks-service;k8s:component=ks-service;k8s:controller-uid=1299d9c2-4811-4ea2-a2b4-6251f0b32d95;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-service;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2037b8c632 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1054 identity=9108 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=1299d9c2-4811-4ea2-a2b4-6251f0b32d95,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=1299d9c2-4811-4ea2-a2b4-6251f0b32d95,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/neutron-ks-service-dvwm2 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2037b8c632 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1054 identity=9108 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/neutron-ks-service-dvwm2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2037b8c632 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1054 identity=9108 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/neutron-ks-service-dvwm2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2037b8c632 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1054 identity=9108 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/neutron-ks-service-dvwm2 subsys=daemon level=info msg="Delete endpoint request" containerID=2037b8c632 endpointID=1054 k8sNamespace=openstack k8sPodName=neutron-ks-service-dvwm2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=1299d9c2-4811-4ea2-a2b4-6251f0b32d95 k8s:batch.kubernetes.io/job-name=neutron-ks-service k8s:component=ks-service k8s:controller-uid=1299d9c2-4811-4ea2-a2b4-6251f0b32d95 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-service k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=2037b8c632 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1054 identity=9108 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/neutron-ks-service-dvwm2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 268282b9-1dee-4e3d-9475-ca2fac836984 default }" containerID=4b97722cc221b0983092f0ea49ef97743719b103c2d9fa7edf6383f13e167521 datapathConfiguration="&{false false false false false }" interface=lxc7f808b5dea46 k8sPodName=openstack/neutron-ks-endpoints-gm2px labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b97722cc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2996 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-ks-endpoints-gm2px subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4b97722cc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2996 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=bbd163f2-1c08-40fe-b569-ad1c653490d6,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=bbd163f2-1c08-40fe-b569-ad1c653490d6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-ks-endpoints-gm2px subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=bbd163f2-1c08-40fe-b569-ad1c653490d6;k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=bbd163f2-1c08-40fe-b569-ad1c653490d6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-endpoints;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4b97722cc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2996 identity=32830 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=bbd163f2-1c08-40fe-b569-ad1c653490d6,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=bbd163f2-1c08-40fe-b569-ad1c653490d6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-ks-endpoints-gm2px oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4b97722cc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2996 identity=32830 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-ks-endpoints-gm2px subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4b97722cc2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2996 identity=32830 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-ks-endpoints-gm2px subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b97722cc2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2996 identity=32830 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-ks-endpoints-gm2px subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4b97722cc2 endpointID=2996 k8sNamespace=openstack k8sPodName=neutron-ks-endpoints-gm2px subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=bbd163f2-1c08-40fe-b569-ad1c653490d6 k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=bbd163f2-1c08-40fe-b569-ad1c653490d6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-endpoints k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=4b97722cc2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2996 identity=32830 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-ks-endpoints-gm2px subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 b949a3fa-2842-401d-a8ba-9077b4dff543 default }" containerID=d48ac0a59cd0a64a4af1c3c517f88b10f89dddfa8b8e4dfa67ac28eefbab7f96 datapathConfiguration="&{false false false false false }" interface=lxcb55c9b61b244 k8sPodName=openstack/neutron-ks-user-dkp2s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d48ac0a59c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2074 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/neutron-ks-user-dkp2s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d48ac0a59c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2074 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=7f83ef8a-78a7-4e07-8595-d816176e6524,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=7f83ef8a-78a7-4e07-8595-d816176e6524,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/neutron-ks-user-dkp2s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=7f83ef8a-78a7-4e07-8595-d816176e6524;k8s:batch.kubernetes.io/job-name=neutron-ks-user;k8s:component=ks-user;k8s:controller-uid=7f83ef8a-78a7-4e07-8595-d816176e6524;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-user;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d48ac0a59c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2074 identity=65246 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=7f83ef8a-78a7-4e07-8595-d816176e6524,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=7f83ef8a-78a7-4e07-8595-d816176e6524,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/neutron-ks-user-dkp2s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d48ac0a59c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2074 identity=65246 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/neutron-ks-user-dkp2s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d48ac0a59c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2074 identity=65246 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/neutron-ks-user-dkp2s subsys=endpoint level=info msg="Successful endpoint creation" containerID=d48ac0a59c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2074 identity=65246 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/neutron-ks-user-dkp2s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d48ac0a59c endpointID=2074 k8sNamespace=openstack k8sPodName=neutron-ks-user-dkp2s subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=7f83ef8a-78a7-4e07-8595-d816176e6524 k8s:batch.kubernetes.io/job-name=neutron-ks-user k8s:component=ks-user k8s:controller-uid=7f83ef8a-78a7-4e07-8595-d816176e6524 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-user k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=d48ac0a59c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2074 identity=65246 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/neutron-ks-user-dkp2s subsys=endpoint