level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.238064ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="64.001µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.290495ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="6.77µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=106.996424ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="15.19µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="20.1µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="80.211µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="70.221µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="106.802µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="622.862µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="8.48µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=9.403205ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.274083ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="44.011µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="49.571µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="241.096µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="111.082µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="82.471µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=46.055131ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="248.794µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="83.401µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="3.87µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.35.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=102.923705ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="6.6µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.21695ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.54µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.896634ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="6.1µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="3.02µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.55µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.28µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.47µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="29.062µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="19.07µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="41.461µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="187.654µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="1.65µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="6.04µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="141.742µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="573.721µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.336367ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.49µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="18.28µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.35 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.35 ipAddr.ipv6="" k8sNodeIP=199.204.45.35 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.35" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.234" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.35" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.35} {CiliumInternalIP 10.0.0.234}] 10.0.0.0/24 [] [] 10.0.0.41 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:41965" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.607715365s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="15.74µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="6.251µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="42.951µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="20.451µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=673 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=673 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=673 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.547193241s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=298.770817ms file-path=/var/run/cilium/state/templates/31e202ca6cdff2e0790ff00849f4f74e7ee09a2fc97f7faf78918565eea434c3/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=673 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 dd3682d3-7116-4003-b3f7-4923e23bf728 default }" containerID=5142c853cb6baf8679b6c6b494b1cc9a83d244afe884e366dae1aad8889d31bf datapathConfiguration="&{false false false false false }" interface=lxc78eb870edf20 k8sPodName=kube-system/coredns-7c96b6546b-7x7sn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5142c853cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1905 ipv4=10.0.0.145 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-7x7sn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 4cdf70a6-7729-47c3-b016-37eb539eb60f default }" containerID=1531a7fc28f5487ba793f9dd8259b0c0653d2920c1f311310555968ba7d0e193 datapathConfiguration="&{false false false false false }" interface=lxc4a9d4b2c43e4 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tdkqq labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=5142c853cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1905 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.145 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-7x7sn subsys=endpoint level=info msg="New endpoint" containerID=1531a7fc28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 ipv4=10.0.0.126 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tdkqq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=1531a7fc28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=564b11ae-b414-4f77-9b50-16df0f4b8ff9,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=564b11ae-b414-4f77-9b50-16df0f4b8ff9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.126 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tdkqq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1531a7fc28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.126 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tdkqq line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=5142c853cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1905 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.145 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-7x7sn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=5142c853cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1905 identity=8320 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.145 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-7x7sn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5142c853cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1905 identity=8320 ipv4=10.0.0.145 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-7x7sn subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=564b11ae-b414-4f77-9b50-16df0f4b8ff9;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=564b11ae-b414-4f77-9b50-16df0f4b8ff9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1531a7fc28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 identity=48174 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=564b11ae-b414-4f77-9b50-16df0f4b8ff9,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=564b11ae-b414-4f77-9b50-16df0f4b8ff9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.126 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tdkqq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1531a7fc28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 identity=48174 ipv4=10.0.0.126 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tdkqq subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2250 ipv4=10.0.0.41 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2250 identityLabels="reserved:health" ipv4=10.0.0.41 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2250 identity=4 identityLabels="reserved:health" ipv4=10.0.0.41 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.07613677s file-path=/var/run/cilium/state/templates/5279df732ff3a5bbffb1fe04fb43fe459c589eb05af1c69ebbe11df23c8fb5b7/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=5142c853cb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1905 identity=8320 ipv4=10.0.0.145 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-7x7sn subsys=endpoint level=info msg="Successful endpoint creation" containerID=5142c853cb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1905 identity=8320 ipv4=10.0.0.145 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-7x7sn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2250 identity=4 ipv4=10.0.0.41 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1531a7fc28 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=156 identity=48174 ipv4=10.0.0.126 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tdkqq subsys=endpoint level=info msg="Successful endpoint creation" containerID=1531a7fc28 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=156 identity=48174 ipv4=10.0.0.126 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tdkqq subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1531a7fc28 endpointID=156 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-tdkqq subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=564b11ae-b414-4f77-9b50-16df0f4b8ff9 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=564b11ae-b414-4f77-9b50-16df0f4b8ff9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=1531a7fc28 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=156 identity=48174 ipv4=10.0.0.126 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tdkqq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 df291d9d-1f44-49bc-9b99-77a3a3d19707 default }" containerID=76ac9211f302ca56f846cb9ef260a588d1a4fea2be7e1320a579c8a85285d5ee datapathConfiguration="&{false false false false false }" interface=lxc292823d296b8 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-n9mb6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76ac9211f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 ipv4=10.0.0.230 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-n9mb6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76ac9211f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.230 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-n9mb6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76ac9211f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 identity=58222 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.230 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-n9mb6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=76ac9211f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 identity=58222 ipv4=10.0.0.230 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-n9mb6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=76ac9211f3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=260 identity=58222 ipv4=10.0.0.230 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-n9mb6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=76ac9211f3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=260 identity=58222 ipv4=10.0.0.230 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-n9mb6 subsys=daemon level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=673 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00673 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00673 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00673 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00673:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=673 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 5e81d922-2ad4-495d-a89f-c998d3cc8b99 default }" containerID=d55da28386e7c9122d2c92ad89994f60f3f7f102f9ad530e74085800ed30a726 datapathConfiguration="&{false false false false false }" interface=lxcb7204c2ff58a k8sPodName=kube-system/coredns-67659f764b-dlbf2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d55da28386 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=69 ipv4=10.0.0.228 ipv6= k8sPodName=kube-system/coredns-67659f764b-dlbf2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d55da28386 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=69 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.228 ipv6= k8sPodName=kube-system/coredns-67659f764b-dlbf2 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d55da28386 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=69 identity=8320 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.228 ipv6= k8sPodName=kube-system/coredns-67659f764b-dlbf2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d55da28386 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=69 identity=8320 ipv4=10.0.0.228 ipv6= k8sPodName=kube-system/coredns-67659f764b-dlbf2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 1ec473f4-dc74-4e22-831b-c8324c974871 default }" containerID=c420f5a7ebdad14d517aa84066c7de1d86ba9b7c3e5e0b6e30a549801242b1de datapathConfiguration="&{false false false false false }" interface=lxcab7908786a8a k8sPodName=kube-system/coredns-67659f764b-72q5z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c420f5a7eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=834 ipv4=10.0.0.20 ipv6= k8sPodName=kube-system/coredns-67659f764b-72q5z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c420f5a7eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=834 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.20 ipv6= k8sPodName=kube-system/coredns-67659f764b-72q5z subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c420f5a7eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=834 identity=8320 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.20 ipv6= k8sPodName=kube-system/coredns-67659f764b-72q5z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c420f5a7eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=834 identity=8320 ipv4=10.0.0.20 ipv6= k8sPodName=kube-system/coredns-67659f764b-72q5z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d55da28386 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=69 identity=8320 ipv4=10.0.0.228 ipv6= k8sPodName=kube-system/coredns-67659f764b-dlbf2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d55da28386 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=69 identity=8320 ipv4=10.0.0.228 ipv6= k8sPodName=kube-system/coredns-67659f764b-dlbf2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c420f5a7eb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=834 identity=8320 ipv4=10.0.0.20 ipv6= k8sPodName=kube-system/coredns-67659f764b-72q5z subsys=endpoint level=info msg="Successful endpoint creation" containerID=c420f5a7eb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=834 identity=8320 ipv4=10.0.0.20 ipv6= k8sPodName=kube-system/coredns-67659f764b-72q5z subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.130 275168bd-af5a-43e1-bbf0-08507ecfebcd default }" containerID=c54caf8bd364597095ad78b20076b7df6fa8cfe09b8de46b19a5ca8082a7de44 datapathConfiguration="&{false false false false false }" interface=lxc0419b0f734d2 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8cb5r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c54caf8bd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2457 ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8cb5r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c54caf8bd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2457 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8cb5r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c54caf8bd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2457 identity=27015 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8cb5r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c54caf8bd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2457 identity=27015 ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8cb5r subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c54caf8bd3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2457 identity=27015 ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8cb5r subsys=endpoint level=info msg="Successful endpoint creation" containerID=c54caf8bd3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2457 identity=27015 ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8cb5r subsys=daemon level=info msg="Delete endpoint request" containerID=5142c853cb endpointID=1905 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-7x7sn subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=5142c853cb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1905 identity=8320 ipv4=10.0.0.145 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-7x7sn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 c329ca84-db2f-43cd-af18-7b4891b2b0be default }" containerID=b61d3656f6d8b8bc476dc1b7ae99ecaf2e4e5bd7d349451c9f41ba2681715d6f datapathConfiguration="&{false false false false false }" interface=lxcaac47666852f k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kvbnx labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.51 c6cbec87-6f13-44b8-a3fd-2b67de7a8f82 default }" containerID=f8c33d1b4846b69f096bc70c6e4895bd546151cec5827db76949fa8dd9f4a0d0 datapathConfiguration="&{false false false false false }" interface=lxcedf8a06d24ff k8sPodName=cert-manager/cert-manager-75c4c745bc-6vkvl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b61d3656f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kvbnx subsys=endpoint level=info msg="New endpoint" containerID=f8c33d1b48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2687 ipv4=10.0.0.51 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6vkvl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f8c33d1b48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2687 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.51 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6vkvl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=b61d3656f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kvbnx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 983c610a-fe6f-4c16-8234-738bec795331 default }" containerID=5cae37b6a85598a9dce1af7f6a647c8d043567f5eabf43e3beb2fb46e0f008d0 datapathConfiguration="&{false false false false false }" interface=lxcec920aa470f5 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7kdql labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5cae37b6a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 ipv4=10.0.0.102 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7kdql subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5cae37b6a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.102 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7kdql subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f8c33d1b48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2687 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.51 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6vkvl line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=5cae37b6a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.102 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7kdql line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f8c33d1b48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2687 identity=55936 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.51 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6vkvl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f8c33d1b48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2687 identity=55936 ipv4=10.0.0.51 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6vkvl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=b61d3656f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kvbnx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=b61d3656f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 identity=32848 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kvbnx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b61d3656f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 identity=32848 ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kvbnx subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5cae37b6a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 identity=58307 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.102 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7kdql oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5cae37b6a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 identity=58307 ipv4=10.0.0.102 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7kdql subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f8c33d1b48 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2687 identity=55936 ipv4=10.0.0.51 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6vkvl subsys=endpoint level=info msg="Successful endpoint creation" containerID=f8c33d1b48 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2687 identity=55936 ipv4=10.0.0.51 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6vkvl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b61d3656f6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1671 identity=32848 ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kvbnx subsys=endpoint level=info msg="Successful endpoint creation" containerID=b61d3656f6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1671 identity=32848 ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kvbnx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5cae37b6a8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=990 identity=58307 ipv4=10.0.0.102 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7kdql subsys=endpoint level=info msg="Successful endpoint creation" containerID=5cae37b6a8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=990 identity=58307 ipv4=10.0.0.102 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7kdql subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.221 b603b5cb-40af-423d-9a20-01c851840493 default }" containerID=b6ee50a004cf395ef5fe5e0a914474f2ac74a2ceacdad10e3c6376b563857be9 datapathConfiguration="&{false false false false false }" interface=lxce511ed3f50e3 k8sPodName=cert-manager/cert-manager-startupapicheck-dl7g4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b6ee50a004 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2612 ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dl7g4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b6ee50a004 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2612 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=2c359420-9e34-410e-a8e4-548b921bfbac,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=2c359420-9e34-410e-a8e4-548b921bfbac,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dl7g4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=2c359420-9e34-410e-a8e4-548b921bfbac;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=2c359420-9e34-410e-a8e4-548b921bfbac;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b6ee50a004 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2612 identity=12914 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=2c359420-9e34-410e-a8e4-548b921bfbac,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=2c359420-9e34-410e-a8e4-548b921bfbac,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dl7g4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b6ee50a004 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2612 identity=12914 ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dl7g4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b6ee50a004 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2612 identity=12914 ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dl7g4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b6ee50a004 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2612 identity=12914 ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dl7g4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b6ee50a004 endpointID=2612 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-dl7g4 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=2c359420-9e34-410e-a8e4-548b921bfbac k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=2c359420-9e34-410e-a8e4-548b921bfbac k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=b6ee50a004 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2612 identity=12914 ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dl7g4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.218 edf696d4-c13e-49c1-89c4-e637a03fd5d4 default }" containerID=b7b1b37f6c48f2a1570c64c471eb12bb823090bbbdd7c8c651309b7b499015db datapathConfiguration="&{false false false false false }" interface=lxc147d011be154 k8sPodName=ingress-nginx/ingress-nginx-admission-create-8kfg5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7b1b37f6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3401 ipv4=10.0.0.218 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-8kfg5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7b1b37f6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3401 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=ae30e70b-3eae-4158-94b9-037b6940396c,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=ae30e70b-3eae-4158-94b9-037b6940396c,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.218 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-8kfg5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=ae30e70b-3eae-4158-94b9-037b6940396c;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=ae30e70b-3eae-4158-94b9-037b6940396c;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=b7b1b37f6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3401 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.218 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-8kfg5 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b7b1b37f6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3401 identity=33944 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=ae30e70b-3eae-4158-94b9-037b6940396c,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=ae30e70b-3eae-4158-94b9-037b6940396c,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.218 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-8kfg5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7b1b37f6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3401 identity=33944 ipv4=10.0.0.218 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-8kfg5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b7b1b37f6c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3401 identity=33944 ipv4=10.0.0.218 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-8kfg5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7b1b37f6c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3401 identity=33944 ipv4=10.0.0.218 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-8kfg5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b7b1b37f6c endpointID=3401 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-8kfg5 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=ae30e70b-3eae-4158-94b9-037b6940396c k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=ae30e70b-3eae-4158-94b9-037b6940396c k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=b7b1b37f6c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3401 identity=33944 ipv4=10.0.0.218 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-8kfg5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 2a5100ca-5764-42e0-bcb4-5dedb7f3c40e default }" containerID=0a3317590a2f34cb86ec3db9659137eb429cb9c6b88e37baaf9701966e827f4e datapathConfiguration="&{false false false false false }" interface=lxc9bbddf571d6c k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fb4mv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a3317590a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1397 ipv4=10.0.0.49 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fb4mv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a3317590a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1397 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.49 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fb4mv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a3317590a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1397 identity=20969 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.49 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fb4mv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a3317590a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1397 identity=20969 ipv4=10.0.0.49 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fb4mv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0a3317590a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1397 identity=20969 ipv4=10.0.0.49 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fb4mv subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a3317590a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1397 identity=20969 ipv4=10.0.0.49 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fb4mv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.87 6782c660-6fb8-4afe-b7f3-df9705846ac2 default }" containerID=ceb891d0367684343085b767256e4c2755a23bde49ca2188135b4740d0eedb39 datapathConfiguration="&{false false false false false }" interface=lxcd6b5631d4d4d k8sPodName=ingress-nginx/ingress-nginx-admission-patch-7hltd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ceb891d036 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1214 ipv4=10.0.0.87 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-7hltd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ceb891d036 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1214 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=df666878-5f08-4c4f-b503-042acc2d6b56,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=df666878-5f08-4c4f-b503-042acc2d6b56,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.87 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-7hltd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=df666878-5f08-4c4f-b503-042acc2d6b56;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=df666878-5f08-4c4f-b503-042acc2d6b56;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ceb891d036 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1214 identity=16452 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=df666878-5f08-4c4f-b503-042acc2d6b56,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=df666878-5f08-4c4f-b503-042acc2d6b56,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.87 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-7hltd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ceb891d036 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1214 identity=16452 ipv4=10.0.0.87 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-7hltd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ceb891d036 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1214 identity=16452 ipv4=10.0.0.87 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-7hltd subsys=endpoint level=info msg="Successful endpoint creation" containerID=ceb891d036 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1214 identity=16452 ipv4=10.0.0.87 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-7hltd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ceb891d036 endpointID=1214 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-7hltd subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=df666878-5f08-4c4f-b503-042acc2d6b56 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=df666878-5f08-4c4f-b503-042acc2d6b56 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=ceb891d036 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1214 identity=16452 ipv4=10.0.0.87 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-7hltd subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=ebfad2f5-7c59-430e-aff4-51eed075d9e1] Description:}]" policyAddRequest=9f017407-7927-4a2c-bc3b-7879880fe33c subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=9f017407-7927-4a2c-bc3b-7879880fe33c policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=007b4336-5039-4059-a7be-5f499f3b5307] Description:}]" policyAddRequest=33a9d560-020c-4d10-bd0c-a4640f571434 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=33a9d560-020c-4d10-bd0c-a4640f571434 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.150 e5738824-0f8e-44f5-b53d-7abae9490625 default }" containerID=e71139a1b5b87c3a5d48fa15124c9bbde1194345dd69db706bfc544f42bbb7fc datapathConfiguration="&{false false false false false }" interface=lxc71a772be8d51 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-q9wfw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e71139a1b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3011 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-q9wfw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e71139a1b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3011 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-q9wfw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e71139a1b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3011 identity=19585 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-q9wfw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e71139a1b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3011 identity=19585 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-q9wfw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e71139a1b5 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3011 identity=19585 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-q9wfw subsys=endpoint level=info msg="Successful endpoint creation" containerID=e71139a1b5 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3011 identity=19585 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-q9wfw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.19 ac72ebc4-c052-4959-8103-d15f4153f884 default }" containerID=e4aaec5ba1608c3cb0605e6b900089fec3d03c76fcd3e8d974dfc6480d17a688 datapathConfiguration="&{false false false false false }" interface=lxcc10b261563d7 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hdg6t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4aaec5ba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2932 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hdg6t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4aaec5ba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2932 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hdg6t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e4aaec5ba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2932 identity=2924 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hdg6t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4aaec5ba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2932 identity=2924 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hdg6t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e4aaec5ba1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2932 identity=2924 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hdg6t subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4aaec5ba1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2932 identity=2924 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hdg6t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.76 196290f3-5e1f-41bb-9ff1-5213357a6a91 default }" containerID=456436c4a11449550731698471f92684b2e077f76c9a751c00434d2e283428fc datapathConfiguration="&{false false false false false }" interface=lxc3ea575bd5d7b k8sPodName=openstack/pxc-operator-69cb5bbdb9-8wmxn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=456436c4a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3758 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-8wmxn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=456436c4a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3758 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-8wmxn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=456436c4a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3758 identity=8719 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-8wmxn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=456436c4a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3758 identity=8719 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-8wmxn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=456436c4a1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3758 identity=8719 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-8wmxn subsys=endpoint level=info msg="Successful endpoint creation" containerID=456436c4a1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3758 identity=8719 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-8wmxn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.213 db741d3e-f089-4c36-87d9-2d652071073d default }" containerID=8c6609ba2fd12678e46e24bf07741ad033cfa5ca9752b2ec9b46373bc99cbf80 datapathConfiguration="&{false false false false false }" interface=lxc0744f18c0479 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c6609ba2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3299 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c6609ba2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3299 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8c6609ba2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3299 identity=31172 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8c6609ba2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3299 identity=31172 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8c6609ba2f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3299 identity=31172 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c6609ba2f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3299 identity=31172 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.242 7c10879c-496c-41a8-b1a8-6a910f8ba0db default }" containerID=f1417d4d7e5afd3de88c643279c7d50bc6470560a09a68ed40fbba9b80849b57 datapathConfiguration="&{false false false false false }" interface=lxccdeb50e27c11 k8sPodName=local-path-storage/helper-pod-create-pvc-092cc5c8-9433-4bca-9a68-79be30b8fb34 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f1417d4d7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3590 ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-092cc5c8-9433-4bca-9a68-79be30b8fb34 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f1417d4d7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3590 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-092cc5c8-9433-4bca-9a68-79be30b8fb34 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f1417d4d7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3590 identity=2404 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-092cc5c8-9433-4bca-9a68-79be30b8fb34 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f1417d4d7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3590 identity=2404 ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-092cc5c8-9433-4bca-9a68-79be30b8fb34 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f1417d4d7e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3590 identity=2404 ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-092cc5c8-9433-4bca-9a68-79be30b8fb34 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f1417d4d7e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3590 identity=2404 ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-092cc5c8-9433-4bca-9a68-79be30b8fb34 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f1417d4d7e endpointID=3590 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-092cc5c8-9433-4bca-9a68-79be30b8fb34 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f1417d4d7e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3590 identity=2404 ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-092cc5c8-9433-4bca-9a68-79be30b8fb34 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 f470f717-a286-4b4e-af01-2dc35b1d872a default }" containerID=06e2466113463fd1eba85bc7861df2ed2cf4b251c0f86018732808bc46b57a10 datapathConfiguration="&{false false false false false }" interface=lxc45699a4fa243 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=06e2466113 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3808 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=06e2466113 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3808 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=06e2466113 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3808 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.162 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=06e2466113 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3808 identity=3236 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=06e2466113 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3808 identity=3236 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=06e2466113 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3808 identity=3236 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=06e2466113 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3808 identity=3236 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=382d7b4c-54b1-4484-a789-875dfc9a973b] Description:}]" policyAddRequest=16c7a956-ccb3-436c-9f07-fb5777d9f3c5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=16c7a956-ccb3-436c-9f07-fb5777d9f3c5 policyRevision=4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.87 18429c06-28c3-4fc9-815a-99222edd8391 default }" containerID=638e53e4f9fb44f82e9cf649e10afbb8d51c3c16714c266fa19ae0659f8a740e datapathConfiguration="&{false false false false false }" interface=lxc9ecc05cb0cc7 k8sPodName=local-path-storage/helper-pod-create-pvc-d2f0b813-9ed9-49d2-9ecf-4c9a3587ff32 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=638e53e4f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2590 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d2f0b813-9ed9-49d2-9ecf-4c9a3587ff32 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=638e53e4f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2590 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d2f0b813-9ed9-49d2-9ecf-4c9a3587ff32 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=638e53e4f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2590 identity=2404 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d2f0b813-9ed9-49d2-9ecf-4c9a3587ff32 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=638e53e4f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2590 identity=2404 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d2f0b813-9ed9-49d2-9ecf-4c9a3587ff32 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=638e53e4f9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2590 identity=2404 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d2f0b813-9ed9-49d2-9ecf-4c9a3587ff32 subsys=endpoint level=info msg="Successful endpoint creation" containerID=638e53e4f9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2590 identity=2404 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d2f0b813-9ed9-49d2-9ecf-4c9a3587ff32 subsys=daemon level=info msg="Delete endpoint request" containerID=638e53e4f9 endpointID=2590 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d2f0b813-9ed9-49d2-9ecf-4c9a3587ff32 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=638e53e4f9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2590 identity=2404 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d2f0b813-9ed9-49d2-9ecf-4c9a3587ff32 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 6f92d0a1-ad30-4409-8e27-936c2a2136a2 default }" containerID=9a31e50cc8f2f49517bab10f325c62df3f9d77a011d3665370eeac0867ec67e4 datapathConfiguration="&{false false false false false }" interface=lxc26e23cf246f9 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a31e50cc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a31e50cc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a31e50cc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 identity=46518 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9a31e50cc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 identity=46518 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9a31e50cc8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=341 identity=46518 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a31e50cc8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=341 identity=46518 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=3058679d-2a6e-48d7-9c87-e936ed942f67] Description:}]" policyAddRequest=f400c8c1-1537-4a91-aa21-39208e764a72 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=f400c8c1-1537-4a91-aa21-39208e764a72 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.108 e273e981-1a9a-4ed2-9d64-8dc8d1324829 default }" containerID=cf4833e905ee8f8767c23dcc558658d6239752b5e526284d2a0e77ad0ec0a5d2 datapathConfiguration="&{false false false false false }" interface=lxcd808b2ac1bd3 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf4833e905 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 ipv4=10.0.0.108 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf4833e905 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.108 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cf4833e905 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 identity=31844 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.108 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cf4833e905 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 identity=31844 ipv4=10.0.0.108 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cf4833e905 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=27 identity=31844 ipv4=10.0.0.108 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf4833e905 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=27 identity=31844 ipv4=10.0.0.108 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.008856709997700433 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.84 dca1aa5f-23f8-4340-abf4-a81092ce6798 default }" containerID=192af2ccc28c6e82a9d93c469ab6a46312952e0fa1f56c3c9c67631f89d7c9b7 datapathConfiguration="&{false false false false false }" interface=lxc31ef4914c029 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-b5khn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=192af2ccc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4093 ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-b5khn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=192af2ccc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4093 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-b5khn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=192af2ccc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4093 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-b5khn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=192af2ccc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4093 identity=24748 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-b5khn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=192af2ccc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4093 identity=24748 ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-b5khn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=192af2ccc2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4093 identity=24748 ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-b5khn subsys=endpoint level=info msg="Successful endpoint creation" containerID=192af2ccc2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4093 identity=24748 ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-b5khn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.100 28b5739d-b0e0-416d-86ca-0b01449eb1b9 default }" containerID=195496a4757f8d5c25db50e021e528fc1fe8c9d86b7b77885fa803496e84772b datapathConfiguration="&{false false false false false }" interface=lxc35a6352c7b10 k8sPodName=monitoring/node-feature-discovery-worker-zp2bb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=195496a475 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1605 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zp2bb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=195496a475 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1605 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zp2bb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=195496a475 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1605 identity=13391 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zp2bb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=195496a475 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1605 identity=13391 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zp2bb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=195496a475 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1605 identity=13391 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zp2bb subsys=endpoint level=info msg="Successful endpoint creation" containerID=195496a475 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1605 identity=13391 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zp2bb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.121 2796342c-f990-40b6-8a3a-6d11b06af9e8 default }" containerID=a4abbc79df391e9f37e77385b67a6853e5d17159eb081ff7422dbf83f5343168 datapathConfiguration="&{false false false false false }" interface=lxc6e8e9b1958cf k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rddnb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a4abbc79df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1591 ipv4=10.0.0.121 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rddnb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a4abbc79df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1591 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.121 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rddnb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a4abbc79df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1591 identity=42293 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.121 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rddnb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a4abbc79df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1591 identity=42293 ipv4=10.0.0.121 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rddnb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a4abbc79df datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1591 identity=42293 ipv4=10.0.0.121 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rddnb subsys=endpoint level=info msg="Successful endpoint creation" containerID=a4abbc79df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1591 identity=42293 ipv4=10.0.0.121 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rddnb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.4 f10a1d2b-c3fb-4921-a372-29c1b57628e5 default }" containerID=25c87cff3633c40973687de85909efd9f6c170a7de608700bf169e11cb623099 datapathConfiguration="&{false false false false false }" interface=lxc540c881c5a09 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xx6f4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=25c87cff36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1788 ipv4=10.0.0.4 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xx6f4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=25c87cff36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1788 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.4 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xx6f4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=25c87cff36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1788 identity=21511 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.4 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xx6f4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=25c87cff36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1788 identity=21511 ipv4=10.0.0.4 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xx6f4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=25c87cff36 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1788 identity=21511 ipv4=10.0.0.4 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xx6f4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=25c87cff36 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1788 identity=21511 ipv4=10.0.0.4 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xx6f4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=673 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-179-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00673 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00673 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00673 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00673:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=673 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 189b1771-cad4-4427-a5d2-26a210e96eb6 default }" containerID=f38e2e1f1d7c16bc061b0992df536772c9441ef53b27c9548ab2eaa7ae3c584d datapathConfiguration="&{false false false false false }" interface=lxc8510bb318272 k8sPodName=monitoring/kube-prometheus-stack-admission-create-s9x4z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f38e2e1f1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3543 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-s9x4z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f38e2e1f1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3543 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=2bdfa352-b59e-417a-b858-e511ac9d4906,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=2bdfa352-b59e-417a-b858-e511ac9d4906,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-s9x4z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f38e2e1f1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3543 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-s9x4z line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=2bdfa352-b59e-417a-b858-e511ac9d4906;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=2bdfa352-b59e-417a-b858-e511ac9d4906;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f38e2e1f1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3543 identity=24712 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=2bdfa352-b59e-417a-b858-e511ac9d4906,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=2bdfa352-b59e-417a-b858-e511ac9d4906,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-s9x4z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f38e2e1f1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3543 identity=24712 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-s9x4z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f38e2e1f1d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3543 identity=24712 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-s9x4z subsys=endpoint level=info msg="Successful endpoint creation" containerID=f38e2e1f1d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3543 identity=24712 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-s9x4z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f38e2e1f1d endpointID=3543 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-s9x4z subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=2bdfa352-b59e-417a-b858-e511ac9d4906 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=2bdfa352-b59e-417a-b858-e511ac9d4906 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=f38e2e1f1d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3543 identity=24712 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-s9x4z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 9c7dee39-1d09-4a47-a6eb-702ad038e69c default }" containerID=50f1a013b60f29912ccd378c080cd886b1d39d9fa68e186ed3ea663c167694e5 datapathConfiguration="&{false false false false false }" interface=lxc7342d2e94f85 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pjqgv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=50f1a013b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1099 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pjqgv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=50f1a013b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1099 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pjqgv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=50f1a013b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1099 identity=32667 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pjqgv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=50f1a013b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1099 identity=32667 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pjqgv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.131 db6cd0f4-3abf-49d4-9592-415d03a87bbc default }" containerID=c846df9d948b2b09828e195f83babd011b95cda9ce2c4e405e4288feb3555c54 datapathConfiguration="&{false false false false false }" interface=lxc5f9310e25890 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2z8sv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c846df9d94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2463 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2z8sv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c846df9d94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2463 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2z8sv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c846df9d94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2463 identity=44524 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2z8sv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c846df9d94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2463 identity=44524 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2z8sv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=50f1a013b6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1099 identity=32667 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pjqgv subsys=endpoint level=info msg="Successful endpoint creation" containerID=50f1a013b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1099 identity=32667 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pjqgv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.211 0caa5f95-8b17-4e92-977b-73c9fc3b0631 default }" containerID=77870ea3c643fb047198b5c653f84e59888ba374510d290b8d5c4bc2ef7813ca datapathConfiguration="&{false false false false false }" interface=lxc83d748990e2c k8sPodName=monitoring/kube-prometheus-stack-grafana-5fb9f76bf9-8p62z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=77870ea3c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5fb9f76bf9-8p62z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=77870ea3c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5fb9f76bf9-8p62z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=77870ea3c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 identity=32550 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5fb9f76bf9-8p62z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=77870ea3c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 identity=32550 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5fb9f76bf9-8p62z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c846df9d94 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2463 identity=44524 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2z8sv subsys=endpoint level=info msg="Successful endpoint creation" containerID=c846df9d94 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2463 identity=44524 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2z8sv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=77870ea3c6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=167 identity=32550 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5fb9f76bf9-8p62z subsys=endpoint level=info msg="Successful endpoint creation" containerID=77870ea3c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=167 identity=32550 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5fb9f76bf9-8p62z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.77 b92afb6a-a796-48c0-a47f-318d7b9c31a6 default }" containerID=02cc9c2e9b6371f8c3c12778bc894894aca4ffe67499cff6b61c97af7b9b030c datapathConfiguration="&{false false false false false }" interface=lxc528bf4c4e9b3 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-4clj7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=02cc9c2e9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=135 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-4clj7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=02cc9c2e9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=135 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=dcae5827-56c5-4ca9-b7ac-e2c810897ecd,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=dcae5827-56c5-4ca9-b7ac-e2c810897ecd,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-4clj7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=dcae5827-56c5-4ca9-b7ac-e2c810897ecd;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=dcae5827-56c5-4ca9-b7ac-e2c810897ecd;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=02cc9c2e9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=135 identity=58107 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=dcae5827-56c5-4ca9-b7ac-e2c810897ecd,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=dcae5827-56c5-4ca9-b7ac-e2c810897ecd,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-4clj7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=02cc9c2e9b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=135 identity=58107 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-4clj7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=02cc9c2e9b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=135 identity=58107 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-4clj7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=02cc9c2e9b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=135 identity=58107 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-4clj7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.3 6bd1aee3-7fe6-4163-a96b-d7f37932e0e2 default }" containerID=858426a52813ae866af0895e448921eed28419e7ae9419987cf1138f98551b13 datapathConfiguration="&{false false false false false }" interface=lxc749de612cf34 k8sPodName=local-path-storage/helper-pod-create-pvc-b6d887ac-2735-48a2-a34e-2fe1527ca05a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=858426a528 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1297 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6d887ac-2735-48a2-a34e-2fe1527ca05a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=858426a528 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1297 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6d887ac-2735-48a2-a34e-2fe1527ca05a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=858426a528 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1297 identity=2404 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6d887ac-2735-48a2-a34e-2fe1527ca05a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=858426a528 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1297 identity=2404 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6d887ac-2735-48a2-a34e-2fe1527ca05a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=858426a528 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1297 identity=2404 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6d887ac-2735-48a2-a34e-2fe1527ca05a subsys=endpoint level=info msg="Successful endpoint creation" containerID=858426a528 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1297 identity=2404 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6d887ac-2735-48a2-a34e-2fe1527ca05a subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.254 016f898f-4ef1-4ce6-ad06-6f55cabfd5c2 default }" containerID=d48917e0f1cc9625bdec473d60c9a4dec3e2b2c353e5a0758113f95294ea400f datapathConfiguration="&{false false false false false }" interface=lxc4ef883277caa k8sPodName=local-path-storage/helper-pod-create-pvc-17e17e02-9335-4c36-8ae3-8059e51f4d5d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d48917e0f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2353 ipv4=10.0.0.254 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-17e17e02-9335-4c36-8ae3-8059e51f4d5d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d48917e0f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2353 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.254 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-17e17e02-9335-4c36-8ae3-8059e51f4d5d subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d48917e0f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2353 identity=2404 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.254 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-17e17e02-9335-4c36-8ae3-8059e51f4d5d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d48917e0f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2353 identity=2404 ipv4=10.0.0.254 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-17e17e02-9335-4c36-8ae3-8059e51f4d5d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d48917e0f1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2353 identity=2404 ipv4=10.0.0.254 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-17e17e02-9335-4c36-8ae3-8059e51f4d5d subsys=endpoint level=info msg="Successful endpoint creation" containerID=d48917e0f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2353 identity=2404 ipv4=10.0.0.254 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-17e17e02-9335-4c36-8ae3-8059e51f4d5d subsys=daemon level=info msg="Delete endpoint request" containerID=02cc9c2e9b endpointID=135 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-4clj7 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=dcae5827-56c5-4ca9-b7ac-e2c810897ecd k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=dcae5827-56c5-4ca9-b7ac-e2c810897ecd k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=02cc9c2e9b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=135 identity=58107 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-4clj7 subsys=endpoint level=info msg="Delete endpoint request" containerID=858426a528 endpointID=1297 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b6d887ac-2735-48a2-a34e-2fe1527ca05a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=d48917e0f1 endpointID=2353 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-17e17e02-9335-4c36-8ae3-8059e51f4d5d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d48917e0f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2353 identity=2404 ipv4=10.0.0.254 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-17e17e02-9335-4c36-8ae3-8059e51f4d5d subsys=endpoint level=info msg="Removed endpoint" containerID=858426a528 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1297 identity=2404 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6d887ac-2735-48a2-a34e-2fe1527ca05a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 8c8723fc-78df-43e2-b990-1feed44b64fe default }" containerID=e9afad06781edef591ba8935717a38103e9590e97611e20dd6dbd6230c6ed6b4 datapathConfiguration="&{false false false false false }" interface=lxcafa5859a358c k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e9afad0678 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1362 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e9afad0678 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1362 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e9afad0678 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1362 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e9afad0678 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1362 identity=7520 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e9afad0678 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1362 identity=7520 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e9afad0678 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1362 identity=7520 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e9afad0678 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1362 identity=7520 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.236 5665d230-08a0-42e2-9ef7-328dfff3896c default }" containerID=37180e8260e12346f5d3db0beda5e4a04edf6582e5bff4a1c0a098baac352de9 datapathConfiguration="&{false false false false false }" interface=lxc36d195943a16 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37180e8260 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1762 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37180e8260 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1762 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=37180e8260 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1762 identity=23181 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=37180e8260 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1762 identity=23181 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=37180e8260 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1762 identity=23181 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=37180e8260 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1762 identity=23181 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.202 a2552522-ba77-466e-9826-c1a64142ef6e default }" containerID=bd7bd6639133d92ea181467d6fa6cc022985e812f108e3fca35cc0b208271075 datapathConfiguration="&{false false false false false }" interface=lxc027de9266782 k8sPodName=monitoring/loki-gateway-cf54cb88c-xpmps labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd7bd66391 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3479 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xpmps subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd7bd66391 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3479 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xpmps subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.26 6055b708-5455-4117-9acb-2b28d1b7dc30 default }" containerID=1bf327c4b2e956128f3984560f8409ec47152585bb5c323363498e7763a769d5 datapathConfiguration="&{false false false false false }" interface=lxcc9d6ab778ff8 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1bf327c4b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1689 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1bf327c4b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1689 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bd7bd66391 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3479 identity=11418 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xpmps oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd7bd66391 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3479 identity=11418 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xpmps subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1bf327c4b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1689 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/loki-results-cache-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1bf327c4b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1689 identity=4289 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1bf327c4b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1689 identity=4289 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 ab08a6d7-4cce-432b-afcd-57a196552d87 default }" containerID=48edd6721d98d0ade5e20e396fb1e20e5a714f6684099c8147c3b73bf04374f6 datapathConfiguration="&{false false false false false }" interface=lxc203527cd3eee k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=48edd6721d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2861 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=48edd6721d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2861 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=48edd6721d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2861 identity=42281 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=48edd6721d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2861 identity=42281 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 64f164af-985a-4e53-9eef-80688926d65b default }" containerID=7059ef956b87be692cc80bb6df0b44fca878f1168c03ca98129ffd8e5571035d datapathConfiguration="&{false false false false false }" interface=lxc61594a97c918 k8sPodName=local-path-storage/helper-pod-create-pvc-4b432f46-743b-467a-b3a9-adf58874bd9b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7059ef956b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=11 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b432f46-743b-467a-b3a9-adf58874bd9b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7059ef956b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=11 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b432f46-743b-467a-b3a9-adf58874bd9b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7059ef956b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=11 identity=2404 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b432f46-743b-467a-b3a9-adf58874bd9b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7059ef956b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=11 identity=2404 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b432f46-743b-467a-b3a9-adf58874bd9b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bd7bd66391 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3479 identity=11418 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xpmps subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd7bd66391 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3479 identity=11418 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xpmps subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=48edd6721d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2861 identity=42281 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=48edd6721d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2861 identity=42281 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1bf327c4b2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1689 identity=4289 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1bf327c4b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1689 identity=4289 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7059ef956b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=11 identity=2404 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b432f46-743b-467a-b3a9-adf58874bd9b subsys=endpoint level=info msg="Successful endpoint creation" containerID=7059ef956b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=11 identity=2404 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b432f46-743b-467a-b3a9-adf58874bd9b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.161 5e6e690b-1018-48f3-968a-cf817d965f16 default }" containerID=5d2e2cf8f399f6500bc11ff88f64a719d6cf7445b16d7a7252469765000b6d91 datapathConfiguration="&{false false false false false }" interface=lxc031487912373 k8sPodName=monitoring/vector-9qsj2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d2e2cf8f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=165 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/vector-9qsj2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d2e2cf8f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=165 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/vector-9qsj2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d2e2cf8f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=165 identity=14884 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/vector-9qsj2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d2e2cf8f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=165 identity=14884 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/vector-9qsj2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5d2e2cf8f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=165 identity=14884 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/vector-9qsj2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d2e2cf8f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=165 identity=14884 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/vector-9qsj2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7059ef956b endpointID=11 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4b432f46-743b-467a-b3a9-adf58874bd9b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7059ef956b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=11 identity=2404 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b432f46-743b-467a-b3a9-adf58874bd9b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 0ae60156-03be-4c2a-89f4-e77d44ef465f default }" containerID=586e59a93e9d08b454d97d170bbb102ec5f17adc3820bfa0ad88df808d2a22a6 datapathConfiguration="&{false false false false false }" interface=lxc2b3c61897a3f k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=586e59a93e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1807 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=586e59a93e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1807 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=586e59a93e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1807 identity=18340 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=586e59a93e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1807 identity=18340 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=586e59a93e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1807 identity=18340 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=586e59a93e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1807 identity=18340 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.144 d68b3d2b-dab1-40ec-9d3e-6aa34b01393f default }" containerID=43c842fcf1d960f9c3297f74bfc43b4f7a876aa93e6f370db841c49307fe1e29 datapathConfiguration="&{false false false false false }" interface=lxc5968f8ef610e k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-fdwg8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=43c842fcf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2893 ipv4=10.0.0.144 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-fdwg8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43c842fcf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2893 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.144 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-fdwg8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=43c842fcf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2893 identity=2685 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.144 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-fdwg8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=43c842fcf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2893 identity=2685 ipv4=10.0.0.144 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-fdwg8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=43c842fcf1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2893 identity=2685 ipv4=10.0.0.144 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-fdwg8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=43c842fcf1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2893 identity=2685 ipv4=10.0.0.144 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-fdwg8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.109 c296fb7a-b77b-4c39-9ec7-fda0ae6877a2 default }" containerID=cc439ba820b317aaf36cfd155d9cfe1cd3767187d4d0f42558c82a371f8a7496 datapathConfiguration="&{false false false false false }" interface=lxce066c4ae3c6e k8sPodName=openstack/memcached-memcached-6479589586-kztfl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc439ba820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1420 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kztfl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc439ba820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1420 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kztfl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=cc439ba820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1420 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.109 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kztfl line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=cc439ba820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1420 identity=47200 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kztfl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc439ba820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1420 identity=47200 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kztfl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cc439ba820 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1420 identity=47200 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kztfl subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc439ba820 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1420 identity=47200 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kztfl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.59 cc648f44-e461-4c82-87c2-d3748c198ef7 default }" containerID=94278b73014c4d751bb4ab1ecc64a1361d471f09a6e2d0bdf8bf1f85a909f552 datapathConfiguration="&{false false false false false }" interface=lxc3601982b6f90 k8sPodName=local-path-storage/helper-pod-create-pvc-78564268-7530-4858-a564-a73561f0b5f2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94278b7301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3853 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-78564268-7530-4858-a564-a73561f0b5f2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94278b7301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3853 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-78564268-7530-4858-a564-a73561f0b5f2 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=94278b7301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3853 identity=2404 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-78564268-7530-4858-a564-a73561f0b5f2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=94278b7301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3853 identity=2404 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-78564268-7530-4858-a564-a73561f0b5f2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=94278b7301 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3853 identity=2404 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-78564268-7530-4858-a564-a73561f0b5f2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=94278b7301 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3853 identity=2404 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-78564268-7530-4858-a564-a73561f0b5f2 subsys=daemon level=info msg="Delete endpoint request" containerID=94278b7301 endpointID=3853 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-78564268-7530-4858-a564-a73561f0b5f2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=94278b7301 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3853 identity=2404 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-78564268-7530-4858-a564-a73561f0b5f2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 3f359dbe-b652-4006-a6a2-f43c63ed8e2b default }" containerID=6146ea34a8db69739aba757ae356d4d8357ac6095df9bcc1fdcc04ce4ea6183e datapathConfiguration="&{false false false false false }" interface=lxc6c838b07c277 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6146ea34a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=950 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6146ea34a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=950 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6146ea34a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=950 identity=46127 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6146ea34a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=950 identity=46127 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6146ea34a8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=950 identity=46127 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6146ea34a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=950 identity=46127 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.115 58833a79-3dca-480d-8927-9362393cedd3 default }" containerID=9e54aa3b20c6cf3436c239d851db2ea035e71df191baac7f5302b747ab0a6770 datapathConfiguration="&{false false false false false }" interface=lxc350c61ab0a85 k8sPodName=openstack/keystone-api-69b8c6cbb6-swfwq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e54aa3b20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1712 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-api-69b8c6cbb6-swfwq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e54aa3b20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1712 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-api-69b8c6cbb6-swfwq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9e54aa3b20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1712 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-api-69b8c6cbb6-swfwq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e54aa3b20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1712 identity=42438 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-api-69b8c6cbb6-swfwq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e54aa3b20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1712 identity=42438 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-api-69b8c6cbb6-swfwq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.199 88b08ee9-db52-4dd0-bd22-3e8b724296ab default }" containerID=048583d251f4129fea8c870a97ab2c0fb558a4d9ebef754eed43041b08369026 datapathConfiguration="&{false false false false false }" interface=lxca6fdef15fa49 k8sPodName=openstack/keystone-credential-setup-6zp5d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=048583d251 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=959 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-credential-setup-6zp5d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=048583d251 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=959 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8f37aadc-ff7f-468a-b6cb-fb5ae9b2dddc,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=8f37aadc-ff7f-468a-b6cb-fb5ae9b2dddc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-credential-setup-6zp5d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8f37aadc-ff7f-468a-b6cb-fb5ae9b2dddc;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=8f37aadc-ff7f-468a-b6cb-fb5ae9b2dddc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=048583d251 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=959 identity=42564 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8f37aadc-ff7f-468a-b6cb-fb5ae9b2dddc,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=8f37aadc-ff7f-468a-b6cb-fb5ae9b2dddc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-credential-setup-6zp5d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=048583d251 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=959 identity=42564 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-credential-setup-6zp5d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e54aa3b20 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1712 identity=42438 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-api-69b8c6cbb6-swfwq subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e54aa3b20 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1712 identity=42438 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-api-69b8c6cbb6-swfwq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=048583d251 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=959 identity=42564 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-credential-setup-6zp5d subsys=endpoint level=info msg="Successful endpoint creation" containerID=048583d251 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=959 identity=42564 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-credential-setup-6zp5d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=048583d251 endpointID=959 k8sNamespace=openstack k8sPodName=keystone-credential-setup-6zp5d subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8f37aadc-ff7f-468a-b6cb-fb5ae9b2dddc k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=8f37aadc-ff7f-468a-b6cb-fb5ae9b2dddc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=048583d251 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=959 identity=42564 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-credential-setup-6zp5d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 438319a9-fe97-4816-b90d-06fad42543cd default }" containerID=3295d0f7a7cfa133601aac2c66695b743c927c3aa040a920590c497c3a7edf67 datapathConfiguration="&{false false false false false }" interface=lxcce4c7639f43a k8sPodName=openstack/keystone-db-init-wdzkb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3295d0f7a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1471 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-init-wdzkb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3295d0f7a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1471 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=63b483b8-4bf4-4561-9cef-3160b52953de,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=63b483b8-4bf4-4561-9cef-3160b52953de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-init-wdzkb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=63b483b8-4bf4-4561-9cef-3160b52953de;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=63b483b8-4bf4-4561-9cef-3160b52953de;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3295d0f7a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1471 identity=28085 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=63b483b8-4bf4-4561-9cef-3160b52953de,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=63b483b8-4bf4-4561-9cef-3160b52953de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-init-wdzkb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3295d0f7a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1471 identity=28085 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-init-wdzkb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3295d0f7a7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1471 identity=28085 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-init-wdzkb subsys=endpoint level=info msg="Successful endpoint creation" containerID=3295d0f7a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1471 identity=28085 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-init-wdzkb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3295d0f7a7 endpointID=1471 k8sNamespace=openstack k8sPodName=keystone-db-init-wdzkb subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=63b483b8-4bf4-4561-9cef-3160b52953de k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=63b483b8-4bf4-4561-9cef-3160b52953de k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3295d0f7a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1471 identity=28085 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-init-wdzkb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 580655d6-d9c6-425e-934f-9d02c984937c default }" containerID=6115e9d97875a96f5bd1de6478aa052c5acf76f5f4d20c3034cba73ba6aff898 datapathConfiguration="&{false false false false false }" interface=lxc0633826b0f43 k8sPodName=openstack/keystone-fernet-setup-vrp42 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6115e9d978 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3344 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-fernet-setup-vrp42 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6115e9d978 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3344 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=179c8006-213f-419f-af5a-667e1dd6d316,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=179c8006-213f-419f-af5a-667e1dd6d316,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-fernet-setup-vrp42 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=179c8006-213f-419f-af5a-667e1dd6d316;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=179c8006-213f-419f-af5a-667e1dd6d316;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6115e9d978 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3344 identity=60764 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=179c8006-213f-419f-af5a-667e1dd6d316,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=179c8006-213f-419f-af5a-667e1dd6d316,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-fernet-setup-vrp42 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6115e9d978 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3344 identity=60764 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-fernet-setup-vrp42 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6115e9d978 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3344 identity=60764 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-fernet-setup-vrp42 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6115e9d978 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3344 identity=60764 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-fernet-setup-vrp42 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6115e9d978 endpointID=3344 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-vrp42 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=179c8006-213f-419f-af5a-667e1dd6d316 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=179c8006-213f-419f-af5a-667e1dd6d316 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6115e9d978 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3344 identity=60764 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-fernet-setup-vrp42 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 dc927a46-b21e-4700-a52f-24398beb3e71 default }" containerID=bdbccf5925a406b2536d953792569f83782ee58ac0155dc2392e2e1479bc633e datapathConfiguration="&{false false false false false }" interface=lxca166f29ad716 k8sPodName=openstack/keystone-db-sync-q9jkd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bdbccf5925 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-db-sync-q9jkd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bdbccf5925 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0d6c5838-9399-4d29-a9ad-bf9076c1a74e,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=0d6c5838-9399-4d29-a9ad-bf9076c1a74e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-db-sync-q9jkd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0d6c5838-9399-4d29-a9ad-bf9076c1a74e;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=0d6c5838-9399-4d29-a9ad-bf9076c1a74e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bdbccf5925 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identity=23861 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0d6c5838-9399-4d29-a9ad-bf9076c1a74e,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=0d6c5838-9399-4d29-a9ad-bf9076c1a74e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-db-sync-q9jkd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bdbccf5925 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identity=23861 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-db-sync-q9jkd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bdbccf5925 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=606 identity=23861 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-db-sync-q9jkd subsys=endpoint level=info msg="Successful endpoint creation" containerID=bdbccf5925 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=606 identity=23861 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-db-sync-q9jkd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bdbccf5925 endpointID=606 k8sNamespace=openstack k8sPodName=keystone-db-sync-q9jkd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0d6c5838-9399-4d29-a9ad-bf9076c1a74e k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=0d6c5838-9399-4d29-a9ad-bf9076c1a74e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=bdbccf5925 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=606 identity=23861 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-db-sync-q9jkd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 82b22e42-e727-4e31-885b-822c4dce817a default }" containerID=6fe8e707530451035fd11b9cf309e65a588ce4bb8dbf49c1c87c41f73cb77635 datapathConfiguration="&{false false false false false }" interface=lxcaedb57e69b0b k8sPodName=openstack/keystone-rabbit-init-xzk5c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6fe8e70753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-rabbit-init-xzk5c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6fe8e70753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=64e1082b-c948-4856-88df-fcb4c47fd224,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=64e1082b-c948-4856-88df-fcb4c47fd224,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-rabbit-init-xzk5c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=64e1082b-c948-4856-88df-fcb4c47fd224;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=64e1082b-c948-4856-88df-fcb4c47fd224;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=6fe8e70753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 identity=7407 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=64e1082b-c948-4856-88df-fcb4c47fd224,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=64e1082b-c948-4856-88df-fcb4c47fd224,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-rabbit-init-xzk5c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6fe8e70753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 identity=7407 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-rabbit-init-xzk5c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6fe8e70753 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=885 identity=7407 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-rabbit-init-xzk5c subsys=endpoint level=info msg="Successful endpoint creation" containerID=6fe8e70753 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=885 identity=7407 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-rabbit-init-xzk5c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6fe8e70753 endpointID=885 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-xzk5c subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=64e1082b-c948-4856-88df-fcb4c47fd224 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=64e1082b-c948-4856-88df-fcb4c47fd224 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6fe8e70753 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=885 identity=7407 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-rabbit-init-xzk5c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 8cecfad8-29a1-4e07-95e3-1f0eb1016feb default }" containerID=f5dc36eda783ec8d445969d54d821fbb1f75a1a74910b28bb0b2da74298c570a datapathConfiguration="&{false false false false false }" interface=lxc73ed41231199 k8sPodName=openstack/keystone-domain-manage-hrkxl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5dc36eda7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2119 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-domain-manage-hrkxl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5dc36eda7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2119 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=85bbae98-ce73-41ec-beb7-9f1c1e019baa,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=85bbae98-ce73-41ec-beb7-9f1c1e019baa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-domain-manage-hrkxl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f5dc36eda7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2119 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-domain-manage-hrkxl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=85bbae98-ce73-41ec-beb7-9f1c1e019baa;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=85bbae98-ce73-41ec-beb7-9f1c1e019baa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f5dc36eda7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2119 identity=39718 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=85bbae98-ce73-41ec-beb7-9f1c1e019baa,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=85bbae98-ce73-41ec-beb7-9f1c1e019baa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-domain-manage-hrkxl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f5dc36eda7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2119 identity=39718 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-domain-manage-hrkxl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f5dc36eda7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2119 identity=39718 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-domain-manage-hrkxl subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5dc36eda7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2119 identity=39718 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-domain-manage-hrkxl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f5dc36eda7 endpointID=2119 k8sNamespace=openstack k8sPodName=keystone-domain-manage-hrkxl subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=85bbae98-ce73-41ec-beb7-9f1c1e019baa k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=85bbae98-ce73-41ec-beb7-9f1c1e019baa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f5dc36eda7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2119 identity=39718 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-domain-manage-hrkxl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.168 8502af79-d45f-4dbb-9d99-2c3c180b906e default }" containerID=cd71737f32efb56128a67fd4909a3a0b4561ce0f6f2a7789333b7666148f3076 datapathConfiguration="&{false false false false false }" interface=lxcb88c4cdb59c8 k8sPodName=openstack/keystone-bootstrap-hbrnf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd71737f32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=604 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/keystone-bootstrap-hbrnf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd71737f32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=604 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=01a5ddc3-1b5a-4f98-94e1-3fc6264c9f0c,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=01a5ddc3-1b5a-4f98-94e1-3fc6264c9f0c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/keystone-bootstrap-hbrnf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=01a5ddc3-1b5a-4f98-94e1-3fc6264c9f0c;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=01a5ddc3-1b5a-4f98-94e1-3fc6264c9f0c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cd71737f32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=604 identity=47209 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=01a5ddc3-1b5a-4f98-94e1-3fc6264c9f0c,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=01a5ddc3-1b5a-4f98-94e1-3fc6264c9f0c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/keystone-bootstrap-hbrnf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cd71737f32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=604 identity=47209 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/keystone-bootstrap-hbrnf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cd71737f32 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=604 identity=47209 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/keystone-bootstrap-hbrnf subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd71737f32 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=604 identity=47209 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/keystone-bootstrap-hbrnf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cd71737f32 endpointID=604 k8sNamespace=openstack k8sPodName=keystone-bootstrap-hbrnf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=01a5ddc3-1b5a-4f98-94e1-3fc6264c9f0c k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=01a5ddc3-1b5a-4f98-94e1-3fc6264c9f0c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=cd71737f32 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=604 identity=47209 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/keystone-bootstrap-hbrnf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 4370f452-fd71-4c47-9b05-5f383fcfee7f default }" containerID=7a3f8b2a388a48aa6b4f9816195acbfcd452fc86c7ea65ddd2776c9a671a3a5f datapathConfiguration="&{false false false false false }" interface=lxc8128861bf30f k8sPodName=local-path-storage/helper-pod-create-pvc-fdccfcbc-9ed5-42ee-bb1c-a4736e06ae57 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a3f8b2a38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1345 ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fdccfcbc-9ed5-42ee-bb1c-a4736e06ae57 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a3f8b2a38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1345 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fdccfcbc-9ed5-42ee-bb1c-a4736e06ae57 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a3f8b2a38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1345 identity=2404 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fdccfcbc-9ed5-42ee-bb1c-a4736e06ae57 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a3f8b2a38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1345 identity=2404 ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fdccfcbc-9ed5-42ee-bb1c-a4736e06ae57 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7a3f8b2a38 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1345 identity=2404 ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fdccfcbc-9ed5-42ee-bb1c-a4736e06ae57 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a3f8b2a38 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1345 identity=2404 ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fdccfcbc-9ed5-42ee-bb1c-a4736e06ae57 subsys=daemon level=info msg="Delete endpoint request" containerID=7a3f8b2a38 endpointID=1345 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fdccfcbc-9ed5-42ee-bb1c-a4736e06ae57 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7a3f8b2a38 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1345 identity=2404 ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fdccfcbc-9ed5-42ee-bb1c-a4736e06ae57 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 afb55450-3e3c-4715-b30a-a5a2a04d1297 default }" containerID=2402a1bf5c1ef81add51865e754ee499927269de0fef61bc6a9c5ea227721fc6 datapathConfiguration="&{false false false false false }" interface=lxc25e196b2f3cf k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2402a1bf5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1525 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2402a1bf5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1525 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=2402a1bf5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1525 identity=20868 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2402a1bf5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1525 identity=20868 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2402a1bf5c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1525 identity=20868 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2402a1bf5c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1525 identity=20868 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03496354511883344 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.212 05bc695c-d02e-46d4-95d6-2623a39c6a6a default }" containerID=2bec70631be94dbbbabe334812f34b861571a5ddf6a9a04a73c9957070ce0324 datapathConfiguration="&{false false false false false }" interface=lxc0cf7ca3c3c34 k8sPodName=openstack/barbican-api-5995b86b87-v2rsm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2bec70631b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/barbican-api-5995b86b87-v2rsm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2bec70631b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/barbican-api-5995b86b87-v2rsm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.177 c1a95772-708f-4a3c-897e-ddf3b7850535 default }" containerID=e4908a8d6c0481da6c14dbffb0319aa0d9b5fb982255d67e1650a3cff78d551a datapathConfiguration="&{false false false false false }" interface=lxcc1dfbcbfbc82 k8sPodName=openstack/barbican-db-init-wthxz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4908a8d6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1567 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-db-init-wthxz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4908a8d6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1567 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=02e65ec1-0fb0-495c-ac34-14ba7517e085,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=02e65ec1-0fb0-495c-ac34-14ba7517e085,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-db-init-wthxz subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=2bec70631b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 identity=1394 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/barbican-api-5995b86b87-v2rsm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2bec70631b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 identity=1394 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/barbican-api-5995b86b87-v2rsm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=e4908a8d6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1567 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-db-init-wthxz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=02e65ec1-0fb0-495c-ac34-14ba7517e085;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=02e65ec1-0fb0-495c-ac34-14ba7517e085;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e4908a8d6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1567 identity=23432 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=02e65ec1-0fb0-495c-ac34-14ba7517e085,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=02e65ec1-0fb0-495c-ac34-14ba7517e085,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-db-init-wthxz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4908a8d6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1567 identity=23432 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-db-init-wthxz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2bec70631b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=521 identity=1394 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/barbican-api-5995b86b87-v2rsm subsys=endpoint level=info msg="Successful endpoint creation" containerID=2bec70631b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=521 identity=1394 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/barbican-api-5995b86b87-v2rsm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e4908a8d6c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1567 identity=23432 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-db-init-wthxz subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4908a8d6c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1567 identity=23432 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-db-init-wthxz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e4908a8d6c endpointID=1567 k8sNamespace=openstack k8sPodName=barbican-db-init-wthxz subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=02e65ec1-0fb0-495c-ac34-14ba7517e085 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=02e65ec1-0fb0-495c-ac34-14ba7517e085 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e4908a8d6c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1567 identity=23432 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-db-init-wthxz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 06975a47-6cdb-4ae2-8bcd-0469ed665ed3 default }" containerID=6df3448fdac1d630d61a3f6530a33ea0e0f1736927453cf408729a8265640ab2 datapathConfiguration="&{false false false false false }" interface=lxc2c38f7c61be1 k8sPodName=openstack/barbican-db-sync-5bnqj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6df3448fda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2495 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-db-sync-5bnqj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6df3448fda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2495 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9e73002f-9906-4fb7-8906-afe6a434d533,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=9e73002f-9906-4fb7-8906-afe6a434d533,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-db-sync-5bnqj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9e73002f-9906-4fb7-8906-afe6a434d533;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=9e73002f-9906-4fb7-8906-afe6a434d533;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6df3448fda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2495 identity=4907 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9e73002f-9906-4fb7-8906-afe6a434d533,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=9e73002f-9906-4fb7-8906-afe6a434d533,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-db-sync-5bnqj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6df3448fda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2495 identity=4907 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-db-sync-5bnqj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6df3448fda datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2495 identity=4907 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-db-sync-5bnqj subsys=endpoint level=info msg="Successful endpoint creation" containerID=6df3448fda datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2495 identity=4907 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-db-sync-5bnqj subsys=daemon level=info msg="Delete endpoint request" containerID=6df3448fda endpointID=2495 k8sNamespace=openstack k8sPodName=barbican-db-sync-5bnqj subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9e73002f-9906-4fb7-8906-afe6a434d533 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=9e73002f-9906-4fb7-8906-afe6a434d533 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6df3448fda datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2495 identity=4907 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-db-sync-5bnqj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 3c1a5bc3-109e-4d03-86bf-795d90f60db4 default }" containerID=9e0d985b6c05a098214cf2953cf65328a4b43b626e39078da9fd3d5088e21c8a datapathConfiguration="&{false false false false false }" interface=lxccdfa0175eeb4 k8sPodName=openstack/barbican-rabbit-init-mb6pm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e0d985b6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=369 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-rabbit-init-mb6pm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e0d985b6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=369 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=78fa03b2-2200-4c16-8c95-d97034eb1c29,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=78fa03b2-2200-4c16-8c95-d97034eb1c29,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-rabbit-init-mb6pm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=78fa03b2-2200-4c16-8c95-d97034eb1c29;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=78fa03b2-2200-4c16-8c95-d97034eb1c29;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e0d985b6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=369 identity=22345 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=78fa03b2-2200-4c16-8c95-d97034eb1c29,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=78fa03b2-2200-4c16-8c95-d97034eb1c29,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-rabbit-init-mb6pm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9e0d985b6c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=369 identity=22345 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-rabbit-init-mb6pm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e0d985b6c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=369 identity=22345 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-rabbit-init-mb6pm subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e0d985b6c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=369 identity=22345 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-rabbit-init-mb6pm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9e0d985b6c endpointID=369 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-mb6pm subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=78fa03b2-2200-4c16-8c95-d97034eb1c29 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=78fa03b2-2200-4c16-8c95-d97034eb1c29 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=9e0d985b6c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=369 identity=22345 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-rabbit-init-mb6pm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 262e99c7-602d-424c-bf6c-93c5f88c3d88 default }" containerID=2f4c0e4827d27781a459057d7d1c5909dc4b16e841c50357591441e5ce7f3241 datapathConfiguration="&{false false false false false }" interface=lxcb5a9f099e15a k8sPodName=openstack/barbican-ks-service-ppt8p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2f4c0e4827 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1729 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/barbican-ks-service-ppt8p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2f4c0e4827 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1729 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9d071068-fea2-4398-9c1f-255edd9da668,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=9d071068-fea2-4398-9c1f-255edd9da668,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/barbican-ks-service-ppt8p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2f4c0e4827 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1729 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.99 ipv6= k8sPodName=openstack/barbican-ks-service-ppt8p line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9d071068-fea2-4398-9c1f-255edd9da668;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=9d071068-fea2-4398-9c1f-255edd9da668;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2f4c0e4827 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1729 identity=58643 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9d071068-fea2-4398-9c1f-255edd9da668,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=9d071068-fea2-4398-9c1f-255edd9da668,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/barbican-ks-service-ppt8p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2f4c0e4827 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1729 identity=58643 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/barbican-ks-service-ppt8p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2f4c0e4827 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1729 identity=58643 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/barbican-ks-service-ppt8p subsys=endpoint level=info msg="Successful endpoint creation" containerID=2f4c0e4827 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1729 identity=58643 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/barbican-ks-service-ppt8p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2f4c0e4827 endpointID=1729 k8sNamespace=openstack k8sPodName=barbican-ks-service-ppt8p subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9d071068-fea2-4398-9c1f-255edd9da668 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=9d071068-fea2-4398-9c1f-255edd9da668 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2f4c0e4827 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1729 identity=58643 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/barbican-ks-service-ppt8p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 b51c0b1d-f43f-4b69-b54c-6f5209eaa04f default }" containerID=f7552def9038e214a6eb8c8f39ee3132ff16154596f6b98ca4a6b78f5b7c277d datapathConfiguration="&{false false false false false }" interface=lxc67385742693f k8sPodName=openstack/barbican-ks-endpoints-9n2g8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7552def90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/barbican-ks-endpoints-9n2g8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7552def90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e50292db-fed8-4e30-a1c3-a274582cb4c2,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=e50292db-fed8-4e30-a1c3-a274582cb4c2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/barbican-ks-endpoints-9n2g8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e50292db-fed8-4e30-a1c3-a274582cb4c2;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=e50292db-fed8-4e30-a1c3-a274582cb4c2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f7552def90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 identity=58059 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e50292db-fed8-4e30-a1c3-a274582cb4c2,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=e50292db-fed8-4e30-a1c3-a274582cb4c2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/barbican-ks-endpoints-9n2g8 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f7552def90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 identity=58059 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/barbican-ks-endpoints-9n2g8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f7552def90 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=976 identity=58059 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/barbican-ks-endpoints-9n2g8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7552def90 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=976 identity=58059 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/barbican-ks-endpoints-9n2g8 subsys=daemon level=info msg="Delete endpoint request" containerID=f7552def90 endpointID=976 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-9n2g8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e50292db-fed8-4e30-a1c3-a274582cb4c2 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=e50292db-fed8-4e30-a1c3-a274582cb4c2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f7552def90 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=976 identity=58059 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/barbican-ks-endpoints-9n2g8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 498b2f18-1299-468e-a331-c673eec577da default }" containerID=a423397bbbb49d854831c3b0e1c5f0eeb61efa08c60f0919b4c122e34b537f0b datapathConfiguration="&{false false false false false }" interface=lxc48d856dce352 k8sPodName=openstack/barbican-ks-user-4694n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a423397bbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3020 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-user-4694n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a423397bbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3020 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=35c8cb22-aee7-4e97-9215-b6ae7866063f,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=35c8cb22-aee7-4e97-9215-b6ae7866063f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-user-4694n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=35c8cb22-aee7-4e97-9215-b6ae7866063f;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=35c8cb22-aee7-4e97-9215-b6ae7866063f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a423397bbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3020 identity=19409 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=35c8cb22-aee7-4e97-9215-b6ae7866063f,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=35c8cb22-aee7-4e97-9215-b6ae7866063f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-user-4694n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a423397bbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3020 identity=19409 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-user-4694n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a423397bbb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3020 identity=19409 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-user-4694n subsys=endpoint level=info msg="Successful endpoint creation" containerID=a423397bbb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3020 identity=19409 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-user-4694n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a423397bbb endpointID=3020 k8sNamespace=openstack k8sPodName=barbican-ks-user-4694n subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=35c8cb22-aee7-4e97-9215-b6ae7866063f k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=35c8cb22-aee7-4e97-9215-b6ae7866063f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=a423397bbb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3020 identity=19409 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-user-4694n subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.55 ddcdf64c-1911-42af-a4cc-84c6a9b59ec9 default }" containerID=f7cf03a6198462866662d44db05977f2697aaee3129a96926f89d3cf44f1cb69 datapathConfiguration="&{false false false false false }" interface=lxc5a7d3f9fe31d k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-pl4rx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7cf03a619 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3639 ipv4=10.0.0.55 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-pl4rx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7cf03a619 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3639 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.55 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-pl4rx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f7cf03a619 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3639 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.55 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-pl4rx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f7cf03a619 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3639 identity=5405 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.55 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-pl4rx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7cf03a619 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3639 identity=5405 ipv4=10.0.0.55 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-pl4rx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f7cf03a619 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3639 identity=5405 ipv4=10.0.0.55 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-pl4rx subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7cf03a619 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3639 identity=5405 ipv4=10.0.0.55 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-pl4rx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.9 66173d60-6878-4a67-acc0-0ac1d14fd8d5 default }" containerID=cc67021f49b7773cec7eba69091dbad4ddab1cc916d24523155975ee079f252e datapathConfiguration="&{false false false false false }" interface=lxcb1325b960702 k8sPodName=openstack/rook-ceph-detect-version-7ckx9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc67021f49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=139 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7ckx9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc67021f49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=139 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=f6893818-361b-4b3b-a079-fcd6fc55469c,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=f6893818-361b-4b3b-a079-fcd6fc55469c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7ckx9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=f6893818-361b-4b3b-a079-fcd6fc55469c;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=f6893818-361b-4b3b-a079-fcd6fc55469c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc67021f49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=139 identity=18397 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=f6893818-361b-4b3b-a079-fcd6fc55469c,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=f6893818-361b-4b3b-a079-fcd6fc55469c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7ckx9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc67021f49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=139 identity=18397 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7ckx9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cc67021f49 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=139 identity=18397 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7ckx9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc67021f49 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=139 identity=18397 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7ckx9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cc67021f49 endpointID=139 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-7ckx9 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=f6893818-361b-4b3b-a079-fcd6fc55469c k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=f6893818-361b-4b3b-a079-fcd6fc55469c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=cc67021f49 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=139 identity=18397 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7ckx9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 456f0b6e-9f32-448f-90a7-e2cf0e36c1c9 default }" containerID=e3d75e8b8855c885e5c701b874931b01db3ef351a2edf24ccc25bd55de543ab9 datapathConfiguration="&{false false false false false }" interface=lxc3c37988da92e k8sPodName=local-path-storage/helper-pod-create-pvc-d0adcb03-1b9d-4381-afda-8a7aa85e4d71 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e3d75e8b88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3589 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d0adcb03-1b9d-4381-afda-8a7aa85e4d71 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e3d75e8b88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3589 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d0adcb03-1b9d-4381-afda-8a7aa85e4d71 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e3d75e8b88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3589 identity=2404 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d0adcb03-1b9d-4381-afda-8a7aa85e4d71 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e3d75e8b88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3589 identity=2404 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d0adcb03-1b9d-4381-afda-8a7aa85e4d71 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e3d75e8b88 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3589 identity=2404 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d0adcb03-1b9d-4381-afda-8a7aa85e4d71 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e3d75e8b88 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3589 identity=2404 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d0adcb03-1b9d-4381-afda-8a7aa85e4d71 subsys=daemon level=info msg="Delete endpoint request" containerID=e3d75e8b88 endpointID=3589 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d0adcb03-1b9d-4381-afda-8a7aa85e4d71 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e3d75e8b88 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3589 identity=2404 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d0adcb03-1b9d-4381-afda-8a7aa85e4d71 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 35d70874-9e57-47d5-8aab-b2d639557ed5 default }" containerID=35c92959837ff6d80990a190e6c4478a769994e6c7f5521731960c55b6cfe404 datapathConfiguration="&{false false false false false }" interface=lxcb997186c5ea0 k8sPodName=openstack/ceph-object-controller-detect-version-8swk5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35c9295983 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2217 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-8swk5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35c9295983 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2217 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=7082ce9a-bf62-471a-98e4-0626d0980696,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=7082ce9a-bf62-471a-98e4-0626d0980696,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-8swk5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=7082ce9a-bf62-471a-98e4-0626d0980696;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=7082ce9a-bf62-471a-98e4-0626d0980696;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=35c9295983 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2217 identity=63169 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=7082ce9a-bf62-471a-98e4-0626d0980696,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=7082ce9a-bf62-471a-98e4-0626d0980696,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-8swk5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=35c9295983 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2217 identity=63169 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-8swk5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=35c9295983 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2217 identity=63169 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-8swk5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=35c9295983 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2217 identity=63169 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-8swk5 subsys=daemon level=info msg="Delete endpoint request" containerID=35c9295983 endpointID=2217 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-8swk5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=7082ce9a-bf62-471a-98e4-0626d0980696 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=7082ce9a-bf62-471a-98e4-0626d0980696 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=35c9295983 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2217 identity=63169 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-8swk5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 45addcd2-41cd-4638-ae2c-64266c6880aa default }" containerID=5c1e4c442e3ccd61f2147c0ad9cb6fd5609b66322178e40b4d7db274f9ae3397 datapathConfiguration="&{false false false false false }" interface=lxcd32f76e07613 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c1e4c442e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2455 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c1e4c442e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2455 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5c1e4c442e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2455 identity=697 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c1e4c442e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2455 identity=697 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5c1e4c442e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2455 identity=697 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c1e4c442e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2455 identity=697 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.68 f422c439-de69-41bd-aaa2-3c52f66dee71 default }" containerID=5cabfc48640f58e602959691e1f16a0fa9372019faa86ad0d2364f739ffd6100 datapathConfiguration="&{false false false false false }" interface=lxc943537ead5f6 k8sPodName=openstack/glance-db-init-8bz9z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5cabfc4864 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=618 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-db-init-8bz9z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5cabfc4864 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=618 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1df327d3-ce27-4dc3-be2c-006520ed4956,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=1df327d3-ce27-4dc3-be2c-006520ed4956,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-db-init-8bz9z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5cabfc4864 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=618 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-db-init-8bz9z line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1df327d3-ce27-4dc3-be2c-006520ed4956;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=1df327d3-ce27-4dc3-be2c-006520ed4956;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5cabfc4864 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=618 identity=19159 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1df327d3-ce27-4dc3-be2c-006520ed4956,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=1df327d3-ce27-4dc3-be2c-006520ed4956,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-db-init-8bz9z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5cabfc4864 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=618 identity=19159 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-db-init-8bz9z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5cabfc4864 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=618 identity=19159 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-db-init-8bz9z subsys=endpoint level=info msg="Successful endpoint creation" containerID=5cabfc4864 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=618 identity=19159 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-db-init-8bz9z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5cabfc4864 endpointID=618 k8sNamespace=openstack k8sPodName=glance-db-init-8bz9z subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1df327d3-ce27-4dc3-be2c-006520ed4956 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=1df327d3-ce27-4dc3-be2c-006520ed4956 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5cabfc4864 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=618 identity=19159 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-db-init-8bz9z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.82 0927257e-04e9-4b00-9c31-d59572bfaddb default }" containerID=d26969ef39f59cb16cc93b2ee665181a1b1e187e9940f2897a031cff84ef2569 datapathConfiguration="&{false false false false false }" interface=lxc192a8b231f8e k8sPodName=openstack/glance-db-sync-q97x6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d26969ef39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1902 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-db-sync-q97x6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d26969ef39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1902 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=59726a73-c755-4b4d-a1b6-ff732164855c,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=59726a73-c755-4b4d-a1b6-ff732164855c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-db-sync-q97x6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=59726a73-c755-4b4d-a1b6-ff732164855c;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=59726a73-c755-4b4d-a1b6-ff732164855c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d26969ef39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1902 identity=55457 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=59726a73-c755-4b4d-a1b6-ff732164855c,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=59726a73-c755-4b4d-a1b6-ff732164855c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-db-sync-q97x6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d26969ef39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1902 identity=55457 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-db-sync-q97x6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d26969ef39 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1902 identity=55457 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-db-sync-q97x6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d26969ef39 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1902 identity=55457 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-db-sync-q97x6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.124 d80efee3-c08f-40aa-aae4-cf503398d3f9 default }" containerID=9d92e3a68f54d07c94ba8b32da7f1ae603f9b239119cc602ea58031f34a3e0b4 datapathConfiguration="&{false false false false false }" interface=lxca2e0d937ab5a k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rth4h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d92e3a68f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2727 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rth4h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d92e3a68f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2727 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rth4h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d92e3a68f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2727 identity=12300 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rth4h oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9d92e3a68f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2727 identity=12300 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rth4h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9d92e3a68f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2727 identity=12300 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rth4h subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d92e3a68f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2727 identity=12300 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rth4h subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.95 206fd197-c914-47ea-b55a-c8d8344b31be default }" containerID=aab02f2ca19aa6ca8773331df2e73e242796bcc457d5236976c193df92ca78ae datapathConfiguration="&{false false false false false }" interface=lxcd1d6a73583b9 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-shh89 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aab02f2ca1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=268 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-shh89 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aab02f2ca1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=268 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-shh89 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aab02f2ca1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=268 identity=15055 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-shh89 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aab02f2ca1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=268 identity=15055 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-shh89 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aab02f2ca1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=268 identity=15055 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-shh89 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aab02f2ca1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=268 identity=15055 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-shh89 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d26969ef39 endpointID=1902 k8sNamespace=openstack k8sPodName=glance-db-sync-q97x6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=59726a73-c755-4b4d-a1b6-ff732164855c k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=59726a73-c755-4b4d-a1b6-ff732164855c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d26969ef39 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1902 identity=55457 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-db-sync-q97x6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 fd112e9c-e67d-4b1b-9e1c-e73e9ebe02a6 default }" containerID=f7ed319321797b79ac2d53fe6190125e8a3a4c01684655efa024ff7f9cd11ef0 datapathConfiguration="&{false false false false false }" interface=lxcd7e2b5288320 k8sPodName=openstack/glance-rabbit-init-qrrrc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7ed319321 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=415 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-rabbit-init-qrrrc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7ed319321 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=415 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a6699751-6db6-4fe9-a282-0981c96c6b4e,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a6699751-6db6-4fe9-a282-0981c96c6b4e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-rabbit-init-qrrrc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a6699751-6db6-4fe9-a282-0981c96c6b4e;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=a6699751-6db6-4fe9-a282-0981c96c6b4e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=f7ed319321 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=415 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-rabbit-init-qrrrc line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f7ed319321 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=415 identity=33495 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a6699751-6db6-4fe9-a282-0981c96c6b4e,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a6699751-6db6-4fe9-a282-0981c96c6b4e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-rabbit-init-qrrrc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7ed319321 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=415 identity=33495 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-rabbit-init-qrrrc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f7ed319321 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=415 identity=33495 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-rabbit-init-qrrrc subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7ed319321 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=415 identity=33495 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-rabbit-init-qrrrc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f7ed319321 endpointID=415 k8sNamespace=openstack k8sPodName=glance-rabbit-init-qrrrc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a6699751-6db6-4fe9-a282-0981c96c6b4e k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=a6699751-6db6-4fe9-a282-0981c96c6b4e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f7ed319321 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=415 identity=33495 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-rabbit-init-qrrrc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.88 58d20718-8ef9-4289-885e-f4f971c246d6 default }" containerID=1367da1d6692c30f4d27fadd60045cc28001692f3bf475c8331d4e2a01d02c56 datapathConfiguration="&{false false false false false }" interface=lxce9edbf4d4b01 k8sPodName=openstack/glance-ks-service-28cl7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1367da1d66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-ks-service-28cl7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1367da1d66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5bc7b286-7fea-466c-aa8f-e059675a847b,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=5bc7b286-7fea-466c-aa8f-e059675a847b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-ks-service-28cl7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5bc7b286-7fea-466c-aa8f-e059675a847b;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=5bc7b286-7fea-466c-aa8f-e059675a847b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1367da1d66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identity=6024 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5bc7b286-7fea-466c-aa8f-e059675a847b,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=5bc7b286-7fea-466c-aa8f-e059675a847b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-ks-service-28cl7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1367da1d66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identity=6024 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-ks-service-28cl7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1367da1d66 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=662 identity=6024 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-ks-service-28cl7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1367da1d66 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=662 identity=6024 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-ks-service-28cl7 subsys=daemon level=info msg="Delete endpoint request" containerID=1367da1d66 endpointID=662 k8sNamespace=openstack k8sPodName=glance-ks-service-28cl7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5bc7b286-7fea-466c-aa8f-e059675a847b k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=5bc7b286-7fea-466c-aa8f-e059675a847b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1367da1d66 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=662 identity=6024 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-ks-service-28cl7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.9 94e9b166-073a-4db8-a88b-676767b015a3 default }" containerID=3d327954e764012d9fc11423e4a5a541bcb4d8c01ed816e76c8fc7cd77305569 datapathConfiguration="&{false false false false false }" interface=lxcc2b89b64459d k8sPodName=openstack/glance-ks-endpoints-dmjrj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d327954e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1326 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/glance-ks-endpoints-dmjrj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d327954e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1326 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=01fdde58-b5b9-4f3f-9516-61a5818e0517,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=01fdde58-b5b9-4f3f-9516-61a5818e0517,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/glance-ks-endpoints-dmjrj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=01fdde58-b5b9-4f3f-9516-61a5818e0517;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=01fdde58-b5b9-4f3f-9516-61a5818e0517;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=3d327954e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1326 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.9 ipv6= k8sPodName=openstack/glance-ks-endpoints-dmjrj line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3d327954e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1326 identity=61506 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=01fdde58-b5b9-4f3f-9516-61a5818e0517,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=01fdde58-b5b9-4f3f-9516-61a5818e0517,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/glance-ks-endpoints-dmjrj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3d327954e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1326 identity=61506 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/glance-ks-endpoints-dmjrj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3d327954e7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1326 identity=61506 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/glance-ks-endpoints-dmjrj subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d327954e7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1326 identity=61506 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/glance-ks-endpoints-dmjrj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3d327954e7 endpointID=1326 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-dmjrj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=01fdde58-b5b9-4f3f-9516-61a5818e0517 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=01fdde58-b5b9-4f3f-9516-61a5818e0517 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3d327954e7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1326 identity=61506 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/glance-ks-endpoints-dmjrj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.214 b06f327a-3477-4bfd-a8eb-e115c96c28ba default }" containerID=7c1d124e4306a3c3730b08c3463081d141b991d0cce5e8054efec6aca5783648 datapathConfiguration="&{false false false false false }" interface=lxcf21734362c50 k8sPodName=openstack/glance-ks-user-b6brk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c1d124e43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=765 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-ks-user-b6brk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c1d124e43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=765 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e6a80283-297e-415d-84d4-65b08343b3f9,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=e6a80283-297e-415d-84d4-65b08343b3f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-ks-user-b6brk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e6a80283-297e-415d-84d4-65b08343b3f9;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=e6a80283-297e-415d-84d4-65b08343b3f9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c1d124e43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=765 identity=21060 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e6a80283-297e-415d-84d4-65b08343b3f9,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=e6a80283-297e-415d-84d4-65b08343b3f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-ks-user-b6brk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7c1d124e43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=765 identity=21060 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-ks-user-b6brk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c1d124e43 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=765 identity=21060 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-ks-user-b6brk subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c1d124e43 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=765 identity=21060 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-ks-user-b6brk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7c1d124e43 endpointID=765 k8sNamespace=openstack k8sPodName=glance-ks-user-b6brk subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e6a80283-297e-415d-84d4-65b08343b3f9 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=e6a80283-297e-415d-84d4-65b08343b3f9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7c1d124e43 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=765 identity=21060 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-ks-user-b6brk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.214 9a020bde-b461-4f94-9149-0913f2a664a8 default }" containerID=a4f3e746c67981221da5c5ab9dc47f8210d1ea70ec6bf269e65d6fc94a19c9dd datapathConfiguration="&{false false false false false }" interface=lxc981af9052b10 k8sPodName=openstack/glance-metadefs-load-4zvjq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a4f3e746c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-metadefs-load-4zvjq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a4f3e746c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3352cbc7-cd2f-4f51-9472-8995d274991c,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=3352cbc7-cd2f-4f51-9472-8995d274991c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-metadefs-load-4zvjq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3352cbc7-cd2f-4f51-9472-8995d274991c;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=3352cbc7-cd2f-4f51-9472-8995d274991c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a4f3e746c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identity=18130 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3352cbc7-cd2f-4f51-9472-8995d274991c,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=3352cbc7-cd2f-4f51-9472-8995d274991c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-metadefs-load-4zvjq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a4f3e746c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identity=18130 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-metadefs-load-4zvjq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a4f3e746c6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=191 identity=18130 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-metadefs-load-4zvjq subsys=endpoint level=info msg="Successful endpoint creation" containerID=a4f3e746c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=191 identity=18130 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-metadefs-load-4zvjq subsys=daemon level=info msg="Delete endpoint request" containerID=a4f3e746c6 endpointID=191 k8sNamespace=openstack k8sPodName=glance-metadefs-load-4zvjq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3352cbc7-cd2f-4f51-9472-8995d274991c k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=3352cbc7-cd2f-4f51-9472-8995d274991c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a4f3e746c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=191 identity=18130 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-metadefs-load-4zvjq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 fa05ce38-440f-4f7c-94a8-6a1a7867dbdc default }" containerID=3d1d5053dd76394a97be7c5a71eb7c4e59adc9dd2c6fac09b86e5f5e3bc72727 datapathConfiguration="&{false false false false false }" interface=lxcc06d8303e65f k8sPodName=openstack/glance-storage-init-92vcw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d1d5053dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1136 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-storage-init-92vcw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d1d5053dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1136 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f4198859-c37b-4d9f-9172-0beff5002570,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=f4198859-c37b-4d9f-9172-0beff5002570,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-storage-init-92vcw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f4198859-c37b-4d9f-9172-0beff5002570;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=f4198859-c37b-4d9f-9172-0beff5002570;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=3d1d5053dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1136 identity=59761 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f4198859-c37b-4d9f-9172-0beff5002570,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=f4198859-c37b-4d9f-9172-0beff5002570,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-storage-init-92vcw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3d1d5053dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1136 identity=59761 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-storage-init-92vcw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3d1d5053dd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1136 identity=59761 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-storage-init-92vcw subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d1d5053dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1136 identity=59761 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-storage-init-92vcw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3d1d5053dd endpointID=1136 k8sNamespace=openstack k8sPodName=glance-storage-init-92vcw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f4198859-c37b-4d9f-9172-0beff5002570 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=f4198859-c37b-4d9f-9172-0beff5002570 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3d1d5053dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1136 identity=59761 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-storage-init-92vcw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 a9e8c1d7-4291-4495-8aee-c393807469d6 default }" containerID=1ef7152442c9b7d93d3b351cb56265ef1580442a78f9bf7fa55eccf99fd515d4 datapathConfiguration="&{false false false false false }" interface=lxca77cecaf8ae7 k8sPodName=openstack/glance-api-87874446c-8s7tv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ef7152442 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-api-87874446c-8s7tv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ef7152442 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-api-87874446c-8s7tv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=1ef7152442 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-api-87874446c-8s7tv line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1ef7152442 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 identity=52580 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-api-87874446c-8s7tv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ef7152442 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 identity=52580 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-api-87874446c-8s7tv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1ef7152442 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=391 identity=52580 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-api-87874446c-8s7tv subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ef7152442 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=391 identity=52580 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-api-87874446c-8s7tv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.149 6b00481c-af44-4f0b-9f18-d501a8a7b10e default }" containerID=04eef260680cffa126d263ae657038e60437a83e14dd03cddfedb33cf8ca29c9 datapathConfiguration="&{false false false false false }" interface=lxce2c941da6612 k8sPodName=openstack/staffeln-api-78b4c544fd-872xw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04eef26068 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2310 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/staffeln-api-78b4c544fd-872xw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04eef26068 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2310 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/staffeln-api-78b4c544fd-872xw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=04eef26068 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2310 identity=55280 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/staffeln-api-78b4c544fd-872xw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04eef26068 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2310 identity=55280 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/staffeln-api-78b4c544fd-872xw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 bcb9377d-f894-4e34-9673-6474985136ad default }" containerID=7e1844eb8c539d529a8d8a1aeb17a4c9542b7d80d0766e79073b18b6f9c92eb3 datapathConfiguration="&{false false false false false }" interface=lxc44202d1836e9 k8sPodName=openstack/staffeln-db-init-kpc2c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e1844eb8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2688 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/staffeln-db-init-kpc2c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e1844eb8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2688 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=ecb9ba9c-33c0-4639-bee2-63709179b43d,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=ecb9ba9c-33c0-4639-bee2-63709179b43d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/staffeln-db-init-kpc2c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=ecb9ba9c-33c0-4639-bee2-63709179b43d;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=ecb9ba9c-33c0-4639-bee2-63709179b43d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7e1844eb8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2688 identity=40844 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=ecb9ba9c-33c0-4639-bee2-63709179b43d,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=ecb9ba9c-33c0-4639-bee2-63709179b43d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/staffeln-db-init-kpc2c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7e1844eb8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2688 identity=40844 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/staffeln-db-init-kpc2c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.81 37733675-0f13-48a4-9496-94480444b222 default }" containerID=efe797e2d64eacca4d8eba4a6fbefd58ec0e6784f54bfb64b413fc8620461fbe datapathConfiguration="&{false false false false false }" interface=lxcaa4926d49706 k8sPodName=openstack/staffeln-conductor-795f87cfdf-bsvsc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=efe797e2d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/staffeln-conductor-795f87cfdf-bsvsc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=efe797e2d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/staffeln-conductor-795f87cfdf-bsvsc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=efe797e2d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identity=10572 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/staffeln-conductor-795f87cfdf-bsvsc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=efe797e2d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identity=10572 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/staffeln-conductor-795f87cfdf-bsvsc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=04eef26068 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2310 identity=55280 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/staffeln-api-78b4c544fd-872xw subsys=endpoint level=info msg="Successful endpoint creation" containerID=04eef26068 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2310 identity=55280 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/staffeln-api-78b4c544fd-872xw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7e1844eb8c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2688 identity=40844 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/staffeln-db-init-kpc2c subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e1844eb8c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2688 identity=40844 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/staffeln-db-init-kpc2c subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=efe797e2d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=555 identity=10572 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/staffeln-conductor-795f87cfdf-bsvsc subsys=endpoint level=info msg="Successful endpoint creation" containerID=efe797e2d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=555 identity=10572 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/staffeln-conductor-795f87cfdf-bsvsc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7e1844eb8c endpointID=2688 k8sNamespace=openstack k8sPodName=staffeln-db-init-kpc2c subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=ecb9ba9c-33c0-4639-bee2-63709179b43d k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=ecb9ba9c-33c0-4639-bee2-63709179b43d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=7e1844eb8c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2688 identity=40844 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/staffeln-db-init-kpc2c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.141 c6b7eac8-6111-4abd-a171-9cd165cd2a7a default }" containerID=0f65cf29ffc1ba41ffa30b520b0e575d46cb09e6f62a23ef6bfad7a3345662a6 datapathConfiguration="&{false false false false false }" interface=lxcb9380a7c59b1 k8sPodName=openstack/staffeln-db-sync-v69w7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f65cf29ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1372 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/staffeln-db-sync-v69w7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f65cf29ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1372 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=a644bf86-eeb9-4a62-b6e9-cabd773be1b2,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=a644bf86-eeb9-4a62-b6e9-cabd773be1b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/staffeln-db-sync-v69w7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=a644bf86-eeb9-4a62-b6e9-cabd773be1b2;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=a644bf86-eeb9-4a62-b6e9-cabd773be1b2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f65cf29ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1372 identity=36260 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=a644bf86-eeb9-4a62-b6e9-cabd773be1b2,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=a644bf86-eeb9-4a62-b6e9-cabd773be1b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/staffeln-db-sync-v69w7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f65cf29ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1372 identity=36260 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/staffeln-db-sync-v69w7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0f65cf29ff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1372 identity=36260 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/staffeln-db-sync-v69w7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f65cf29ff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1372 identity=36260 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/staffeln-db-sync-v69w7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0f65cf29ff endpointID=1372 k8sNamespace=openstack k8sPodName=staffeln-db-sync-v69w7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=a644bf86-eeb9-4a62-b6e9-cabd773be1b2 k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=a644bf86-eeb9-4a62-b6e9-cabd773be1b2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=0f65cf29ff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1372 identity=36260 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/staffeln-db-sync-v69w7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 1cb55a19-e93b-4967-a139-abad18933d29 default }" containerID=f15057dc57beaf46e02e24cd946805a02fcb8ff1e2142a6f0ead076777ec48bc datapathConfiguration="&{false false false false false }" interface=lxcd8d922a0ba8f k8sPodName=local-path-storage/helper-pod-create-pvc-be8b1a47-6a21-49ad-a9f3-efa3abcb8aec labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f15057dc57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=701 ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-be8b1a47-6a21-49ad-a9f3-efa3abcb8aec subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f15057dc57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=701 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-be8b1a47-6a21-49ad-a9f3-efa3abcb8aec subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f15057dc57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=701 identity=2404 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-be8b1a47-6a21-49ad-a9f3-efa3abcb8aec oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f15057dc57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=701 identity=2404 ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-be8b1a47-6a21-49ad-a9f3-efa3abcb8aec subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f15057dc57 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=701 identity=2404 ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-be8b1a47-6a21-49ad-a9f3-efa3abcb8aec subsys=endpoint level=info msg="Successful endpoint creation" containerID=f15057dc57 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=701 identity=2404 ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-be8b1a47-6a21-49ad-a9f3-efa3abcb8aec subsys=daemon level=info msg="Delete endpoint request" containerID=f15057dc57 endpointID=701 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-be8b1a47-6a21-49ad-a9f3-efa3abcb8aec subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f15057dc57 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=701 identity=2404 ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-be8b1a47-6a21-49ad-a9f3-efa3abcb8aec subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 05b9c94f-aaf8-4eb7-870e-55a981fe7b68 default }" containerID=4c5a76c815080d87dc70af16386cf65b304883db0517ca52a9c9604740027721 datapathConfiguration="&{false false false false false }" interface=lxc40ada519ffa8 k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c5a76c815 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1518 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c5a76c815 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1518 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4c5a76c815 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1518 identity=29166 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c5a76c815 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1518 identity=29166 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4c5a76c815 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1518 identity=29166 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c5a76c815 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1518 identity=29166 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.238 8d591b1d-aaab-426e-a352-e6e7205bf8b6 default }" containerID=97eeebd9db2fde73b25c4a419454ef5c3de45ccad13831e418edf0ac44a6208c datapathConfiguration="&{false false false false false }" interface=lxc7a257b653d7f k8sPodName=openstack/cinder-scheduler-b496f6b5c-59jhc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=97eeebd9db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/cinder-scheduler-b496f6b5c-59jhc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=97eeebd9db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/cinder-scheduler-b496f6b5c-59jhc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=97eeebd9db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identity=32439 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/cinder-scheduler-b496f6b5c-59jhc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=97eeebd9db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identity=32439 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/cinder-scheduler-b496f6b5c-59jhc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.239 aefe58f6-9c39-4af6-80b5-ac27b19c7d08 default }" containerID=aae961e801c89fd6f431c16b2d7ae8b0ebc7e54c561044a8e2ea46f32595b2ae datapathConfiguration="&{false false false false false }" interface=lxc9dd900c3aecd k8sPodName=openstack/cinder-db-init-dh97r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aae961e801 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2442 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/cinder-db-init-dh97r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 2b7d6d03-9d81-4c66-acd5-361f5f66943a default }" containerID=3afc138a68fa1b394939e9cc9208916f6cec4ceadc3dde7295de900c70142dd9 datapathConfiguration="&{false false false false false }" interface=lxc3aa352307503 k8sPodName=openstack/cinder-api-7d8556995-lkdpd labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=aae961e801 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2442 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1b5cbf8d-128e-4aa2-9727-b6273882e647,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=1b5cbf8d-128e-4aa2-9727-b6273882e647,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/cinder-db-init-dh97r subsys=endpoint level=info msg="New endpoint" containerID=3afc138a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2604 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/cinder-api-7d8556995-lkdpd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=3afc138a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2604 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/cinder-api-7d8556995-lkdpd subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=1b5cbf8d-128e-4aa2-9727-b6273882e647;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=1b5cbf8d-128e-4aa2-9727-b6273882e647;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=aae961e801 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2442 identity=28667 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1b5cbf8d-128e-4aa2-9727-b6273882e647,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=1b5cbf8d-128e-4aa2-9727-b6273882e647,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/cinder-db-init-dh97r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aae961e801 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2442 identity=28667 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/cinder-db-init-dh97r subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3afc138a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2604 identity=23705 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/cinder-api-7d8556995-lkdpd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3afc138a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2604 identity=23705 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/cinder-api-7d8556995-lkdpd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=97eeebd9db datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=24 identity=32439 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/cinder-scheduler-b496f6b5c-59jhc subsys=endpoint level=info msg="Successful endpoint creation" containerID=97eeebd9db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=24 identity=32439 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/cinder-scheduler-b496f6b5c-59jhc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=aae961e801 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2442 identity=28667 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/cinder-db-init-dh97r subsys=endpoint level=info msg="Successful endpoint creation" containerID=aae961e801 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2442 identity=28667 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/cinder-db-init-dh97r subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3afc138a68 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2604 identity=23705 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/cinder-api-7d8556995-lkdpd subsys=endpoint level=info msg="Successful endpoint creation" containerID=3afc138a68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2604 identity=23705 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/cinder-api-7d8556995-lkdpd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aae961e801 endpointID=2442 k8sNamespace=openstack k8sPodName=cinder-db-init-dh97r subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=1b5cbf8d-128e-4aa2-9727-b6273882e647 k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=1b5cbf8d-128e-4aa2-9727-b6273882e647 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=aae961e801 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2442 identity=28667 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/cinder-db-init-dh97r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 5eed8d3d-ac1d-415e-a50c-2ba0b6ed1224 default }" containerID=604c621606404a0a3f7af0890c65a32ecd59dc230831f2b544d4c2c5dce4e7aa datapathConfiguration="&{false false false false false }" interface=lxce2ea5760228a k8sPodName=openstack/cinder-db-sync-czxlm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=604c621606 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/cinder-db-sync-czxlm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=604c621606 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=516007ab-0345-48a9-abda-5a8eb2415b02,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=516007ab-0345-48a9-abda-5a8eb2415b02,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/cinder-db-sync-czxlm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=516007ab-0345-48a9-abda-5a8eb2415b02;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=516007ab-0345-48a9-abda-5a8eb2415b02;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=604c621606 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 identity=20555 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=516007ab-0345-48a9-abda-5a8eb2415b02,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=516007ab-0345-48a9-abda-5a8eb2415b02,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/cinder-db-sync-czxlm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=604c621606 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 identity=20555 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/cinder-db-sync-czxlm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=604c621606 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1915 identity=20555 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/cinder-db-sync-czxlm subsys=endpoint level=info msg="Successful endpoint creation" containerID=604c621606 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1915 identity=20555 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/cinder-db-sync-czxlm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=604c621606 endpointID=1915 k8sNamespace=openstack k8sPodName=cinder-db-sync-czxlm subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=516007ab-0345-48a9-abda-5a8eb2415b02 k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=516007ab-0345-48a9-abda-5a8eb2415b02 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=604c621606 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1915 identity=20555 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/cinder-db-sync-czxlm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 8036b22a-5537-4403-962b-93fa41230db5 default }" containerID=8583e28ec69247aecabaff0646d5af71bfd3e074a87831215566c3c3c3a424be datapathConfiguration="&{false false false false false }" interface=lxc86265c6154ae k8sPodName=openstack/cinder-rabbit-init-h87zf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8583e28ec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2089 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/cinder-rabbit-init-h87zf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8583e28ec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2089 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=7f7bf4e6-efeb-4e0f-a77b-5227cbfec489,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7f7bf4e6-efeb-4e0f-a77b-5227cbfec489,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/cinder-rabbit-init-h87zf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=7f7bf4e6-efeb-4e0f-a77b-5227cbfec489;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=7f7bf4e6-efeb-4e0f-a77b-5227cbfec489;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=8583e28ec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2089 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.163 ipv6= k8sPodName=openstack/cinder-rabbit-init-h87zf line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8583e28ec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2089 identity=28524 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=7f7bf4e6-efeb-4e0f-a77b-5227cbfec489,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7f7bf4e6-efeb-4e0f-a77b-5227cbfec489,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/cinder-rabbit-init-h87zf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8583e28ec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2089 identity=28524 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/cinder-rabbit-init-h87zf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8583e28ec6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2089 identity=28524 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/cinder-rabbit-init-h87zf subsys=endpoint level=info msg="Successful endpoint creation" containerID=8583e28ec6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2089 identity=28524 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/cinder-rabbit-init-h87zf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8583e28ec6 endpointID=2089 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-h87zf subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=7f7bf4e6-efeb-4e0f-a77b-5227cbfec489 k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=7f7bf4e6-efeb-4e0f-a77b-5227cbfec489 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=8583e28ec6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2089 identity=28524 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/cinder-rabbit-init-h87zf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 5d9725a8-a8c5-4b9c-b78c-24d2ec57b015 default }" containerID=829e474a5f7b1e3a1fcfb216c17c3b104f5b0778cdce4f8249062feb110127fd datapathConfiguration="&{false false false false false }" interface=lxc7135bf3a94c0 k8sPodName=openstack/cinder-ks-service-gd5vw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=829e474a5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4055 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-ks-service-gd5vw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=829e474a5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4055 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c39deca2-6c07-4382-8690-4ae6a38e4a09,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=c39deca2-6c07-4382-8690-4ae6a38e4a09,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-ks-service-gd5vw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=c39deca2-6c07-4382-8690-4ae6a38e4a09;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=c39deca2-6c07-4382-8690-4ae6a38e4a09;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=829e474a5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4055 identity=23293 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c39deca2-6c07-4382-8690-4ae6a38e4a09,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=c39deca2-6c07-4382-8690-4ae6a38e4a09,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-ks-service-gd5vw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=829e474a5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4055 identity=23293 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-ks-service-gd5vw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=829e474a5f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4055 identity=23293 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-ks-service-gd5vw subsys=endpoint level=info msg="Successful endpoint creation" containerID=829e474a5f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4055 identity=23293 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-ks-service-gd5vw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=829e474a5f endpointID=4055 k8sNamespace=openstack k8sPodName=cinder-ks-service-gd5vw subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=c39deca2-6c07-4382-8690-4ae6a38e4a09 k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=c39deca2-6c07-4382-8690-4ae6a38e4a09 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=829e474a5f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4055 identity=23293 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-ks-service-gd5vw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 76a98233-6d48-4aa3-8e9e-c5604a3f29a2 default }" containerID=f59947adee471d20e7840a5c825fdd00fc677223167d7d11acdd79fe15a343c9 datapathConfiguration="&{false false false false false }" interface=lxca68e55303b59 k8sPodName=openstack/cinder-ks-endpoints-bxv85 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f59947adee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/cinder-ks-endpoints-bxv85 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f59947adee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=0ee53873-b519-4445-aae8-10e87c88880d,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0ee53873-b519-4445-aae8-10e87c88880d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/cinder-ks-endpoints-bxv85 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=0ee53873-b519-4445-aae8-10e87c88880d;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=0ee53873-b519-4445-aae8-10e87c88880d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f59947adee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 identity=59442 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=0ee53873-b519-4445-aae8-10e87c88880d,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0ee53873-b519-4445-aae8-10e87c88880d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/cinder-ks-endpoints-bxv85 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f59947adee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=294 identity=59442 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/cinder-ks-endpoints-bxv85 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f59947adee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=294 identity=59442 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/cinder-ks-endpoints-bxv85 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f59947adee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=294 identity=59442 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/cinder-ks-endpoints-bxv85 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f59947adee endpointID=294 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-bxv85 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=0ee53873-b519-4445-aae8-10e87c88880d k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=0ee53873-b519-4445-aae8-10e87c88880d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=f59947adee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=294 identity=59442 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/cinder-ks-endpoints-bxv85 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 5ff17a1b-e7e9-4f1f-a70c-c488adada6e6 default }" containerID=1bb9ec1aea482d7dad1c0bc2cfb0f1ac700eb0de2c45bef142f18e3bd2939748 datapathConfiguration="&{false false false false false }" interface=lxcc4a3d478aa7e k8sPodName=openstack/cinder-ks-user-pwk7f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1bb9ec1aea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=203 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/cinder-ks-user-pwk7f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1bb9ec1aea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=203 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c903e214-56a2-420e-bb04-0474af45e744,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=c903e214-56a2-420e-bb04-0474af45e744,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/cinder-ks-user-pwk7f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=c903e214-56a2-420e-bb04-0474af45e744;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=c903e214-56a2-420e-bb04-0474af45e744;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1bb9ec1aea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=203 identity=22080 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c903e214-56a2-420e-bb04-0474af45e744,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=c903e214-56a2-420e-bb04-0474af45e744,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/cinder-ks-user-pwk7f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1bb9ec1aea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=203 identity=22080 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/cinder-ks-user-pwk7f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1bb9ec1aea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=203 identity=22080 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/cinder-ks-user-pwk7f subsys=endpoint level=info msg="Successful endpoint creation" containerID=1bb9ec1aea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=203 identity=22080 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/cinder-ks-user-pwk7f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1bb9ec1aea endpointID=203 k8sNamespace=openstack k8sPodName=cinder-ks-user-pwk7f subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=c903e214-56a2-420e-bb04-0474af45e744 k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=c903e214-56a2-420e-bb04-0474af45e744 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=1bb9ec1aea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=203 identity=22080 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/cinder-ks-user-pwk7f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 0c2e89d1-abac-4815-934f-87d15a8d6db7 default }" containerID=d6b0373d5ebb9cfda002dea620a1a190e5b2d08f9a9dade69d29e3faec76b694 datapathConfiguration="&{false false false false false }" interface=lxccd530c223de6 k8sPodName=openstack/cinder-backup-storage-init-4lqk7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d6b0373d5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=877 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/cinder-backup-storage-init-4lqk7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d6b0373d5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=877 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=f03695cc-4dc8-41fa-a2e3-5c7ed8854be7,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=f03695cc-4dc8-41fa-a2e3-5c7ed8854be7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/cinder-backup-storage-init-4lqk7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d6b0373d5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=877 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.5 ipv6= k8sPodName=openstack/cinder-backup-storage-init-4lqk7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=f03695cc-4dc8-41fa-a2e3-5c7ed8854be7;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=f03695cc-4dc8-41fa-a2e3-5c7ed8854be7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d6b0373d5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=877 identity=28457 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=f03695cc-4dc8-41fa-a2e3-5c7ed8854be7,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=f03695cc-4dc8-41fa-a2e3-5c7ed8854be7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/cinder-backup-storage-init-4lqk7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d6b0373d5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=877 identity=28457 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/cinder-backup-storage-init-4lqk7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d6b0373d5e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=877 identity=28457 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/cinder-backup-storage-init-4lqk7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d6b0373d5e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=877 identity=28457 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/cinder-backup-storage-init-4lqk7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d6b0373d5e endpointID=877 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-4lqk7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=f03695cc-4dc8-41fa-a2e3-5c7ed8854be7 k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=f03695cc-4dc8-41fa-a2e3-5c7ed8854be7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=d6b0373d5e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=877 identity=28457 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/cinder-backup-storage-init-4lqk7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 300a2429-1111-47b7-99cb-b3c9412e0fe1 default }" containerID=2c76bd9088d0e873c4aa86ceb8db8f7dfe9ec73a3106d5a931fe8f3c64be1dac datapathConfiguration="&{false false false false false }" interface=lxc2ad11fab9900 k8sPodName=openstack/cinder-create-internal-tenant-l57q5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c76bd9088 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1806 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-l57q5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c76bd9088 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1806 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=32fc28b0-9ce9-43ab-aeea-02612b8c4609,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=32fc28b0-9ce9-43ab-aeea-02612b8c4609,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-l57q5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2c76bd9088 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1806 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-l57q5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=32fc28b0-9ce9-43ab-aeea-02612b8c4609;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=32fc28b0-9ce9-43ab-aeea-02612b8c4609;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c76bd9088 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1806 identity=14014 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=32fc28b0-9ce9-43ab-aeea-02612b8c4609,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=32fc28b0-9ce9-43ab-aeea-02612b8c4609,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-l57q5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c76bd9088 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1806 identity=14014 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-l57q5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2c76bd9088 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1806 identity=14014 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-l57q5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c76bd9088 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1806 identity=14014 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-l57q5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2c76bd9088 endpointID=1806 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-l57q5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=32fc28b0-9ce9-43ab-aeea-02612b8c4609 k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=32fc28b0-9ce9-43ab-aeea-02612b8c4609 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=2c76bd9088 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1806 identity=14014 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-l57q5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 fc1fb959-a9e4-46c9-abfe-93872770a4dc default }" containerID=a47f2d100cff0f6d86018a1d137a3408e4bf7658b30a0bc160c459b47e4c4884 datapathConfiguration="&{false false false false false }" interface=lxc3c615a2ce2f7 k8sPodName=openstack/cinder-storage-init-l5p6g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a47f2d100c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1133 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-storage-init-l5p6g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a47f2d100c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1133 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=300a1a5b-24bb-4fcb-b51f-6edc660a47b7,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=300a1a5b-24bb-4fcb-b51f-6edc660a47b7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-storage-init-l5p6g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=300a1a5b-24bb-4fcb-b51f-6edc660a47b7;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=300a1a5b-24bb-4fcb-b51f-6edc660a47b7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a47f2d100c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1133 identity=59796 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=300a1a5b-24bb-4fcb-b51f-6edc660a47b7,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=300a1a5b-24bb-4fcb-b51f-6edc660a47b7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-storage-init-l5p6g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a47f2d100c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1133 identity=59796 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-storage-init-l5p6g subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a47f2d100c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1133 identity=59796 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-storage-init-l5p6g subsys=endpoint level=info msg="Successful endpoint creation" containerID=a47f2d100c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1133 identity=59796 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-storage-init-l5p6g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a47f2d100c endpointID=1133 k8sNamespace=openstack k8sPodName=cinder-storage-init-l5p6g subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=300a1a5b-24bb-4fcb-b51f-6edc660a47b7 k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=300a1a5b-24bb-4fcb-b51f-6edc660a47b7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=a47f2d100c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1133 identity=59796 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-storage-init-l5p6g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 e66e9337-c112-4af9-aae3-cdda09bcebad default }" containerID=4a6a541636c1e257900c2f6c76092ad3aaad2925ff0e1507bee9f1004be1cf5f datapathConfiguration="&{false false false false false }" interface=lxc42d79c8e63d0 k8sPodName=openstack/cinder-bootstrap-2rkb8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a6a541636 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1763 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/cinder-bootstrap-2rkb8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a6a541636 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1763 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=3b97af22-adbf-4f3f-aafd-a45789a15e24,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=3b97af22-adbf-4f3f-aafd-a45789a15e24,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/cinder-bootstrap-2rkb8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=3b97af22-adbf-4f3f-aafd-a45789a15e24;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=3b97af22-adbf-4f3f-aafd-a45789a15e24;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a6a541636 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1763 identity=2652 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=3b97af22-adbf-4f3f-aafd-a45789a15e24,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=3b97af22-adbf-4f3f-aafd-a45789a15e24,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/cinder-bootstrap-2rkb8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a6a541636 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1763 identity=2652 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/cinder-bootstrap-2rkb8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4a6a541636 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1763 identity=2652 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/cinder-bootstrap-2rkb8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a6a541636 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1763 identity=2652 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/cinder-bootstrap-2rkb8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.183 339171ce-68df-468d-b941-738755b4f4af default }" containerID=7a96a72a16cf423c268b10edfa2b0c6374a1ed5e706a208dd0e3abba653d5790 datapathConfiguration="&{false false false false false }" interface=lxcdebfa820e0a7 k8sPodName=openstack/cinder-backup-9db97495-vtvbv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a96a72a16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4019 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-backup-9db97495-vtvbv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a96a72a16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4019 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-backup-9db97495-vtvbv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a96a72a16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4019 identity=3343 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-backup-9db97495-vtvbv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7a96a72a16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4019 identity=3343 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-backup-9db97495-vtvbv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 4e90677f-0b63-4c06-84b2-4c6ed3b17602 default }" containerID=cc8eb09c27cf582c2cebf1e0b0150f2683cdefb8b83910b01a6f923af657e4f6 datapathConfiguration="&{false false false false false }" interface=lxcf7fd365f922a k8sPodName=openstack/cinder-volume-7d56b5c6f8-h87s4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc8eb09c27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/cinder-volume-7d56b5c6f8-h87s4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc8eb09c27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/cinder-volume-7d56b5c6f8-h87s4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc8eb09c27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 identity=22531 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/cinder-volume-7d56b5c6f8-h87s4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc8eb09c27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 identity=22531 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/cinder-volume-7d56b5c6f8-h87s4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7a96a72a16 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4019 identity=3343 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-backup-9db97495-vtvbv subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a96a72a16 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4019 identity=3343 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-backup-9db97495-vtvbv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cc8eb09c27 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1267 identity=22531 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/cinder-volume-7d56b5c6f8-h87s4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc8eb09c27 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1267 identity=22531 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/cinder-volume-7d56b5c6f8-h87s4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4a6a541636 endpointID=1763 k8sNamespace=openstack k8sPodName=cinder-bootstrap-2rkb8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=3b97af22-adbf-4f3f-aafd-a45789a15e24 k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=3b97af22-adbf-4f3f-aafd-a45789a15e24 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=4a6a541636 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1763 identity=2652 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/cinder-bootstrap-2rkb8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 47ebfc63-ee7d-415e-aad8-deef482fcef7 default }" containerID=7d0818e94e8b5d6db36c4cd2d263ec040061838b9aade4959168293e4437766d datapathConfiguration="&{false false false false false }" interface=lxca0dfca2e2d4b k8sPodName=openstack/placement-api-54b4bb8459-r5j2k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7d0818e94e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/placement-api-54b4bb8459-r5j2k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7d0818e94e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/placement-api-54b4bb8459-r5j2k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7d0818e94e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 identity=22351 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/placement-api-54b4bb8459-r5j2k oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7d0818e94e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 identity=22351 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/placement-api-54b4bb8459-r5j2k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 a7e05ce9-f687-4f80-9521-471a8e314b15 default }" containerID=250b2508e39630ff661ded4710d33c420f89e0edcafcd875fcee05d4e5f9fe75 datapathConfiguration="&{false false false false false }" interface=lxc24cea336f1b7 k8sPodName=openstack/placement-db-init-s4kh2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=250b2508e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/placement-db-init-s4kh2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=250b2508e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=797c451f-384a-4fdc-ad6b-f8d911526448,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=797c451f-384a-4fdc-ad6b-f8d911526448,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/placement-db-init-s4kh2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=797c451f-384a-4fdc-ad6b-f8d911526448;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=797c451f-384a-4fdc-ad6b-f8d911526448;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=250b2508e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identity=23068 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=797c451f-384a-4fdc-ad6b-f8d911526448,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=797c451f-384a-4fdc-ad6b-f8d911526448,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/placement-db-init-s4kh2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=250b2508e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identity=23068 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/placement-db-init-s4kh2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7d0818e94e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=975 identity=22351 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/placement-api-54b4bb8459-r5j2k subsys=endpoint level=info msg="Successful endpoint creation" containerID=7d0818e94e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=975 identity=22351 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/placement-api-54b4bb8459-r5j2k subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=250b2508e3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=829 identity=23068 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/placement-db-init-s4kh2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=250b2508e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=829 identity=23068 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/placement-db-init-s4kh2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=250b2508e3 endpointID=829 k8sNamespace=openstack k8sPodName=placement-db-init-s4kh2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=797c451f-384a-4fdc-ad6b-f8d911526448 k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=797c451f-384a-4fdc-ad6b-f8d911526448 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=250b2508e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=829 identity=23068 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/placement-db-init-s4kh2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 cb6d5945-81a5-4fb7-842e-0db8478e4cc6 default }" containerID=b13f8f415283b08b2b82c6039417091a9d457a39b61d844fa2f078fee9c77c75 datapathConfiguration="&{false false false false false }" interface=lxc0b43b932ab18 k8sPodName=openstack/placement-db-sync-xnjml labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b13f8f4152 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1190 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/placement-db-sync-xnjml subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b13f8f4152 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1190 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=5a05c5a3-0e31-4f77-b04c-6870ddc3a7a9,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=5a05c5a3-0e31-4f77-b04c-6870ddc3a7a9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/placement-db-sync-xnjml subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=5a05c5a3-0e31-4f77-b04c-6870ddc3a7a9;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=5a05c5a3-0e31-4f77-b04c-6870ddc3a7a9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b13f8f4152 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1190 identity=34140 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=5a05c5a3-0e31-4f77-b04c-6870ddc3a7a9,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=5a05c5a3-0e31-4f77-b04c-6870ddc3a7a9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/placement-db-sync-xnjml oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b13f8f4152 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1190 identity=34140 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/placement-db-sync-xnjml subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b13f8f4152 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1190 identity=34140 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/placement-db-sync-xnjml subsys=endpoint level=info msg="Successful endpoint creation" containerID=b13f8f4152 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1190 identity=34140 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/placement-db-sync-xnjml subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b13f8f4152 endpointID=1190 k8sNamespace=openstack k8sPodName=placement-db-sync-xnjml subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=5a05c5a3-0e31-4f77-b04c-6870ddc3a7a9 k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=5a05c5a3-0e31-4f77-b04c-6870ddc3a7a9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=b13f8f4152 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1190 identity=34140 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/placement-db-sync-xnjml subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 7c1edc69-fde2-47fc-aaab-7f97611c2da9 default }" containerID=1ad4a113b643214fb8a6f9ed02730a13d09a72d8f9a4962ca3d3ddbbe20d93d0 datapathConfiguration="&{false false false false false }" interface=lxc3e8738a8ec57 k8sPodName=openstack/placement-ks-service-fgmnl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ad4a113b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2563 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/placement-ks-service-fgmnl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ad4a113b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2563 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=a7717783-4d06-4db1-b390-f0ccf105107c,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=a7717783-4d06-4db1-b390-f0ccf105107c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/placement-ks-service-fgmnl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1ad4a113b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2563 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.21 ipv6= k8sPodName=openstack/placement-ks-service-fgmnl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=a7717783-4d06-4db1-b390-f0ccf105107c;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=a7717783-4d06-4db1-b390-f0ccf105107c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ad4a113b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2563 identity=35688 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=a7717783-4d06-4db1-b390-f0ccf105107c,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=a7717783-4d06-4db1-b390-f0ccf105107c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/placement-ks-service-fgmnl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ad4a113b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2563 identity=35688 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/placement-ks-service-fgmnl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1ad4a113b6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2563 identity=35688 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/placement-ks-service-fgmnl subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ad4a113b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2563 identity=35688 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/placement-ks-service-fgmnl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1ad4a113b6 endpointID=2563 k8sNamespace=openstack k8sPodName=placement-ks-service-fgmnl subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=a7717783-4d06-4db1-b390-f0ccf105107c k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=a7717783-4d06-4db1-b390-f0ccf105107c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=1ad4a113b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2563 identity=35688 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/placement-ks-service-fgmnl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 55726741-8ef7-4a44-81cf-91e78e81a48d default }" containerID=3a1c6fd09baa94ffb3693d32a5f782960fd96308e14723f9d46c86cf89d77ffb datapathConfiguration="&{false false false false false }" interface=lxc3419c1d86ca7 k8sPodName=openstack/placement-ks-user-cfmdk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3a1c6fd09b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=752 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/placement-ks-user-cfmdk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a1c6fd09b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=752 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=73515e3c-8cf2-4230-8579-49ca3847c98b,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=73515e3c-8cf2-4230-8579-49ca3847c98b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/placement-ks-user-cfmdk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=73515e3c-8cf2-4230-8579-49ca3847c98b;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=73515e3c-8cf2-4230-8579-49ca3847c98b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a1c6fd09b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=752 identity=40809 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=73515e3c-8cf2-4230-8579-49ca3847c98b,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=73515e3c-8cf2-4230-8579-49ca3847c98b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/placement-ks-user-cfmdk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a1c6fd09b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=752 identity=40809 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/placement-ks-user-cfmdk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3a1c6fd09b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=752 identity=40809 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/placement-ks-user-cfmdk subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a1c6fd09b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=752 identity=40809 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/placement-ks-user-cfmdk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3a1c6fd09b endpointID=752 k8sNamespace=openstack k8sPodName=placement-ks-user-cfmdk subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=73515e3c-8cf2-4230-8579-49ca3847c98b k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=73515e3c-8cf2-4230-8579-49ca3847c98b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=3a1c6fd09b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=752 identity=40809 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/placement-ks-user-cfmdk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 2c0ca725-aa85-433a-9b01-155c743d4056 default }" containerID=8e2cb20647fb92abeb78413cb98c89a5a673ba1c4a2cf35bf42076b324730c7a datapathConfiguration="&{false false false false false }" interface=lxc1efd0df3b818 k8sPodName=openstack/placement-ks-endpoints-hkndx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e2cb20647 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3202 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/placement-ks-endpoints-hkndx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e2cb20647 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3202 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=eafcb5cf-f68e-427d-87fb-7924c429c185,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=eafcb5cf-f68e-427d-87fb-7924c429c185,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/placement-ks-endpoints-hkndx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=eafcb5cf-f68e-427d-87fb-7924c429c185;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=eafcb5cf-f68e-427d-87fb-7924c429c185;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=8e2cb20647 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3202 identity=58932 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=eafcb5cf-f68e-427d-87fb-7924c429c185,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=eafcb5cf-f68e-427d-87fb-7924c429c185,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/placement-ks-endpoints-hkndx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8e2cb20647 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3202 identity=58932 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/placement-ks-endpoints-hkndx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8e2cb20647 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3202 identity=58932 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/placement-ks-endpoints-hkndx subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e2cb20647 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3202 identity=58932 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/placement-ks-endpoints-hkndx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8e2cb20647 endpointID=3202 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-hkndx subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=eafcb5cf-f68e-427d-87fb-7924c429c185 k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=eafcb5cf-f68e-427d-87fb-7924c429c185 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=8e2cb20647 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3202 identity=58932 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/placement-ks-endpoints-hkndx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 a938c553-ccad-4167-afa3-69f5fbf6195a default }" containerID=78144742e6956e64a65dd5957a32cbd5d93ee0b76a704158387bc37cfc78b3d7 datapathConfiguration="&{false false false false false }" interface=lxc6092345e26bb k8sPodName=openstack/neutron-coredns-7dd4958666-qzmch labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=78144742e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-qzmch subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=78144742e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-qzmch subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=neutron-coredns;k8s:app.kubernetes.io/name=coredns;k8s:application=neutron;k8s:component=coredns;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=78144742e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 identity=45035 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-qzmch oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=78144742e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 identity=45035 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-qzmch subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=78144742e6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=142 identity=45035 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-qzmch subsys=endpoint level=info msg="Successful endpoint creation" containerID=78144742e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=142 identity=45035 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-qzmch subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.6 111ed681-7124-4058-b386-83bc3673f2f3 default }" containerID=3ff91d243ee48da4d3e5a29d8e54ad485757b75cced72f3803be06c128a9e89e datapathConfiguration="&{false false false false false }" interface=lxc048775a18add k8sPodName=local-path-storage/helper-pod-create-pvc-41f79fb9-a9ee-47a6-9491-267f38effef0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ff91d243e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1116 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-41f79fb9-a9ee-47a6-9491-267f38effef0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ff91d243e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1116 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-41f79fb9-a9ee-47a6-9491-267f38effef0 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ff91d243e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1116 identity=2404 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-41f79fb9-a9ee-47a6-9491-267f38effef0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ff91d243e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1116 identity=2404 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-41f79fb9-a9ee-47a6-9491-267f38effef0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3ff91d243e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1116 identity=2404 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-41f79fb9-a9ee-47a6-9491-267f38effef0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ff91d243e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1116 identity=2404 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-41f79fb9-a9ee-47a6-9491-267f38effef0 subsys=daemon level=info msg="Delete endpoint request" containerID=3ff91d243e endpointID=1116 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-41f79fb9-a9ee-47a6-9491-267f38effef0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3ff91d243e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1116 identity=2404 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-41f79fb9-a9ee-47a6-9491-267f38effef0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 599a21bd-6a7c-4067-bec9-f79500b4a0ac default }" containerID=e051542112f0dccefaea7f2ffba32b5560af6ab7b07bf36ea65a3225934f0554 datapathConfiguration="&{false false false false false }" interface=lxc37224e514bf6 k8sPodName=openstack/rabbitmq-nova-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e051542112 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=507 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e051542112 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=507 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-nova;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e051542112 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=507 identity=7987 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e051542112 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=507 identity=7987 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e051542112 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=507 identity=7987 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e051542112 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=507 identity=7987 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.89 197ae79f-ac92-4ff8-b8f7-a7ec5d16c91f default }" containerID=1bd08007ebfd5f3a8c90292caababc3375edfb068c39ff3a62742656d9c5c502 datapathConfiguration="&{false false false false false }" interface=lxc95d38e2c2d73 k8sPodName=openstack/nova-conductor-967fc79f5-hdnq4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1bd08007eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1905 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/nova-conductor-967fc79f5-hdnq4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1bd08007eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1905 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/nova-conductor-967fc79f5-hdnq4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1bd08007eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1905 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.89 ipv6= k8sPodName=openstack/nova-conductor-967fc79f5-hdnq4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1bd08007eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1905 identity=10434 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/nova-conductor-967fc79f5-hdnq4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1bd08007eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1905 identity=10434 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/nova-conductor-967fc79f5-hdnq4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 ede6b35b-1116-4514-b4be-4d2206e846dd default }" containerID=023d0ba9a616dea3e56bac077c8b3cd1b5abada9eec265169de9965989656863 datapathConfiguration="&{false false false false false }" interface=lxc498924a90fe5 k8sPodName=openstack/nova-api-metadata-56548d795d-nktxx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=023d0ba9a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=696 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/nova-api-metadata-56548d795d-nktxx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=023d0ba9a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=696 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/nova-api-metadata-56548d795d-nktxx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=metadata;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=023d0ba9a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=696 identity=2711 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/nova-api-metadata-56548d795d-nktxx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=023d0ba9a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=696 identity=2711 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/nova-api-metadata-56548d795d-nktxx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 d38a62c8-bf82-4933-bf59-2d22c22c1d68 default }" containerID=e4097863d1d9355630e597ca50218cb65fb4ac0bee9b79bde19123c6ba2a510c datapathConfiguration="&{false false false false false }" interface=lxcfa58b99cfc7f k8sPodName=openstack/nova-cell-setup-db8qp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4097863d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2528 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-cell-setup-db8qp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4097863d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2528 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=db8b0ba6-0d98-4347-9c0d-106a40b25c0f,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=db8b0ba6-0d98-4347-9c0d-106a40b25c0f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-cell-setup-db8qp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=db8b0ba6-0d98-4347-9c0d-106a40b25c0f;k8s:batch.kubernetes.io/job-name=nova-cell-setup;k8s:component=cell-setup;k8s:controller-uid=db8b0ba6-0d98-4347-9c0d-106a40b25c0f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e4097863d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2528 identity=57065 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=db8b0ba6-0d98-4347-9c0d-106a40b25c0f,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=db8b0ba6-0d98-4347-9c0d-106a40b25c0f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-cell-setup-db8qp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4097863d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2528 identity=57065 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-cell-setup-db8qp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 883c0d95-6fba-4bf2-824e-220e9e1d48ad default }" containerID=a149e406577c424cc99e4fec21d3c0c21324313ebbcca33058b772af2c460a4d datapathConfiguration="&{false false false false false }" interface=lxc5247b23f1cb2 k8sPodName=openstack/nova-scheduler-7f696c9ff5-h7bfb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a149e40657 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=751 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/nova-scheduler-7f696c9ff5-h7bfb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a149e40657 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=751 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/nova-scheduler-7f696c9ff5-h7bfb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a149e40657 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=751 identity=42959 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/nova-scheduler-7f696c9ff5-h7bfb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a149e40657 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=751 identity=42959 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/nova-scheduler-7f696c9ff5-h7bfb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1bd08007eb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1905 identity=10434 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/nova-conductor-967fc79f5-hdnq4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1bd08007eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1905 identity=10434 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/nova-conductor-967fc79f5-hdnq4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.154 2eb6d319-66c8-42e3-8698-092eb3b1d366 default }" containerID=e3812b119d8c1e5ccaf047505f6efeb9aea7859a2c2862bbbde2b0840003813c datapathConfiguration="&{false false false false false }" interface=lxc8b414a35a4b2 k8sPodName=openstack/nova-bootstrap-nmhqn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e3812b119d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=252 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-bootstrap-nmhqn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e3812b119d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=252 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=4758d0b9-3ee5-49d8-a39d-1d11652a98cc,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=4758d0b9-3ee5-49d8-a39d-1d11652a98cc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-bootstrap-nmhqn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.231 2537ddf7-29f0-423e-a24a-9fe10f6e1cd6 default }" containerID=d50cdf5222d139ac0748cbda0d14f110979f6a8114a1b75f6e9f56f2b8bf7f42 datapathConfiguration="&{false false false false false }" interface=lxc3edb9ffb2931 k8sPodName=openstack/nova-api-osapi-7bf87f47b9-lpg8p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d50cdf5222 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1158 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/nova-api-osapi-7bf87f47b9-lpg8p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d50cdf5222 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1158 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/nova-api-osapi-7bf87f47b9-lpg8p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=023d0ba9a6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=696 identity=2711 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/nova-api-metadata-56548d795d-nktxx subsys=endpoint level=info msg="Successful endpoint creation" containerID=023d0ba9a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=696 identity=2711 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/nova-api-metadata-56548d795d-nktxx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.251 76295752-53ed-4629-9fe1-8fbd8221d6ba default }" containerID=4fc9b379a42034d5c7ce33d44a272a6e519ed0fcbf3c751fd643d625a1230467 datapathConfiguration="&{false false false false false }" interface=lxc5f00dd2a9473 k8sPodName=openstack/nova-db-init-jxcxg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4fc9b379a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2545 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-db-init-jxcxg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4fc9b379a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2545 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=264336d0-37e6-4cb1-b38e-208e10442978,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=264336d0-37e6-4cb1-b38e-208e10442978,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-db-init-jxcxg subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=4758d0b9-3ee5-49d8-a39d-1d11652a98cc;k8s:batch.kubernetes.io/job-name=nova-bootstrap;k8s:component=bootstrap;k8s:controller-uid=4758d0b9-3ee5-49d8-a39d-1d11652a98cc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-bootstrap;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e3812b119d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=252 identity=21686 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=4758d0b9-3ee5-49d8-a39d-1d11652a98cc,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=4758d0b9-3ee5-49d8-a39d-1d11652a98cc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-bootstrap-nmhqn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e3812b119d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=252 identity=21686 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-bootstrap-nmhqn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=e4097863d1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2528 identity=57065 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-cell-setup-db8qp subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4097863d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2528 identity=57065 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-cell-setup-db8qp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a149e40657 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=751 identity=42959 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/nova-scheduler-7f696c9ff5-h7bfb subsys=endpoint level=info msg="Successful endpoint creation" containerID=a149e40657 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=751 identity=42959 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/nova-scheduler-7f696c9ff5-h7bfb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e3812b119d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=252 identity=21686 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-bootstrap-nmhqn subsys=endpoint level=info msg="Successful endpoint creation" containerID=e3812b119d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=252 identity=21686 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-bootstrap-nmhqn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=os-api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d50cdf5222 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1158 identity=10518 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/nova-api-osapi-7bf87f47b9-lpg8p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d50cdf5222 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1158 identity=10518 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/nova-api-osapi-7bf87f47b9-lpg8p subsys=endpoint level=info msg="Invalid state transition skipped" containerID=4fc9b379a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2545 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-db-init-jxcxg line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=d50cdf5222 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1158 identity=10518 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/nova-api-osapi-7bf87f47b9-lpg8p subsys=endpoint level=info msg="Successful endpoint creation" containerID=d50cdf5222 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1158 identity=10518 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/nova-api-osapi-7bf87f47b9-lpg8p subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=264336d0-37e6-4cb1-b38e-208e10442978;k8s:batch.kubernetes.io/job-name=nova-db-init;k8s:component=db-init;k8s:controller-uid=264336d0-37e6-4cb1-b38e-208e10442978;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4fc9b379a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2545 identity=2297 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=264336d0-37e6-4cb1-b38e-208e10442978,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=264336d0-37e6-4cb1-b38e-208e10442978,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-db-init-jxcxg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4fc9b379a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2545 identity=2297 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-db-init-jxcxg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4fc9b379a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2545 identity=2297 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-db-init-jxcxg subsys=endpoint level=info msg="Successful endpoint creation" containerID=4fc9b379a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2545 identity=2297 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-db-init-jxcxg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.151 568b1998-f4b4-4c9c-a13f-1f17dc1c7bce default }" containerID=3501a7b426449286e68461e1c0ba70d656aae4e732b853c0788bf1d16d99ebfa datapathConfiguration="&{false false false false false }" interface=lxc2911039516a9 k8sPodName=openstack/nova-novncproxy-598f4f6b9b-h4c7d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3501a7b426 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1490 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/nova-novncproxy-598f4f6b9b-h4c7d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3501a7b426 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1490 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/nova-novncproxy-598f4f6b9b-h4c7d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=novnc-proxy;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3501a7b426 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1490 identity=24032 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/nova-novncproxy-598f4f6b9b-h4c7d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3501a7b426 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1490 identity=24032 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/nova-novncproxy-598f4f6b9b-h4c7d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3501a7b426 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1490 identity=24032 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/nova-novncproxy-598f4f6b9b-h4c7d subsys=endpoint level=info msg="Successful endpoint creation" containerID=3501a7b426 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1490 identity=24032 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/nova-novncproxy-598f4f6b9b-h4c7d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4fc9b379a4 endpointID=2545 k8sNamespace=openstack k8sPodName=nova-db-init-jxcxg subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=264336d0-37e6-4cb1-b38e-208e10442978 k8s:batch.kubernetes.io/job-name=nova-db-init k8s:component=db-init k8s:controller-uid=264336d0-37e6-4cb1-b38e-208e10442978 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=4fc9b379a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2545 identity=2297 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-db-init-jxcxg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 90bfba50-6953-4554-bbd4-146fe8b4e72e default }" containerID=5ed7525423fcdd055d9b7823f73087902478622bcbe02feff14899605b5c05ad datapathConfiguration="&{false false false false false }" interface=lxce82358da74d1 k8sPodName=openstack/nova-db-sync-h8hkz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ed7525423 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1265 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/nova-db-sync-h8hkz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ed7525423 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1265 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=a95c638d-52b4-40cb-99a3-199f0ba5cce6,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=a95c638d-52b4-40cb-99a3-199f0ba5cce6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/nova-db-sync-h8hkz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=a95c638d-52b4-40cb-99a3-199f0ba5cce6;k8s:batch.kubernetes.io/job-name=nova-db-sync;k8s:component=db-sync;k8s:controller-uid=a95c638d-52b4-40cb-99a3-199f0ba5cce6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-sync;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ed7525423 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1265 identity=37468 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=a95c638d-52b4-40cb-99a3-199f0ba5cce6,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=a95c638d-52b4-40cb-99a3-199f0ba5cce6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/nova-db-sync-h8hkz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5ed7525423 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1265 identity=37468 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/nova-db-sync-h8hkz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5ed7525423 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1265 identity=37468 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/nova-db-sync-h8hkz subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ed7525423 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1265 identity=37468 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/nova-db-sync-h8hkz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5ed7525423 endpointID=1265 k8sNamespace=openstack k8sPodName=nova-db-sync-h8hkz subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=a95c638d-52b4-40cb-99a3-199f0ba5cce6 k8s:batch.kubernetes.io/job-name=nova-db-sync k8s:component=db-sync k8s:controller-uid=a95c638d-52b4-40cb-99a3-199f0ba5cce6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-sync k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=5ed7525423 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1265 identity=37468 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/nova-db-sync-h8hkz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.63 acc42edd-ef26-46f5-95ab-1356e206640f default }" containerID=6b1e263358b791e1fa034f9d8cc3207e556064c3c77ff1881a1d811115bbfb03 datapathConfiguration="&{false false false false false }" interface=lxc0ffc5f6a5ad6 k8sPodName=openstack/nova-rabbit-init-qps77 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b1e263358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1410 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/nova-rabbit-init-qps77 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b1e263358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1410 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=0f97e691-b959-4558-8b5f-8558082413ed,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0f97e691-b959-4558-8b5f-8558082413ed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/nova-rabbit-init-qps77 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=0f97e691-b959-4558-8b5f-8558082413ed;k8s:batch.kubernetes.io/job-name=nova-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=0f97e691-b959-4558-8b5f-8558082413ed;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-rabbit-init;k8s:release_group=nova;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=6b1e263358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1410 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.63 ipv6= k8sPodName=openstack/nova-rabbit-init-qps77 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6b1e263358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1410 identity=56594 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=0f97e691-b959-4558-8b5f-8558082413ed,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0f97e691-b959-4558-8b5f-8558082413ed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/nova-rabbit-init-qps77 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b1e263358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1410 identity=56594 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/nova-rabbit-init-qps77 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6b1e263358 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1410 identity=56594 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/nova-rabbit-init-qps77 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b1e263358 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1410 identity=56594 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/nova-rabbit-init-qps77 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6b1e263358 endpointID=1410 k8sNamespace=openstack k8sPodName=nova-rabbit-init-qps77 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=0f97e691-b959-4558-8b5f-8558082413ed k8s:batch.kubernetes.io/job-name=nova-rabbit-init k8s:component=rabbit-init k8s:controller-uid=0f97e691-b959-4558-8b5f-8558082413ed k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-rabbit-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=6b1e263358 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1410 identity=56594 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/nova-rabbit-init-qps77 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 d9a2b4ac-0256-484b-a10a-814b69f32185 default }" containerID=d46c9305649aca047179490ddbe421c38190e689f833fecd51d342ddfa90cd08 datapathConfiguration="&{false false false false false }" interface=lxc612862d4a17c k8sPodName=openstack/nova-ks-service-2l5tz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d46c930564 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=95 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/nova-ks-service-2l5tz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d46c930564 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=95 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=9a1c7ae4-d721-4b5c-bafb-36bab18c64a2,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=9a1c7ae4-d721-4b5c-bafb-36bab18c64a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/nova-ks-service-2l5tz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=9a1c7ae4-d721-4b5c-bafb-36bab18c64a2;k8s:batch.kubernetes.io/job-name=nova-ks-service;k8s:component=ks-service;k8s:controller-uid=9a1c7ae4-d721-4b5c-bafb-36bab18c64a2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-service;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d46c930564 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=95 identity=24505 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=9a1c7ae4-d721-4b5c-bafb-36bab18c64a2,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=9a1c7ae4-d721-4b5c-bafb-36bab18c64a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/nova-ks-service-2l5tz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d46c930564 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=95 identity=24505 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/nova-ks-service-2l5tz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d46c930564 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=95 identity=24505 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/nova-ks-service-2l5tz subsys=endpoint level=info msg="Successful endpoint creation" containerID=d46c930564 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=95 identity=24505 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/nova-ks-service-2l5tz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d46c930564 endpointID=95 k8sNamespace=openstack k8sPodName=nova-ks-service-2l5tz subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=9a1c7ae4-d721-4b5c-bafb-36bab18c64a2 k8s:batch.kubernetes.io/job-name=nova-ks-service k8s:component=ks-service k8s:controller-uid=9a1c7ae4-d721-4b5c-bafb-36bab18c64a2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-service k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=d46c930564 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=95 identity=24505 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/nova-ks-service-2l5tz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 c334830e-050d-41ee-bc34-3c68ec526d6d default }" containerID=d709fb1fc6407dbf0ea2286fd6eeb6758e53626c900c72faa6ed6b51f4095b81 datapathConfiguration="&{false false false false false }" interface=lxcf120e121d1b4 k8sPodName=openstack/nova-ks-endpoints-lcpxj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d709fb1fc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1897 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/nova-ks-endpoints-lcpxj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d709fb1fc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1897 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=5fa4a9a5-9962-4464-bda3-e47a080c76ad,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=5fa4a9a5-9962-4464-bda3-e47a080c76ad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/nova-ks-endpoints-lcpxj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=5fa4a9a5-9962-4464-bda3-e47a080c76ad;k8s:batch.kubernetes.io/job-name=nova-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=5fa4a9a5-9962-4464-bda3-e47a080c76ad;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-endpoints;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d709fb1fc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1897 identity=24498 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=5fa4a9a5-9962-4464-bda3-e47a080c76ad,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=5fa4a9a5-9962-4464-bda3-e47a080c76ad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/nova-ks-endpoints-lcpxj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d709fb1fc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1897 identity=24498 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/nova-ks-endpoints-lcpxj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d709fb1fc6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1897 identity=24498 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/nova-ks-endpoints-lcpxj subsys=endpoint level=info msg="Successful endpoint creation" containerID=d709fb1fc6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1897 identity=24498 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/nova-ks-endpoints-lcpxj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d709fb1fc6 endpointID=1897 k8sNamespace=openstack k8sPodName=nova-ks-endpoints-lcpxj subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=5fa4a9a5-9962-4464-bda3-e47a080c76ad k8s:batch.kubernetes.io/job-name=nova-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=5fa4a9a5-9962-4464-bda3-e47a080c76ad k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-endpoints k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=d709fb1fc6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1897 identity=24498 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/nova-ks-endpoints-lcpxj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 4fee5220-80e0-4a45-a76b-92ddddc0478e default }" containerID=ca948caa07ae29707144ae2517ba1854e56337d23146d2bc72385e9e80a5ad09 datapathConfiguration="&{false false false false false }" interface=lxcc5d18514d4dd k8sPodName=openstack/nova-ks-user-6jhcz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca948caa07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=524 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/nova-ks-user-6jhcz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca948caa07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=524 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=31a1ae98-c52b-4619-adae-2dc98a151f01,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=31a1ae98-c52b-4619-adae-2dc98a151f01,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/nova-ks-user-6jhcz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=31a1ae98-c52b-4619-adae-2dc98a151f01;k8s:batch.kubernetes.io/job-name=nova-ks-user;k8s:component=ks-user;k8s:controller-uid=31a1ae98-c52b-4619-adae-2dc98a151f01;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-user;k8s:release_group=nova;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=ca948caa07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=524 identity=4487 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=31a1ae98-c52b-4619-adae-2dc98a151f01,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=31a1ae98-c52b-4619-adae-2dc98a151f01,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/nova-ks-user-6jhcz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca948caa07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=524 identity=4487 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/nova-ks-user-6jhcz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ca948caa07 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=524 identity=4487 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/nova-ks-user-6jhcz subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca948caa07 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=524 identity=4487 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/nova-ks-user-6jhcz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ca948caa07 endpointID=524 k8sNamespace=openstack k8sPodName=nova-ks-user-6jhcz subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=31a1ae98-c52b-4619-adae-2dc98a151f01 k8s:batch.kubernetes.io/job-name=nova-ks-user k8s:component=ks-user k8s:controller-uid=31a1ae98-c52b-4619-adae-2dc98a151f01 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-user k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=ca948caa07 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=524 identity=4487 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/nova-ks-user-6jhcz subsys=endpoint level=info msg="Delete endpoint request" containerID=e3812b119d endpointID=252 k8sNamespace=openstack k8sPodName=nova-bootstrap-nmhqn subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=4758d0b9-3ee5-49d8-a39d-1d11652a98cc k8s:batch.kubernetes.io/job-name=nova-bootstrap k8s:component=bootstrap k8s:controller-uid=4758d0b9-3ee5-49d8-a39d-1d11652a98cc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-bootstrap k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=e3812b119d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=252 identity=21686 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-bootstrap-nmhqn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.218 a0a679db-e90a-4804-8749-a8356d8fbe32 default }" containerID=4a59c995df97bad514415b8936d878b4749cbd8fd5d1c1826d54c0ed7eb258b0 datapathConfiguration="&{false false false false false }" interface=lxcf6c02d6e496a k8sPodName=local-path-storage/helper-pod-create-pvc-ecc228c2-43d3-4b73-861c-1a822672b95e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a59c995df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3511 ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ecc228c2-43d3-4b73-861c-1a822672b95e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a59c995df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3511 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ecc228c2-43d3-4b73-861c-1a822672b95e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a59c995df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3511 identity=2404 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ecc228c2-43d3-4b73-861c-1a822672b95e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a59c995df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3511 identity=2404 ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ecc228c2-43d3-4b73-861c-1a822672b95e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4a59c995df datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3511 identity=2404 ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ecc228c2-43d3-4b73-861c-1a822672b95e subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a59c995df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3511 identity=2404 ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ecc228c2-43d3-4b73-861c-1a822672b95e subsys=daemon level=info msg="Delete endpoint request" containerID=4a59c995df endpointID=3511 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ecc228c2-43d3-4b73-861c-1a822672b95e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4a59c995df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3511 identity=2404 ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ecc228c2-43d3-4b73-861c-1a822672b95e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 0cbb397a-b23d-44ca-a4f0-ed3338ef77e4 default }" containerID=b56a2b1d7d65af18f64bace75a618a2909a13ef5776726b5f1bb4e4722ba3aa0 datapathConfiguration="&{false false false false false }" interface=lxcb67ddec8d4ed k8sPodName=openstack/rabbitmq-neutron-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b56a2b1d7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=362 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b56a2b1d7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=362 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-neutron;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b56a2b1d7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=362 identity=23262 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b56a2b1d7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=362 identity=23262 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b56a2b1d7d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=362 identity=23262 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b56a2b1d7d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=362 identity=23262 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.218 d95fdc66-08df-4a66-9a7d-52879a8b4538 default }" containerID=7743fe667f1c698ce30658f4338998a8a9c22a80868b0e4297a924a6a7a64293 datapathConfiguration="&{false false false false false }" interface=lxce252e4b723ec k8sPodName=openstack/neutron-server-849c456fb9-2c4n7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7743fe667f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1516 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/neutron-server-849c456fb9-2c4n7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7743fe667f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1516 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/neutron-server-849c456fb9-2c4n7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7743fe667f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1516 identity=3637 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/neutron-server-849c456fb9-2c4n7 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7743fe667f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1516 identity=3637 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/neutron-server-849c456fb9-2c4n7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 b7472f3b-d70f-4bac-aa91-2330cdc0c298 default }" containerID=6690b3348bae9d50253f002fc256b6c1dd7feb23552c8ee6015d2b4f904bcfd1 datapathConfiguration="&{false false false false false }" interface=lxc6bb11b45d110 k8sPodName=openstack/neutron-db-init-7cc9f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6690b3348b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=357 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/neutron-db-init-7cc9f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6690b3348b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=357 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=d3fa00df-2d25-4ecf-a0c7-4970341b2c7a,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=d3fa00df-2d25-4ecf-a0c7-4970341b2c7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/neutron-db-init-7cc9f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=d3fa00df-2d25-4ecf-a0c7-4970341b2c7a;k8s:batch.kubernetes.io/job-name=neutron-db-init;k8s:component=db-init;k8s:controller-uid=d3fa00df-2d25-4ecf-a0c7-4970341b2c7a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6690b3348b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=357 identity=7037 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=d3fa00df-2d25-4ecf-a0c7-4970341b2c7a,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=d3fa00df-2d25-4ecf-a0c7-4970341b2c7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/neutron-db-init-7cc9f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6690b3348b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=357 identity=7037 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/neutron-db-init-7cc9f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 0bcfbc24-2e45-49ae-82ab-41da2a27d74c default }" containerID=3178714e740cbfe1e1816b9cfd7a2e2099f1846f67b76df4f5b026270ffba3e5 datapathConfiguration="&{false false false false false }" interface=lxccc9a9e33fecc k8sPodName=openstack/neutron-rpc-server-854f59cf8f-ws9sv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3178714e74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=627 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/neutron-rpc-server-854f59cf8f-ws9sv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3178714e74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=627 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/neutron-rpc-server-854f59cf8f-ws9sv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=rpc_server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3178714e74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=627 identity=23281 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/neutron-rpc-server-854f59cf8f-ws9sv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3178714e74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=627 identity=23281 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/neutron-rpc-server-854f59cf8f-ws9sv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7743fe667f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1516 identity=3637 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/neutron-server-849c456fb9-2c4n7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7743fe667f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1516 identity=3637 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/neutron-server-849c456fb9-2c4n7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6690b3348b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=357 identity=7037 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/neutron-db-init-7cc9f subsys=endpoint level=info msg="Successful endpoint creation" containerID=6690b3348b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=357 identity=7037 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/neutron-db-init-7cc9f subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3178714e74 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=627 identity=23281 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/neutron-rpc-server-854f59cf8f-ws9sv subsys=endpoint level=info msg="Successful endpoint creation" containerID=3178714e74 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=627 identity=23281 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/neutron-rpc-server-854f59cf8f-ws9sv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6690b3348b endpointID=357 k8sNamespace=openstack k8sPodName=neutron-db-init-7cc9f subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=d3fa00df-2d25-4ecf-a0c7-4970341b2c7a k8s:batch.kubernetes.io/job-name=neutron-db-init k8s:component=db-init k8s:controller-uid=d3fa00df-2d25-4ecf-a0c7-4970341b2c7a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=6690b3348b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=357 identity=7037 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/neutron-db-init-7cc9f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 84e5e442-38d7-442b-b6af-0266ee79bbc2 default }" containerID=6fabd53ebb83ab098d35e2744687f341208c11cd2578694bedbb9f05e74df59d datapathConfiguration="&{false false false false false }" interface=lxcd41a240e90a6 k8sPodName=openstack/neutron-db-sync-g4t8t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6fabd53ebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2067 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/neutron-db-sync-g4t8t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6fabd53ebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2067 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=e26f8fd5-ceb4-4919-ad45-603279b43a0a,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=e26f8fd5-ceb4-4919-ad45-603279b43a0a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/neutron-db-sync-g4t8t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=e26f8fd5-ceb4-4919-ad45-603279b43a0a;k8s:batch.kubernetes.io/job-name=neutron-db-sync;k8s:component=db-sync;k8s:controller-uid=e26f8fd5-ceb4-4919-ad45-603279b43a0a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-sync;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6fabd53ebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2067 identity=9368 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=e26f8fd5-ceb4-4919-ad45-603279b43a0a,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=e26f8fd5-ceb4-4919-ad45-603279b43a0a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/neutron-db-sync-g4t8t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6fabd53ebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2067 identity=9368 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/neutron-db-sync-g4t8t subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6fabd53ebb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2067 identity=9368 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/neutron-db-sync-g4t8t subsys=endpoint level=info msg="Successful endpoint creation" containerID=6fabd53ebb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2067 identity=9368 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/neutron-db-sync-g4t8t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6fabd53ebb endpointID=2067 k8sNamespace=openstack k8sPodName=neutron-db-sync-g4t8t subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=e26f8fd5-ceb4-4919-ad45-603279b43a0a k8s:batch.kubernetes.io/job-name=neutron-db-sync k8s:component=db-sync k8s:controller-uid=e26f8fd5-ceb4-4919-ad45-603279b43a0a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-sync k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=6fabd53ebb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2067 identity=9368 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/neutron-db-sync-g4t8t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 b1f9e8d8-fe50-44c0-9b0c-4f36f55c4082 default }" containerID=102e8b826419422c0b51d3c229189170846ad4aacd3371f903bee9268a466325 datapathConfiguration="&{false false false false false }" interface=lxc2b98c1a06686 k8sPodName=openstack/neutron-rabbit-init-lqkqs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=102e8b8264 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=404 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/neutron-rabbit-init-lqkqs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=102e8b8264 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=404 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=54a5f947-f68e-48ae-ac0d-cab4b2e22a42,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=54a5f947-f68e-48ae-ac0d-cab4b2e22a42,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/neutron-rabbit-init-lqkqs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=54a5f947-f68e-48ae-ac0d-cab4b2e22a42;k8s:batch.kubernetes.io/job-name=neutron-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=54a5f947-f68e-48ae-ac0d-cab4b2e22a42;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-rabbit-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=102e8b8264 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=404 identity=53747 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=54a5f947-f68e-48ae-ac0d-cab4b2e22a42,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=54a5f947-f68e-48ae-ac0d-cab4b2e22a42,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/neutron-rabbit-init-lqkqs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=102e8b8264 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=404 identity=53747 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/neutron-rabbit-init-lqkqs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=102e8b8264 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=404 identity=53747 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/neutron-rabbit-init-lqkqs subsys=endpoint level=info msg="Successful endpoint creation" containerID=102e8b8264 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=404 identity=53747 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/neutron-rabbit-init-lqkqs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=102e8b8264 endpointID=404 k8sNamespace=openstack k8sPodName=neutron-rabbit-init-lqkqs subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=54a5f947-f68e-48ae-ac0d-cab4b2e22a42 k8s:batch.kubernetes.io/job-name=neutron-rabbit-init k8s:component=rabbit-init k8s:controller-uid=54a5f947-f68e-48ae-ac0d-cab4b2e22a42 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-rabbit-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=102e8b8264 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=404 identity=53747 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/neutron-rabbit-init-lqkqs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 160b35a3-c9f1-4784-90ba-ba78e48b0f90 default }" containerID=ed61e32c63742819cd1549b044a2738eee4420aaee29c0b3cfcdc9074a2fdd50 datapathConfiguration="&{false false false false false }" interface=lxc2af6af842981 k8sPodName=openstack/neutron-ks-service-wvxxm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed61e32c63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3205 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/neutron-ks-service-wvxxm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed61e32c63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3205 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=d52469b0-f7f2-4452-8534-aecc2b30d1a4,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=d52469b0-f7f2-4452-8534-aecc2b30d1a4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/neutron-ks-service-wvxxm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=d52469b0-f7f2-4452-8534-aecc2b30d1a4;k8s:batch.kubernetes.io/job-name=neutron-ks-service;k8s:component=ks-service;k8s:controller-uid=d52469b0-f7f2-4452-8534-aecc2b30d1a4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-service;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed61e32c63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3205 identity=24758 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=d52469b0-f7f2-4452-8534-aecc2b30d1a4,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=d52469b0-f7f2-4452-8534-aecc2b30d1a4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/neutron-ks-service-wvxxm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed61e32c63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3205 identity=24758 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/neutron-ks-service-wvxxm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ed61e32c63 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3205 identity=24758 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/neutron-ks-service-wvxxm subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed61e32c63 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3205 identity=24758 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/neutron-ks-service-wvxxm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ed61e32c63 endpointID=3205 k8sNamespace=openstack k8sPodName=neutron-ks-service-wvxxm subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=d52469b0-f7f2-4452-8534-aecc2b30d1a4 k8s:batch.kubernetes.io/job-name=neutron-ks-service k8s:component=ks-service k8s:controller-uid=d52469b0-f7f2-4452-8534-aecc2b30d1a4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-service k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=ed61e32c63 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3205 identity=24758 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/neutron-ks-service-wvxxm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 7962d6fb-e2e0-470b-8ef2-9b2ae37894df default }" containerID=a98cab37233b6bd05dcb33f2584404d36f658fdf5db92ccbe90303ef1f065bbb datapathConfiguration="&{false false false false false }" interface=lxcf926b88a6fea k8sPodName=openstack/neutron-ks-endpoints-w8vfk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a98cab3723 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2607 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/neutron-ks-endpoints-w8vfk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a98cab3723 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2607 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=7700c9e0-7dc4-417f-917d-49dac33ead26,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7700c9e0-7dc4-417f-917d-49dac33ead26,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/neutron-ks-endpoints-w8vfk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=7700c9e0-7dc4-417f-917d-49dac33ead26;k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=7700c9e0-7dc4-417f-917d-49dac33ead26;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-endpoints;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a98cab3723 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2607 identity=15859 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=7700c9e0-7dc4-417f-917d-49dac33ead26,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7700c9e0-7dc4-417f-917d-49dac33ead26,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/neutron-ks-endpoints-w8vfk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a98cab3723 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2607 identity=15859 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/neutron-ks-endpoints-w8vfk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a98cab3723 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2607 identity=15859 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/neutron-ks-endpoints-w8vfk subsys=endpoint level=info msg="Successful endpoint creation" containerID=a98cab3723 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2607 identity=15859 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/neutron-ks-endpoints-w8vfk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a98cab3723 endpointID=2607 k8sNamespace=openstack k8sPodName=neutron-ks-endpoints-w8vfk subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=7700c9e0-7dc4-417f-917d-49dac33ead26 k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=7700c9e0-7dc4-417f-917d-49dac33ead26 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-endpoints k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=a98cab3723 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2607 identity=15859 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/neutron-ks-endpoints-w8vfk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 ca2bb107-93ad-4765-8d2d-6ab876652289 default }" containerID=5b9483fb9da444399275dfe980436f8a6ced3a69a7e4bdab960ca0b0cb933d72 datapathConfiguration="&{false false false false false }" interface=lxccf8f1e3a3a3d k8sPodName=openstack/neutron-ks-user-tb7vh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5b9483fb9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/neutron-ks-user-tb7vh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5b9483fb9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=29d58a31-b128-444b-85bd-80c91c6e3516,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=29d58a31-b128-444b-85bd-80c91c6e3516,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/neutron-ks-user-tb7vh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=29d58a31-b128-444b-85bd-80c91c6e3516;k8s:batch.kubernetes.io/job-name=neutron-ks-user;k8s:component=ks-user;k8s:controller-uid=29d58a31-b128-444b-85bd-80c91c6e3516;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-user;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5b9483fb9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identity=6290 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=29d58a31-b128-444b-85bd-80c91c6e3516,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=29d58a31-b128-444b-85bd-80c91c6e3516,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/neutron-ks-user-tb7vh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5b9483fb9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identity=6290 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/neutron-ks-user-tb7vh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5b9483fb9d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=187 identity=6290 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/neutron-ks-user-tb7vh subsys=endpoint level=info msg="Successful endpoint creation" containerID=5b9483fb9d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=187 identity=6290 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/neutron-ks-user-tb7vh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5b9483fb9d endpointID=187 k8sNamespace=openstack k8sPodName=neutron-ks-user-tb7vh subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=29d58a31-b128-444b-85bd-80c91c6e3516 k8s:batch.kubernetes.io/job-name=neutron-ks-user k8s:component=ks-user k8s:controller-uid=29d58a31-b128-444b-85bd-80c91c6e3516 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-user k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=5b9483fb9d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=187 identity=6290 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/neutron-ks-user-tb7vh subsys=endpoint