level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.018215ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="53.111µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.040036ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="8.08µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=95.372571ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="14.391µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="81.902µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="137.724µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="136.423µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="147.953µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="462.871µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.67µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.040494ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.9313ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="207.135µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="198.925µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="447.212µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="204.525µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="181.204µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=46.572417ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="92.583µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="12.22µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="5.84µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.242.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.742834ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="12.36µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.723341ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.591µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.534427ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.51µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="3.06µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="22.26µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.76µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="15.18µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="81.302µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="61.582µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="43.141µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="287.337µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.44µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="11.75µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="211.475µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="900.402µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.24322ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.98µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="21.951µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.242 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.242 ipAddr.ipv6="" k8sNodeIP=199.204.45.242 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.242" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.112" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.242" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.242} {CiliumInternalIP 10.0.0.112}] 10.0.0.0/24 [] [] 10.0.0.103 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:43211" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.598358568s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="47.881µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="7.62µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="44.981µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="9.8µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1822 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1822 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1822 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.653014358s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=298.516092ms file-path=/var/run/cilium/state/templates/adc83667486517a9b06d5bc4619012a2c8a9e2782eb09d43ab0e145caef3422c/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1822 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=696 ipv4=10.0.0.103 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=696 identityLabels="reserved:health" ipv4=10.0.0.103 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=696 identity=4 identityLabels="reserved:health" ipv4=10.0.0.103 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.090407156s file-path=/var/run/cilium/state/templates/d8ccb675ddacf1cdb2779f28b02bb625ef4dfef948001aaebe06c13a01c7e9d7/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=696 identity=4 ipv4=10.0.0.103 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 25433549-c23d-4ba1-b294-12d515f4b7f4 default }" containerID=45d9c926d39060348dc95d1969bc103536cc0c2642c6ba716ef9558090b10518 datapathConfiguration="&{false false false false false }" interface=lxcb92ee89fd658 k8sPodName=kube-system/coredns-7c96b6546b-frwnm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45d9c926d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1522 ipv4=10.0.0.100 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-frwnm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45d9c926d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1522 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.100 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-frwnm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=45d9c926d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1522 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.100 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-frwnm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=45d9c926d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1522 identity=5092 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.100 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-frwnm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=45d9c926d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1522 identity=5092 ipv4=10.0.0.100 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-frwnm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.238 b9ec06bc-e26b-41e9-a832-c8f69238747e default }" containerID=118000beacfc113020eb153a2df838a5ac2332d19bec35ecc9b0f3232c025252 datapathConfiguration="&{false false false false false }" interface=lxc6c531a9ae0e3 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-28lnt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=118000beac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=652 ipv4=10.0.0.238 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-28lnt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=118000beac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=652 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=bf123c31-c329-4df5-833a-482b8b4442d2,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=bf123c31-c329-4df5-833a-482b8b4442d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.238 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-28lnt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=bf123c31-c329-4df5-833a-482b8b4442d2;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=bf123c31-c329-4df5-833a-482b8b4442d2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=118000beac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=652 identity=34460 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=bf123c31-c329-4df5-833a-482b8b4442d2,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=bf123c31-c329-4df5-833a-482b8b4442d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.238 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-28lnt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=118000beac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=652 identity=34460 ipv4=10.0.0.238 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-28lnt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=45d9c926d3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1522 identity=5092 ipv4=10.0.0.100 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-frwnm subsys=endpoint level=info msg="Successful endpoint creation" containerID=45d9c926d3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1522 identity=5092 ipv4=10.0.0.100 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-frwnm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=118000beac datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=652 identity=34460 ipv4=10.0.0.238 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-28lnt subsys=endpoint level=info msg="Successful endpoint creation" containerID=118000beac datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=652 identity=34460 ipv4=10.0.0.238 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-28lnt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=118000beac endpointID=652 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-28lnt subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=bf123c31-c329-4df5-833a-482b8b4442d2 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=bf123c31-c329-4df5-833a-482b8b4442d2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=118000beac datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=652 identity=34460 ipv4=10.0.0.238 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-28lnt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 e50542bd-317d-44b6-b161-cfc76628be48 default }" containerID=5209047b2093918fc9e13b61ffdf6f754191518cace91329f9383b9862eb29ba datapathConfiguration="&{false false false false false }" interface=lxce1b278b47fc4 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-b7v6t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5209047b20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3196 ipv4=10.0.0.27 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-b7v6t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5209047b20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3196 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.27 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-b7v6t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5209047b20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3196 identity=2562 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.27 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-b7v6t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5209047b20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3196 identity=2562 ipv4=10.0.0.27 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-b7v6t subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5209047b20 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3196 identity=2562 ipv4=10.0.0.27 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-b7v6t subsys=endpoint level=info msg="Successful endpoint creation" containerID=5209047b20 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3196 identity=2562 ipv4=10.0.0.27 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-b7v6t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1822 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01822 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01822 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01822 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01822:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1822 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 5619a0cc-d39d-4594-b3ed-03ae3207e2ae default }" containerID=7f6969973088327ebc448255f33099550bcc90c17c9308e80149d682b337df7d datapathConfiguration="&{false false false false false }" interface=lxc7e58c9670120 k8sPodName=kube-system/coredns-67659f764b-qb88p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f69699730 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1146 ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-67659f764b-qb88p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f69699730 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1146 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-67659f764b-qb88p subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7f69699730 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1146 identity=5092 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-67659f764b-qb88p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f69699730 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1146 identity=5092 ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-67659f764b-qb88p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 ff2f6893-096f-4ef7-8501-6bfba13e1d9a default }" containerID=28500fd3d7e739202591d2fbe4b2dcb61144af0189b4f62587a0eb1851bc6bc5 datapathConfiguration="&{false false false false false }" interface=lxcb235360d75f8 k8sPodName=kube-system/coredns-67659f764b-gmxg8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=28500fd3d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=214 ipv4=10.0.0.225 ipv6= k8sPodName=kube-system/coredns-67659f764b-gmxg8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=28500fd3d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=214 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.225 ipv6= k8sPodName=kube-system/coredns-67659f764b-gmxg8 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=28500fd3d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=214 identity=5092 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.225 ipv6= k8sPodName=kube-system/coredns-67659f764b-gmxg8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=28500fd3d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=214 identity=5092 ipv4=10.0.0.225 ipv6= k8sPodName=kube-system/coredns-67659f764b-gmxg8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7f69699730 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1146 identity=5092 ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-67659f764b-qb88p subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f69699730 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1146 identity=5092 ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-67659f764b-qb88p subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=28500fd3d7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=214 identity=5092 ipv4=10.0.0.225 ipv6= k8sPodName=kube-system/coredns-67659f764b-gmxg8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=28500fd3d7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=214 identity=5092 ipv4=10.0.0.225 ipv6= k8sPodName=kube-system/coredns-67659f764b-gmxg8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.31 d9d9c3d5-b5d8-49b6-a55c-a28494d4bd03 default }" containerID=cb1f278266dbdf9fd1371625131046a4f848694c9cb5b3837efa8f56fa3a54a2 datapathConfiguration="&{false false false false false }" interface=lxcff52da4598c5 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-l5crw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb1f278266 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1990 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-l5crw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cb1f278266 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1990 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-l5crw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=cb1f278266 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1990 identity=58314 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-l5crw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cb1f278266 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1990 identity=58314 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-l5crw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cb1f278266 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1990 identity=58314 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-l5crw subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb1f278266 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1990 identity=58314 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-l5crw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=45d9c926d3 endpointID=1522 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-frwnm subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=45d9c926d3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1522 identity=5092 ipv4=10.0.0.100 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-frwnm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.30 c23f4d69-9a76-4e28-af01-d96693cde116 default }" containerID=79bfb4673b52ad28aa1ecf08052bbb68375dc57004970a797497c5669914a84c datapathConfiguration="&{false false false false false }" interface=lxc334e3400ddd2 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-f4qf6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79bfb4673b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=162 ipv4=10.0.0.30 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-f4qf6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79bfb4673b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=162 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.30 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-f4qf6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=79bfb4673b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=162 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.30 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-f4qf6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=79bfb4673b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=162 identity=15488 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.30 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-f4qf6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=79bfb4673b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=162 identity=15488 ipv4=10.0.0.30 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-f4qf6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 5d6f9a39-ffd7-4e65-b9ed-3d982321183d default }" containerID=60b6835cd3168cb8f39fed3e3f24f259d477f87994139af956642c05e8d17a45 datapathConfiguration="&{false false false false false }" interface=lxc895fb28e41f0 k8sPodName=cert-manager/cert-manager-75c4c745bc-qfvld labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.95 add5d749-8adf-4cd4-9f21-4ea33671a28e default }" containerID=319ec6bbf86dccd83a4e6db951d768ded4457d28f3f05e766eb0fbd3e94da588 datapathConfiguration="&{false false false false false }" interface=lxcbb401da11738 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-w4c7d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60b6835cd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=40 ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-qfvld subsys=endpoint level=info msg="New endpoint" containerID=319ec6bbf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2364 ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-w4c7d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60b6835cd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=40 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-qfvld subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=319ec6bbf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2364 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-w4c7d subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60b6835cd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=40 identity=2187 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-qfvld oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60b6835cd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=40 identity=2187 ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-qfvld subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=319ec6bbf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2364 identity=35060 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-w4c7d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=319ec6bbf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2364 identity=35060 ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-w4c7d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=79bfb4673b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=162 identity=15488 ipv4=10.0.0.30 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-f4qf6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=79bfb4673b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=162 identity=15488 ipv4=10.0.0.30 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-f4qf6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=319ec6bbf8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2364 identity=35060 ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-w4c7d subsys=endpoint level=info msg="Successful endpoint creation" containerID=319ec6bbf8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2364 identity=35060 ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-w4c7d subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=60b6835cd3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=40 identity=2187 ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-qfvld subsys=endpoint level=info msg="Successful endpoint creation" containerID=60b6835cd3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=40 identity=2187 ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-qfvld subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.222 de509807-fccf-41df-9446-56295d4f2d16 default }" containerID=af023f96ad80b1dcd65a1285af042988d98b740dc24dc86657d02319d2a5fdbd datapathConfiguration="&{false false false false false }" interface=lxc69841db09626 k8sPodName=cert-manager/cert-manager-startupapicheck-svrfg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af023f96ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=871 ipv4=10.0.0.222 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-svrfg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af023f96ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=871 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=383f1e19-4985-46b0-be86-9ae83369ab7e,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=383f1e19-4985-46b0-be86-9ae83369ab7e,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.222 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-svrfg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=383f1e19-4985-46b0-be86-9ae83369ab7e;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=383f1e19-4985-46b0-be86-9ae83369ab7e;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af023f96ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=871 identity=26870 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=383f1e19-4985-46b0-be86-9ae83369ab7e,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=383f1e19-4985-46b0-be86-9ae83369ab7e,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.222 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-svrfg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af023f96ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=871 identity=26870 ipv4=10.0.0.222 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-svrfg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=af023f96ad datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=871 identity=26870 ipv4=10.0.0.222 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-svrfg subsys=endpoint level=info msg="Successful endpoint creation" containerID=af023f96ad datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=871 identity=26870 ipv4=10.0.0.222 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-svrfg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=af023f96ad endpointID=871 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-svrfg subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=383f1e19-4985-46b0-be86-9ae83369ab7e k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=383f1e19-4985-46b0-be86-9ae83369ab7e k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=af023f96ad datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=871 identity=26870 ipv4=10.0.0.222 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-svrfg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 ea12e570-0d61-442a-804f-e625922933b8 default }" containerID=c58618e1137c60ff1255c86419bb960eaf986fdb4650a797fba0e733f8d450e3 datapathConfiguration="&{false false false false false }" interface=lxce026c80ef4aa k8sPodName=ingress-nginx/ingress-nginx-admission-create-zwj56 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c58618e113 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3868 ipv4=10.0.0.208 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zwj56 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c58618e113 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3868 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c197d42a-790d-4e1f-939d-1ab50cda8941,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=c197d42a-790d-4e1f-939d-1ab50cda8941,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.208 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zwj56 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c58618e113 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3868 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.208 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zwj56 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=c197d42a-790d-4e1f-939d-1ab50cda8941;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=c197d42a-790d-4e1f-939d-1ab50cda8941;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c58618e113 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3868 identity=61563 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c197d42a-790d-4e1f-939d-1ab50cda8941,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=c197d42a-790d-4e1f-939d-1ab50cda8941,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.208 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zwj56 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c58618e113 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3868 identity=61563 ipv4=10.0.0.208 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zwj56 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c58618e113 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3868 identity=61563 ipv4=10.0.0.208 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zwj56 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c58618e113 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3868 identity=61563 ipv4=10.0.0.208 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zwj56 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c58618e113 endpointID=3868 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-zwj56 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=c197d42a-790d-4e1f-939d-1ab50cda8941 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=c197d42a-790d-4e1f-939d-1ab50cda8941 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=c58618e113 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3868 identity=61563 ipv4=10.0.0.208 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zwj56 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 c40fc0c4-c4ea-43d0-b094-b5f369607b42 default }" containerID=418e2e0e5a36410fad1bd7cc9f5f064ab67d1e585b07e7bfd284816646773c2f datapathConfiguration="&{false false false false false }" interface=lxc7aebeaf24ec4 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-rsztg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=418e2e0e5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=949 ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-rsztg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=418e2e0e5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=949 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-rsztg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=418e2e0e5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=949 identity=15640 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-rsztg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=418e2e0e5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=949 identity=15640 ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-rsztg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=418e2e0e5a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=949 identity=15640 ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-rsztg subsys=endpoint level=info msg="Successful endpoint creation" containerID=418e2e0e5a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=949 identity=15640 ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-rsztg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.23 d4e0e794-0db6-4d73-9664-dbd6275b2547 default }" containerID=f322564674e6de489ab3f65f30a87aac4822686017bf876a416255f34fcf7477 datapathConfiguration="&{false false false false false }" interface=lxcafa577ed43dd k8sPodName=ingress-nginx/ingress-nginx-admission-patch-btvld labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f322564674 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 ipv4=10.0.0.23 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-btvld subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f322564674 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=cf671a3a-0b1c-4a11-8c9c-16c0a3d8d44b,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=cf671a3a-0b1c-4a11-8c9c-16c0a3d8d44b,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.23 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-btvld subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=cf671a3a-0b1c-4a11-8c9c-16c0a3d8d44b;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=cf671a3a-0b1c-4a11-8c9c-16c0a3d8d44b;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f322564674 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identity=5900 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=cf671a3a-0b1c-4a11-8c9c-16c0a3d8d44b,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=cf671a3a-0b1c-4a11-8c9c-16c0a3d8d44b,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.23 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-btvld oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f322564674 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identity=5900 ipv4=10.0.0.23 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-btvld subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f322564674 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=563 identity=5900 ipv4=10.0.0.23 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-btvld subsys=endpoint level=info msg="Successful endpoint creation" containerID=f322564674 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=563 identity=5900 ipv4=10.0.0.23 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-btvld subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f322564674 endpointID=563 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-btvld subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=cf671a3a-0b1c-4a11-8c9c-16c0a3d8d44b k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=cf671a3a-0b1c-4a11-8c9c-16c0a3d8d44b k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=f322564674 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=563 identity=5900 ipv4=10.0.0.23 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-btvld subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=eb90d747-780b-4a8d-b77b-708b0395763f] Description:}]" policyAddRequest=d3afe46d-7e1b-4c08-9d9d-942a965b5206 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=d3afe46d-7e1b-4c08-9d9d-942a965b5206 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=ca008801-7393-4a99-8649-e01d01a9a2fa] Description:}]" policyAddRequest=3ec03bd0-f4e2-4258-928a-da3d0ec6bacc subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=3ec03bd0-f4e2-4258-928a-da3d0ec6bacc policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.70 ab61d06d-acd3-4226-b799-99860ad5343a default }" containerID=887a792a1955ad95290f154d4d2d24cda94dd9d645425e2d7aa2e5deaf72aa82 datapathConfiguration="&{false false false false false }" interface=lxcbf2aef59c522 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-2ppg4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=887a792a19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3955 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-2ppg4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=887a792a19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3955 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-2ppg4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=887a792a19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3955 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-2ppg4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=887a792a19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3955 identity=28933 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-2ppg4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=887a792a19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3955 identity=28933 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-2ppg4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=887a792a19 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3955 identity=28933 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-2ppg4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=887a792a19 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3955 identity=28933 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-2ppg4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.201 08f8f3ff-f506-46e2-8ade-f56e06afacc7 default }" containerID=f23c04e9db3f852ff805b3e74d0058e7e253baf8072180f742ecdc15f1251412 datapathConfiguration="&{false false false false false }" interface=lxc00296c7565a6 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-s7td2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f23c04e9db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=541 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-s7td2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f23c04e9db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=541 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-s7td2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f23c04e9db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=541 identity=16569 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-s7td2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f23c04e9db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=541 identity=16569 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-s7td2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f23c04e9db datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=541 identity=16569 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-s7td2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f23c04e9db datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=541 identity=16569 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-s7td2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.67 26c932e9-492b-4c4a-b631-e0796ecf7da6 default }" containerID=7067840c7fea23540b8bb6ecafcdbe01985daa6f0a4ab44ddc924c9672d0af64 datapathConfiguration="&{false false false false false }" interface=lxca540fe2405d5 k8sPodName=openstack/pxc-operator-69cb5bbdb9-xhvdb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7067840c7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3732 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-xhvdb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7067840c7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3732 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-xhvdb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7067840c7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3732 identity=17001 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-xhvdb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7067840c7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3732 identity=17001 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-xhvdb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7067840c7f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3732 identity=17001 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-xhvdb subsys=endpoint level=info msg="Successful endpoint creation" containerID=7067840c7f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3732 identity=17001 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-xhvdb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.130 b7efea38-5d44-444c-83ad-7313db1e6fde default }" containerID=0beeee88c0bda8ddd645661b43f589e4ef12eb89cba9c2a4c266b39b7439df52 datapathConfiguration="&{false false false false false }" interface=lxc4a3ffb7b86a3 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0beeee88c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0beeee88c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0beeee88c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.130 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0beeee88c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 identity=2431 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0beeee88c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 identity=2431 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0beeee88c0 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1553 identity=2431 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0beeee88c0 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1553 identity=2431 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.20 bd37efa1-601c-439b-a5fe-2821db8463d1 default }" containerID=ed8465f26fb4a324eebd5e911b80a5fc1327e422587d7220331b58e0534cc100 datapathConfiguration="&{false false false false false }" interface=lxc10a512600ba2 k8sPodName=local-path-storage/helper-pod-create-pvc-3c6debe4-44c8-423e-969b-55b8698f0af6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed8465f26f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1823 ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3c6debe4-44c8-423e-969b-55b8698f0af6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed8465f26f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1823 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3c6debe4-44c8-423e-969b-55b8698f0af6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed8465f26f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1823 identity=3643 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3c6debe4-44c8-423e-969b-55b8698f0af6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed8465f26f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1823 identity=3643 ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3c6debe4-44c8-423e-969b-55b8698f0af6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ed8465f26f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1823 identity=3643 ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3c6debe4-44c8-423e-969b-55b8698f0af6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed8465f26f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1823 identity=3643 ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3c6debe4-44c8-423e-969b-55b8698f0af6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ed8465f26f endpointID=1823 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3c6debe4-44c8-423e-969b-55b8698f0af6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ed8465f26f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1823 identity=3643 ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3c6debe4-44c8-423e-969b-55b8698f0af6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 6b84a62c-1294-4548-9d32-c23cd7d90c74 default }" containerID=7350779f05ec038a29c413ab06f1e9b451ead75dc5b205a05d31076aefb380ea datapathConfiguration="&{false false false false false }" interface=lxcbc2aceafc38a k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7350779f05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1422 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7350779f05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1422 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7350779f05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1422 identity=1831 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7350779f05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1422 identity=1831 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7350779f05 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1422 identity=1831 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7350779f05 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1422 identity=1831 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=0c390594-df01-4baf-b878-ebb5279ae10b] Description:}]" policyAddRequest=0a5997e6-2b2c-40fd-9a3b-60ff1f5188e3 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=0a5997e6-2b2c-40fd-9a3b-60ff1f5188e3 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.202 23cd3b8c-8d02-44a6-bbba-ae8cf3cf477c default }" containerID=6c06911951ac3783b9537ebf1720eb6f1aa64618f80924b8e3f5ff39cc9d9f1b datapathConfiguration="&{false false false false false }" interface=lxcbac55639d736 k8sPodName=local-path-storage/helper-pod-create-pvc-b93326ef-ab67-46b8-b641-1326bbef450f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c06911951 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2072 ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b93326ef-ab67-46b8-b641-1326bbef450f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c06911951 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2072 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b93326ef-ab67-46b8-b641-1326bbef450f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6c06911951 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2072 identity=3643 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b93326ef-ab67-46b8-b641-1326bbef450f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6c06911951 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2072 identity=3643 ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b93326ef-ab67-46b8-b641-1326bbef450f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6c06911951 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2072 identity=3643 ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b93326ef-ab67-46b8-b641-1326bbef450f subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c06911951 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2072 identity=3643 ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b93326ef-ab67-46b8-b641-1326bbef450f subsys=daemon level=info msg="Delete endpoint request" containerID=6c06911951 endpointID=2072 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b93326ef-ab67-46b8-b641-1326bbef450f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6c06911951 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2072 identity=3643 ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b93326ef-ab67-46b8-b641-1326bbef450f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 4d02e809-0935-4e5b-9709-745a04c4c0a4 default }" containerID=8a5dcd72e669d8ad5eac391dbd73fc4316898a048d2a4409149606fb190c486a datapathConfiguration="&{false false false false false }" interface=lxcdb143d34a78e k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a5dcd72e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2768 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a5dcd72e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2768 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8a5dcd72e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2768 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.203 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8a5dcd72e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2768 identity=29249 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a5dcd72e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2768 identity=29249 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8a5dcd72e6 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2768 identity=29249 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a5dcd72e6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2768 identity=29249 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=7edb5753-1727-4cdc-8cb1-52c12c44604b] Description:}]" policyAddRequest=0be87e56-c0c1-4c32-bb59-e8798a75ceec subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=0be87e56-c0c1-4c32-bb59-e8798a75ceec policyRevision=5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.145 ef0649dc-806d-4839-9d68-af2123c339ba default }" containerID=3065a5a0b5f3b733df89ed42c142cc1cda08ccf9134c89501d62bec87448e8e8 datapathConfiguration="&{false false false false false }" interface=lxc09ac18f95881 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3065a5a0b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1592 ipv4=10.0.0.145 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3065a5a0b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1592 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.145 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3065a5a0b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1592 identity=16883 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.145 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3065a5a0b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1592 identity=16883 ipv4=10.0.0.145 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3065a5a0b5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1592 identity=16883 ipv4=10.0.0.145 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3065a5a0b5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1592 identity=16883 ipv4=10.0.0.145 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.010084272322696715 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.197 eb8178e1-eb01-4bc9-bead-0cc2d266ca0d default }" containerID=5b349b247e8b236b60e784153d356672b3b8c14bc57a8c169595910986bc1b3b datapathConfiguration="&{false false false false false }" interface=lxc38076fc79b45 k8sPodName=monitoring/node-feature-discovery-worker-grdp7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5b349b247e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1727 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-grdp7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 2c73d489-069e-416c-9b8a-906fce0b5ea4 default }" containerID=5010aedb201234414f50eab787c7a3a901e8e527f248c07e5f08cf22cb9b3db8 datapathConfiguration="&{false false false false false }" interface=lxc7884cf5b1bc9 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zrpm7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5010aedb20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2173 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zrpm7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5b349b247e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1727 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-grdp7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=5010aedb20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2173 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zrpm7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 4c967d86-ecdb-4b26-9aff-49a12aab0698 default }" containerID=7bc810792a5aeac3b7dc64ce907815d6786ac489a30b17ed7567f15b69e5c323 datapathConfiguration="&{false false false false false }" interface=lxc309135b5e0fc k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4gwq5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7bc810792a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2301 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4gwq5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7bc810792a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2301 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4gwq5 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5b349b247e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1727 identity=32446 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-grdp7 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7bc810792a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2301 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4gwq5 line=611 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5b349b247e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1727 identity=32446 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-grdp7 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=5010aedb20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2173 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zrpm7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=5010aedb20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2173 identity=8896 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zrpm7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5010aedb20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2173 identity=8896 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zrpm7 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7bc810792a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2301 identity=9482 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4gwq5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7bc810792a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2301 identity=9482 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4gwq5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5010aedb20 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2173 identity=8896 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zrpm7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5010aedb20 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2173 identity=8896 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zrpm7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5b349b247e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1727 identity=32446 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-grdp7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5b349b247e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1727 identity=32446 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-grdp7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7bc810792a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2301 identity=9482 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4gwq5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7bc810792a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2301 identity=9482 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4gwq5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.226 21ada172-787f-48fd-ac9e-8392a956885b default }" containerID=84dbaeb59b3948dd39654e1663f51857ac351f7ebe4a30733e987ce1ee4e3435 datapathConfiguration="&{false false false false false }" interface=lxc077e46d9ba34 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-x4s4w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=84dbaeb59b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2221 ipv4=10.0.0.226 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-x4s4w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=84dbaeb59b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2221 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.226 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-x4s4w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=84dbaeb59b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2221 identity=18782 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.226 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-x4s4w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=84dbaeb59b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2221 identity=18782 ipv4=10.0.0.226 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-x4s4w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=84dbaeb59b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2221 identity=18782 ipv4=10.0.0.226 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-x4s4w subsys=endpoint level=info msg="Successful endpoint creation" containerID=84dbaeb59b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2221 identity=18782 ipv4=10.0.0.226 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-x4s4w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1822 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01822 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01822 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01822 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01822:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1822 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.215 09203513-941b-457b-9668-60def172209a default }" containerID=fb8e5860c1178b9bd1e92bb8f7ece0694288e42a7dc3368da5d4a90bd372da5b datapathConfiguration="&{false false false false false }" interface=lxc6f112dcc3049 k8sPodName=monitoring/kube-prometheus-stack-admission-create-lx552 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb8e5860c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1051 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lx552 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb8e5860c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1051 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=a7dc3e50-9e16-4174-aa76-9406d24e5f5b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=a7dc3e50-9e16-4174-aa76-9406d24e5f5b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lx552 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=a7dc3e50-9e16-4174-aa76-9406d24e5f5b;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=a7dc3e50-9e16-4174-aa76-9406d24e5f5b;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb8e5860c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1051 identity=26152 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=a7dc3e50-9e16-4174-aa76-9406d24e5f5b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=a7dc3e50-9e16-4174-aa76-9406d24e5f5b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lx552 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fb8e5860c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1051 identity=26152 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lx552 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fb8e5860c1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1051 identity=26152 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lx552 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb8e5860c1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1051 identity=26152 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lx552 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fb8e5860c1 endpointID=1051 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-lx552 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=a7dc3e50-9e16-4174-aa76-9406d24e5f5b k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=a7dc3e50-9e16-4174-aa76-9406d24e5f5b k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=fb8e5860c1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1051 identity=26152 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lx552 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 31bc8380-9475-471c-a8cf-ceadd97552d8 default }" containerID=3c9987aa77a02221e987cbc648f3db3cc4bd1e0cf7c488ab46ace50e5704e96a datapathConfiguration="&{false false false false false }" interface=lxce689d1871cec k8sPodName=monitoring/kube-prometheus-stack-grafana-65f8ff87b7-7w869 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c9987aa77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-65f8ff87b7-7w869 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c9987aa77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-65f8ff87b7-7w869 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.111 a335d7eb-e9be-4051-9fbe-927f8181250d default }" containerID=c69bc20a379a88d19c3917dea1ef939273745893ec15338e1ae64e263c1f603e datapathConfiguration="&{false false false false false }" interface=lxca6558f109693 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dxc95 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c69bc20a37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3668 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dxc95 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c69bc20a37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3668 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dxc95 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c69bc20a37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3668 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dxc95 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=3c9987aa77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-65f8ff87b7-7w869 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c9987aa77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 identity=46363 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-65f8ff87b7-7w869 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c9987aa77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 identity=46363 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-65f8ff87b7-7w869 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c69bc20a37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3668 identity=37600 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dxc95 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c69bc20a37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3668 identity=37600 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dxc95 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.224 5ad3e590-d1e3-46ca-9b81-3ba5fd415bfb default }" containerID=adbd103df6e37fd466fe204b6809991e77597b0fc09d837b213408beb4fcd1d2 datapathConfiguration="&{false false false false false }" interface=lxcadb5ba30e118 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4xqxx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=adbd103df6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2202 ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4xqxx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=adbd103df6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2202 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4xqxx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=adbd103df6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2202 identity=27947 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4xqxx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=adbd103df6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2202 identity=27947 ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4xqxx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c69bc20a37 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3668 identity=37600 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dxc95 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c69bc20a37 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3668 identity=37600 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dxc95 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3c9987aa77 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=229 identity=46363 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-65f8ff87b7-7w869 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c9987aa77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=229 identity=46363 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-65f8ff87b7-7w869 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=adbd103df6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2202 identity=27947 ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4xqxx subsys=endpoint level=info msg="Successful endpoint creation" containerID=adbd103df6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2202 identity=27947 ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4xqxx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.92 cc5a18ad-cb08-4bb9-858f-bb67b1f787db default }" containerID=a99d8f5276525dac9e4e8a0909ae8e3fc60aa777fd78954346de6f363b21b9f3 datapathConfiguration="&{false false false false false }" interface=lxc434e15efe647 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-kjq74 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a99d8f5276 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2551 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-kjq74 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a99d8f5276 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2551 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=43fd43de-d57d-405a-b501-d48f22d3ec4e,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=43fd43de-d57d-405a-b501-d48f22d3ec4e,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-kjq74 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=43fd43de-d57d-405a-b501-d48f22d3ec4e;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=43fd43de-d57d-405a-b501-d48f22d3ec4e;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a99d8f5276 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2551 identity=14108 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=43fd43de-d57d-405a-b501-d48f22d3ec4e,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=43fd43de-d57d-405a-b501-d48f22d3ec4e,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-kjq74 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a99d8f5276 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2551 identity=14108 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-kjq74 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a99d8f5276 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2551 identity=14108 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-kjq74 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a99d8f5276 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2551 identity=14108 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-kjq74 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.48 b1283cfe-4476-4f50-b56e-95694d4d75fe default }" containerID=f7b06ae634e030c9f1ba2592d83fcaf82e32c7e094062da188714094570d8b76 datapathConfiguration="&{false false false false false }" interface=lxc634c87c556fb k8sPodName=local-path-storage/helper-pod-create-pvc-a2797ede-818d-4bb4-8d74-d1889b24e309 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7b06ae634 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3123 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2797ede-818d-4bb4-8d74-d1889b24e309 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7b06ae634 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3123 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2797ede-818d-4bb4-8d74-d1889b24e309 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f7b06ae634 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3123 identity=3643 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2797ede-818d-4bb4-8d74-d1889b24e309 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7b06ae634 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3123 identity=3643 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2797ede-818d-4bb4-8d74-d1889b24e309 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f7b06ae634 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3123 identity=3643 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2797ede-818d-4bb4-8d74-d1889b24e309 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7b06ae634 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3123 identity=3643 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2797ede-818d-4bb4-8d74-d1889b24e309 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.72 222ac17b-97d6-4574-8e38-dca5f488a524 default }" containerID=f39d3314cb8b8bac438395f31f68007c94db35d0f1831a922fb987651a03d7fe datapathConfiguration="&{false false false false false }" interface=lxcc2780f469626 k8sPodName=local-path-storage/helper-pod-create-pvc-9b651872-ab8c-45ed-b9fb-7e2f4ed7a2b2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f39d3314cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2340 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9b651872-ab8c-45ed-b9fb-7e2f4ed7a2b2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f39d3314cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2340 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9b651872-ab8c-45ed-b9fb-7e2f4ed7a2b2 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f39d3314cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2340 identity=3643 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9b651872-ab8c-45ed-b9fb-7e2f4ed7a2b2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f39d3314cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2340 identity=3643 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9b651872-ab8c-45ed-b9fb-7e2f4ed7a2b2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f39d3314cb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2340 identity=3643 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9b651872-ab8c-45ed-b9fb-7e2f4ed7a2b2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f39d3314cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2340 identity=3643 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9b651872-ab8c-45ed-b9fb-7e2f4ed7a2b2 subsys=daemon level=info msg="Delete endpoint request" containerID=a99d8f5276 endpointID=2551 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-kjq74 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=43fd43de-d57d-405a-b501-d48f22d3ec4e k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=43fd43de-d57d-405a-b501-d48f22d3ec4e k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=a99d8f5276 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2551 identity=14108 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-kjq74 subsys=endpoint level=info msg="Delete endpoint request" containerID=f39d3314cb endpointID=2340 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-9b651872-ab8c-45ed-b9fb-7e2f4ed7a2b2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=f7b06ae634 endpointID=3123 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a2797ede-818d-4bb4-8d74-d1889b24e309 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f39d3314cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2340 identity=3643 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9b651872-ab8c-45ed-b9fb-7e2f4ed7a2b2 subsys=endpoint level=info msg="Removed endpoint" containerID=f7b06ae634 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3123 identity=3643 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2797ede-818d-4bb4-8d74-d1889b24e309 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.177 2f95c0ca-ba60-4f9a-baee-bad9aeb9149b default }" containerID=baf59c14dcf9082ddf345e0dcc287c464f0f412cea01d94353afb93a568d3fa2 datapathConfiguration="&{false false false false false }" interface=lxc2b4fcc33bcc3 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=baf59c14dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1362 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=baf59c14dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1362 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=baf59c14dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1362 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=baf59c14dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1362 identity=29284 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=baf59c14dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1362 identity=29284 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=baf59c14dc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1362 identity=29284 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=baf59c14dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1362 identity=29284 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.141 36d115e5-a88e-4c4b-9442-ea5bdf6fbdcb default }" containerID=99c47afbc739e7e0dac7e7780fa4e23523ca00ec34d4443e279df482fffcb9e4 datapathConfiguration="&{false false false false false }" interface=lxcb6b35319c873 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=99c47afbc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1724 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=99c47afbc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1724 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=99c47afbc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1724 identity=45510 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=99c47afbc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1724 identity=45510 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=99c47afbc7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1724 identity=45510 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=99c47afbc7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1724 identity=45510 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.69 df6c8b16-1180-4375-9fa8-29c6ab65ddf8 default }" containerID=4db0aa71dd6c3262f8e5aac038df1a340eaf8529c4891ce5887e1baa0563285b datapathConfiguration="&{false false false false false }" interface=lxc62bcc585224b k8sPodName=monitoring/loki-gateway-cf54cb88c-znfgp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4db0aa71dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-znfgp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4db0aa71dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-znfgp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4db0aa71dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 identity=1424 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-znfgp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4db0aa71dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 identity=1424 ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-znfgp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4db0aa71dd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=89 identity=1424 ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-znfgp subsys=endpoint level=info msg="Successful endpoint creation" containerID=4db0aa71dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=89 identity=1424 ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-znfgp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.137 db1cc2c1-0836-465d-9bf3-546a798258cd default }" containerID=83f7b128d037a970fb336e6cb94045581cf8afed21bd61f6a2001124c5968856 datapathConfiguration="&{false false false false false }" interface=lxcdf79d17ac1ad k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=83f7b128d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=160 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=83f7b128d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=160 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.37 acb2466b-524a-40ad-861d-baaf6ff23367 default }" containerID=39ca8e70a003740b02f5bcd26af8c564c138bdcc2835f68ebc381b488a424810 datapathConfiguration="&{false false false false false }" interface=lxc1aa6e8a6824f k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39ca8e70a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1723 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39ca8e70a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1723 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=83f7b128d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=160 identity=39467 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=83f7b128d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=160 identity=39467 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=39ca8e70a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1723 identity=28286 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=39ca8e70a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1723 identity=28286 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=83f7b128d0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=160 identity=39467 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=83f7b128d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=160 identity=39467 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=39ca8e70a0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1723 identity=28286 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=39ca8e70a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1723 identity=28286 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.184 0998e77f-340d-4618-8032-95a17f8c92bd default }" containerID=62f68490e953c521528dc88522e7314b2ff5307c4d336d625001e2cc3fc3534d datapathConfiguration="&{false false false false false }" interface=lxc08c0341c6f63 k8sPodName=local-path-storage/helper-pod-create-pvc-09a15004-44b0-4647-8d4e-cb8dcb4b595e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62f68490e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1924 ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09a15004-44b0-4647-8d4e-cb8dcb4b595e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62f68490e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1924 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09a15004-44b0-4647-8d4e-cb8dcb4b595e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=62f68490e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1924 identity=3643 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09a15004-44b0-4647-8d4e-cb8dcb4b595e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=62f68490e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1924 identity=3643 ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09a15004-44b0-4647-8d4e-cb8dcb4b595e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=62f68490e9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1924 identity=3643 ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09a15004-44b0-4647-8d4e-cb8dcb4b595e subsys=endpoint level=info msg="Successful endpoint creation" containerID=62f68490e9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1924 identity=3643 ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09a15004-44b0-4647-8d4e-cb8dcb4b595e subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.191 619db93a-646a-4f28-8508-2e6c5eb9d52e default }" containerID=aac20cd1a2f35a204b39d66e22fe3d98ffc9d0f27c00e7f8ba6f9e4f0d459734 datapathConfiguration="&{false false false false false }" interface=lxc9b92541be125 k8sPodName=monitoring/vector-58z6l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aac20cd1a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=425 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/vector-58z6l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aac20cd1a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=425 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/vector-58z6l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aac20cd1a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=425 identity=61896 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/vector-58z6l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aac20cd1a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=425 identity=61896 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/vector-58z6l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aac20cd1a2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=425 identity=61896 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/vector-58z6l subsys=endpoint level=info msg="Successful endpoint creation" containerID=aac20cd1a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=425 identity=61896 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/vector-58z6l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=62f68490e9 endpointID=1924 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-09a15004-44b0-4647-8d4e-cb8dcb4b595e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=62f68490e9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1924 identity=3643 ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09a15004-44b0-4647-8d4e-cb8dcb4b595e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 99872f86-1f44-49f6-9b54-a8c81e99e949 default }" containerID=25f65724784a9852fcd05bbb79d2318ac8a80be244969ab86ca532041704777b datapathConfiguration="&{false false false false false }" interface=lxc54b49f26266f k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wsv2n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=25f6572478 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1672 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wsv2n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=25f6572478 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1672 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wsv2n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=25f6572478 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1672 identity=51958 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wsv2n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=25f6572478 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1672 identity=51958 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wsv2n subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=25f6572478 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1672 identity=51958 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wsv2n subsys=endpoint level=info msg="Successful endpoint creation" containerID=25f6572478 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1672 identity=51958 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wsv2n subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.173 4627a5da-4bcc-46a4-85f8-b9b441cb3ea1 default }" containerID=5159b81baf6c0e93b6a13c4c5776e6e35817fa8155e4e3f4bea880e28d47e3d7 datapathConfiguration="&{false false false false false }" interface=lxcca84a311cc39 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5159b81baf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2890 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5159b81baf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2890 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5159b81baf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2890 identity=20902 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5159b81baf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2890 identity=20902 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5159b81baf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2890 identity=20902 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5159b81baf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2890 identity=20902 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.48 e4034a97-ce76-47e7-b23c-c2db0ed8e57b default }" containerID=582140f5dfb26140bc8e3bddd4abf9c25cccc0a71d6dfcfdb80227ef01367324 datapathConfiguration="&{false false false false false }" interface=lxc69b0f8245edc k8sPodName=openstack/memcached-memcached-6479589586-d7rml labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=582140f5df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-d7rml subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=582140f5df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-d7rml subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=582140f5df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identity=39291 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-d7rml oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=582140f5df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identity=39291 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-d7rml subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=582140f5df datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=274 identity=39291 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-d7rml subsys=endpoint level=info msg="Successful endpoint creation" containerID=582140f5df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=274 identity=39291 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-d7rml subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.207 9b5cf074-edde-42c2-9f7c-db5493f4c2db default }" containerID=240454608cbbe9d11b7028fb6e126c6d7bfb2e04f3a546783e364827761873fa datapathConfiguration="&{false false false false false }" interface=lxc51d36372f74d k8sPodName=local-path-storage/helper-pod-create-pvc-06a38170-2bb8-4611-8ff9-d38bfe85a64e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=240454608c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3736 ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-06a38170-2bb8-4611-8ff9-d38bfe85a64e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=240454608c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3736 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-06a38170-2bb8-4611-8ff9-d38bfe85a64e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=240454608c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3736 identity=3643 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-06a38170-2bb8-4611-8ff9-d38bfe85a64e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=240454608c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3736 identity=3643 ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-06a38170-2bb8-4611-8ff9-d38bfe85a64e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=240454608c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3736 identity=3643 ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-06a38170-2bb8-4611-8ff9-d38bfe85a64e subsys=endpoint level=info msg="Successful endpoint creation" containerID=240454608c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3736 identity=3643 ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-06a38170-2bb8-4611-8ff9-d38bfe85a64e subsys=daemon level=info msg="Delete endpoint request" containerID=240454608c endpointID=3736 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-06a38170-2bb8-4611-8ff9-d38bfe85a64e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=240454608c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3736 identity=3643 ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-06a38170-2bb8-4611-8ff9-d38bfe85a64e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 cf95c303-b755-4952-ad36-df2dd18423e0 default }" containerID=16b089d0e48858780539ed5f4681c029c2b574a7505d4d88b9618f6cd6eeef06 datapathConfiguration="&{false false false false false }" interface=lxc0fed890d0ebb k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=16b089d0e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2225 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=16b089d0e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2225 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=16b089d0e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2225 identity=28494 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=16b089d0e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2225 identity=28494 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=16b089d0e4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2225 identity=28494 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=16b089d0e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2225 identity=28494 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.118 83c5b397-d5ef-407a-808b-dcd17e608267 default }" containerID=2fb4c781999926761d93169b2ba55343e533efb101cef1d979bd1b31ff63a4dd datapathConfiguration="&{false false false false false }" interface=lxc989d11251d22 k8sPodName=openstack/keystone-api-7bd9ddb755-qhc2j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2fb4c78199 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-api-7bd9ddb755-qhc2j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2fb4c78199 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-api-7bd9ddb755-qhc2j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2fb4c78199 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-api-7bd9ddb755-qhc2j line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2fb4c78199 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 identity=26057 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-api-7bd9ddb755-qhc2j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2fb4c78199 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 identity=26057 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-api-7bd9ddb755-qhc2j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 ff9a6068-68c3-4849-93e1-eb788071914a default }" containerID=0b6b2a797686edbd26ab242caaf4ca821180807ca37b287a595396b00c708d89 datapathConfiguration="&{false false false false false }" interface=lxc5df2d7ae9bce k8sPodName=openstack/keystone-credential-setup-bhl7q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b6b2a7976 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2375 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/keystone-credential-setup-bhl7q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b6b2a7976 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2375 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=024a69cb-5374-4e24-8aae-2e52abe505ca,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=024a69cb-5374-4e24-8aae-2e52abe505ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/keystone-credential-setup-bhl7q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=024a69cb-5374-4e24-8aae-2e52abe505ca;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=024a69cb-5374-4e24-8aae-2e52abe505ca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b6b2a7976 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2375 identity=32089 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=024a69cb-5374-4e24-8aae-2e52abe505ca,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=024a69cb-5374-4e24-8aae-2e52abe505ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/keystone-credential-setup-bhl7q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b6b2a7976 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2375 identity=32089 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/keystone-credential-setup-bhl7q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2fb4c78199 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1204 identity=26057 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-api-7bd9ddb755-qhc2j subsys=endpoint level=info msg="Successful endpoint creation" containerID=2fb4c78199 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1204 identity=26057 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-api-7bd9ddb755-qhc2j subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0b6b2a7976 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2375 identity=32089 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/keystone-credential-setup-bhl7q subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b6b2a7976 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2375 identity=32089 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/keystone-credential-setup-bhl7q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0b6b2a7976 endpointID=2375 k8sNamespace=openstack k8sPodName=keystone-credential-setup-bhl7q subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=024a69cb-5374-4e24-8aae-2e52abe505ca k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=024a69cb-5374-4e24-8aae-2e52abe505ca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0b6b2a7976 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2375 identity=32089 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/keystone-credential-setup-bhl7q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 85500c13-6694-463e-a916-74ad0cb05690 default }" containerID=0bef8aa2745f8c464192335d1fed24db7ee7f2b9b873d65576516422665b6a7e datapathConfiguration="&{false false false false false }" interface=lxc50e81ddceda7 k8sPodName=openstack/keystone-db-init-pk5dc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0bef8aa274 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1755 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-db-init-pk5dc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0bef8aa274 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1755 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=48359ea3-a229-4a63-8d26-50594bd442a2,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=48359ea3-a229-4a63-8d26-50594bd442a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-db-init-pk5dc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=48359ea3-a229-4a63-8d26-50594bd442a2;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=48359ea3-a229-4a63-8d26-50594bd442a2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0bef8aa274 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1755 identity=15459 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=48359ea3-a229-4a63-8d26-50594bd442a2,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=48359ea3-a229-4a63-8d26-50594bd442a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-db-init-pk5dc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0bef8aa274 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1755 identity=15459 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-db-init-pk5dc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0bef8aa274 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1755 identity=15459 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-db-init-pk5dc subsys=endpoint level=info msg="Successful endpoint creation" containerID=0bef8aa274 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1755 identity=15459 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-db-init-pk5dc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0bef8aa274 endpointID=1755 k8sNamespace=openstack k8sPodName=keystone-db-init-pk5dc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=48359ea3-a229-4a63-8d26-50594bd442a2 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=48359ea3-a229-4a63-8d26-50594bd442a2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0bef8aa274 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1755 identity=15459 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-db-init-pk5dc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 8cb8d934-b902-4cb1-a28f-788f863a719f default }" containerID=659fda573a9b72bb0d0dd6f0224fa145d8b4a30e4a5302adef0642fce51a7500 datapathConfiguration="&{false false false false false }" interface=lxcf640ed856d52 k8sPodName=openstack/keystone-fernet-setup-fcl8m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=659fda573a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2984 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-fernet-setup-fcl8m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=659fda573a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2984 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=da9e5597-5231-4431-bcbf-beaab639f116,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=da9e5597-5231-4431-bcbf-beaab639f116,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-fernet-setup-fcl8m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=da9e5597-5231-4431-bcbf-beaab639f116;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=da9e5597-5231-4431-bcbf-beaab639f116;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=659fda573a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2984 identity=10451 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=da9e5597-5231-4431-bcbf-beaab639f116,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=da9e5597-5231-4431-bcbf-beaab639f116,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-fernet-setup-fcl8m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=659fda573a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2984 identity=10451 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-fernet-setup-fcl8m subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=659fda573a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2984 identity=10451 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-fernet-setup-fcl8m subsys=endpoint level=info msg="Successful endpoint creation" containerID=659fda573a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2984 identity=10451 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-fernet-setup-fcl8m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=659fda573a endpointID=2984 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-fcl8m subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=da9e5597-5231-4431-bcbf-beaab639f116 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=da9e5597-5231-4431-bcbf-beaab639f116 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=659fda573a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2984 identity=10451 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-fernet-setup-fcl8m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 a54d1c2b-1def-4909-8668-99201d9c6949 default }" containerID=a470246a1376e223d5ab5c8e0fd385830ab078e831a06355bd4234bfa1188329 datapathConfiguration="&{false false false false false }" interface=lxcb09ace98e5fe k8sPodName=openstack/keystone-db-sync-62fwm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a470246a13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-db-sync-62fwm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a470246a13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e507ec32-5d49-4f66-a3cd-2276f812fba9,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=e507ec32-5d49-4f66-a3cd-2276f812fba9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-db-sync-62fwm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a470246a13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-db-sync-62fwm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e507ec32-5d49-4f66-a3cd-2276f812fba9;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=e507ec32-5d49-4f66-a3cd-2276f812fba9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a470246a13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 identity=18366 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e507ec32-5d49-4f66-a3cd-2276f812fba9,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=e507ec32-5d49-4f66-a3cd-2276f812fba9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-db-sync-62fwm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a470246a13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 identity=18366 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-db-sync-62fwm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a470246a13 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=141 identity=18366 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-db-sync-62fwm subsys=endpoint level=info msg="Successful endpoint creation" containerID=a470246a13 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=141 identity=18366 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-db-sync-62fwm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a470246a13 endpointID=141 k8sNamespace=openstack k8sPodName=keystone-db-sync-62fwm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e507ec32-5d49-4f66-a3cd-2276f812fba9 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=e507ec32-5d49-4f66-a3cd-2276f812fba9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a470246a13 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=141 identity=18366 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-db-sync-62fwm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 7ea07050-a0d8-4995-abc4-148248fff721 default }" containerID=1adf4931a0dcfeb43b128bb900bb4e394139092c431f43fe0fda5b93b95c8a33 datapathConfiguration="&{false false false false false }" interface=lxc967cce7d51e2 k8sPodName=openstack/keystone-rabbit-init-k6b5x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1adf4931a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2732 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/keystone-rabbit-init-k6b5x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1adf4931a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2732 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f822e597-c2e8-4ec3-b745-08439feb9bdc,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f822e597-c2e8-4ec3-b745-08439feb9bdc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/keystone-rabbit-init-k6b5x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1adf4931a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2732 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.101 ipv6= k8sPodName=openstack/keystone-rabbit-init-k6b5x line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f822e597-c2e8-4ec3-b745-08439feb9bdc;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=f822e597-c2e8-4ec3-b745-08439feb9bdc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1adf4931a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2732 identity=25333 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f822e597-c2e8-4ec3-b745-08439feb9bdc,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f822e597-c2e8-4ec3-b745-08439feb9bdc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/keystone-rabbit-init-k6b5x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1adf4931a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2732 identity=25333 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/keystone-rabbit-init-k6b5x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1adf4931a0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2732 identity=25333 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/keystone-rabbit-init-k6b5x subsys=endpoint level=info msg="Successful endpoint creation" containerID=1adf4931a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2732 identity=25333 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/keystone-rabbit-init-k6b5x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1adf4931a0 endpointID=2732 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-k6b5x subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f822e597-c2e8-4ec3-b745-08439feb9bdc k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=f822e597-c2e8-4ec3-b745-08439feb9bdc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1adf4931a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2732 identity=25333 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/keystone-rabbit-init-k6b5x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 08ab17fe-93a1-4428-b333-9afde0a2f7f6 default }" containerID=a9c8ddd26839faa31dea97e080b9282d632dbab577ff6b19181f760524c9d0f4 datapathConfiguration="&{false false false false false }" interface=lxc750451f255b0 k8sPodName=openstack/keystone-domain-manage-9cvd6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a9c8ddd268 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4023 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-domain-manage-9cvd6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a9c8ddd268 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4023 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=50c8c9e9-4ed8-48b3-8d70-2dbe6f96c776,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=50c8c9e9-4ed8-48b3-8d70-2dbe6f96c776,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-domain-manage-9cvd6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=50c8c9e9-4ed8-48b3-8d70-2dbe6f96c776;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=50c8c9e9-4ed8-48b3-8d70-2dbe6f96c776;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a9c8ddd268 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4023 identity=13695 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=50c8c9e9-4ed8-48b3-8d70-2dbe6f96c776,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=50c8c9e9-4ed8-48b3-8d70-2dbe6f96c776,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-domain-manage-9cvd6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a9c8ddd268 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4023 identity=13695 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-domain-manage-9cvd6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a9c8ddd268 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4023 identity=13695 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-domain-manage-9cvd6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a9c8ddd268 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4023 identity=13695 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-domain-manage-9cvd6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a9c8ddd268 endpointID=4023 k8sNamespace=openstack k8sPodName=keystone-domain-manage-9cvd6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=50c8c9e9-4ed8-48b3-8d70-2dbe6f96c776 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=50c8c9e9-4ed8-48b3-8d70-2dbe6f96c776 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a9c8ddd268 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4023 identity=13695 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-domain-manage-9cvd6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.233 7940a147-575c-4c45-95cd-9106402e140e default }" containerID=570fdaf3a34a6b188cf92b45a22226c37495dc66fca0ebc8f95ce9332b9a3d01 datapathConfiguration="&{false false false false false }" interface=lxc2bd13f8b3915 k8sPodName=openstack/keystone-bootstrap-lfn77 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=570fdaf3a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1258 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-bootstrap-lfn77 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=570fdaf3a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1258 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=573a0be8-6285-486c-941f-acd900ece527,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=573a0be8-6285-486c-941f-acd900ece527,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-bootstrap-lfn77 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=573a0be8-6285-486c-941f-acd900ece527;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=573a0be8-6285-486c-941f-acd900ece527;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=570fdaf3a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1258 identity=61582 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=573a0be8-6285-486c-941f-acd900ece527,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=573a0be8-6285-486c-941f-acd900ece527,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-bootstrap-lfn77 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=570fdaf3a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1258 identity=61582 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-bootstrap-lfn77 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=570fdaf3a3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1258 identity=61582 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-bootstrap-lfn77 subsys=endpoint level=info msg="Successful endpoint creation" containerID=570fdaf3a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1258 identity=61582 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-bootstrap-lfn77 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=570fdaf3a3 endpointID=1258 k8sNamespace=openstack k8sPodName=keystone-bootstrap-lfn77 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=573a0be8-6285-486c-941f-acd900ece527 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=573a0be8-6285-486c-941f-acd900ece527 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=570fdaf3a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1258 identity=61582 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-bootstrap-lfn77 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.52 ddf1015d-2b5d-49d6-9603-f2b960e89094 default }" containerID=3a583441bf6ac4e68b1a9056a4b8ea57226521a0dfbd6bb6be685e7c772ada3b datapathConfiguration="&{false false false false false }" interface=lxc20a52b61d137 k8sPodName=local-path-storage/helper-pod-create-pvc-4e01b9c3-3d37-4bc2-b9db-0c8788321454 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3a583441bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1118 ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e01b9c3-3d37-4bc2-b9db-0c8788321454 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a583441bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1118 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e01b9c3-3d37-4bc2-b9db-0c8788321454 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a583441bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1118 identity=3643 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e01b9c3-3d37-4bc2-b9db-0c8788321454 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a583441bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1118 identity=3643 ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e01b9c3-3d37-4bc2-b9db-0c8788321454 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3a583441bf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1118 identity=3643 ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e01b9c3-3d37-4bc2-b9db-0c8788321454 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a583441bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1118 identity=3643 ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e01b9c3-3d37-4bc2-b9db-0c8788321454 subsys=daemon level=info msg="Delete endpoint request" containerID=3a583441bf endpointID=1118 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4e01b9c3-3d37-4bc2-b9db-0c8788321454 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3a583441bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1118 identity=3643 ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e01b9c3-3d37-4bc2-b9db-0c8788321454 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 6221305a-7151-44bc-8873-63fa12ae48ab default }" containerID=b774b230e8ed175bdd34629b0c93a32f0b7c37263daed5008fc6ed3aae04fb9b datapathConfiguration="&{false false false false false }" interface=lxcc8341d0cba37 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b774b230e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2332 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b774b230e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2332 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b774b230e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2332 identity=23810 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b774b230e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2332 identity=23810 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b774b230e8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2332 identity=23810 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b774b230e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2332 identity=23810 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.217 fae8d50f-307a-49ef-9d80-584f971a8976 default }" containerID=d4a877eba53a2f368a5c07406e42d8f896992738524bc348b13e222e34ebf643 datapathConfiguration="&{false false false false false }" interface=lxcb810e5f2c777 k8sPodName=openstack/barbican-api-9979d46fc-z9kjn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d4a877eba5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1880 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/barbican-api-9979d46fc-z9kjn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d4a877eba5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1880 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/barbican-api-9979d46fc-z9kjn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d4a877eba5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1880 identity=697 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/barbican-api-9979d46fc-z9kjn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d4a877eba5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1880 identity=697 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/barbican-api-9979d46fc-z9kjn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 8ab9f874-a2a2-4f2f-9caa-a87aceae0465 default }" containerID=2e7ef619c2274eb3747837230901fc91a5386f1bd30f7345e5203583eebcb18b datapathConfiguration="&{false false false false false }" interface=lxc5f8283d801cb k8sPodName=openstack/barbican-db-init-7p5dn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2e7ef619c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2031 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/barbican-db-init-7p5dn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2e7ef619c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2031 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a1c28fcd-fa86-4b4b-be12-7d007a13e9f6,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=a1c28fcd-fa86-4b4b-be12-7d007a13e9f6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/barbican-db-init-7p5dn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a1c28fcd-fa86-4b4b-be12-7d007a13e9f6;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=a1c28fcd-fa86-4b4b-be12-7d007a13e9f6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2e7ef619c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2031 identity=20094 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a1c28fcd-fa86-4b4b-be12-7d007a13e9f6,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=a1c28fcd-fa86-4b4b-be12-7d007a13e9f6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/barbican-db-init-7p5dn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2e7ef619c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2031 identity=20094 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/barbican-db-init-7p5dn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d4a877eba5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1880 identity=697 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/barbican-api-9979d46fc-z9kjn subsys=endpoint level=info msg="Successful endpoint creation" containerID=d4a877eba5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1880 identity=697 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/barbican-api-9979d46fc-z9kjn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2e7ef619c2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2031 identity=20094 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/barbican-db-init-7p5dn subsys=endpoint level=info msg="Successful endpoint creation" containerID=2e7ef619c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2031 identity=20094 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/barbican-db-init-7p5dn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2e7ef619c2 endpointID=2031 k8sNamespace=openstack k8sPodName=barbican-db-init-7p5dn subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a1c28fcd-fa86-4b4b-be12-7d007a13e9f6 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=a1c28fcd-fa86-4b4b-be12-7d007a13e9f6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2e7ef619c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2031 identity=20094 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/barbican-db-init-7p5dn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 e51e093e-a42f-47c1-a4e2-29356ac1bc13 default }" containerID=233a91991ccc0ae78d9ace92c9863689c14433584ce59e4456b7190896664c77 datapathConfiguration="&{false false false false false }" interface=lxc20dc4f0cbec3 k8sPodName=openstack/barbican-db-sync-hlsx8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=233a91991c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2952 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/barbican-db-sync-hlsx8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=233a91991c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2952 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=10382854-0444-4cd5-8bf0-6dfe74aef3d4,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=10382854-0444-4cd5-8bf0-6dfe74aef3d4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/barbican-db-sync-hlsx8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=10382854-0444-4cd5-8bf0-6dfe74aef3d4;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=10382854-0444-4cd5-8bf0-6dfe74aef3d4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=233a91991c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2952 identity=3832 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=10382854-0444-4cd5-8bf0-6dfe74aef3d4,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=10382854-0444-4cd5-8bf0-6dfe74aef3d4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/barbican-db-sync-hlsx8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=233a91991c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2952 identity=3832 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/barbican-db-sync-hlsx8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=233a91991c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2952 identity=3832 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/barbican-db-sync-hlsx8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=233a91991c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2952 identity=3832 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/barbican-db-sync-hlsx8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=233a91991c endpointID=2952 k8sNamespace=openstack k8sPodName=barbican-db-sync-hlsx8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=10382854-0444-4cd5-8bf0-6dfe74aef3d4 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=10382854-0444-4cd5-8bf0-6dfe74aef3d4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=233a91991c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2952 identity=3832 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/barbican-db-sync-hlsx8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.214 99d21e3e-3105-4b99-b1cd-3fff90564e56 default }" containerID=cd3a6d846fd660510c52dfbd32243fc8c9eef6b2a77cb6652ddcff8f02900428 datapathConfiguration="&{false false false false false }" interface=lxc2c3ae43d4f8d k8sPodName=openstack/barbican-rabbit-init-g85nd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd3a6d846f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=315 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/barbican-rabbit-init-g85nd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd3a6d846f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=315 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a3f64f0e-b1e6-4f7c-8585-3e48c20b1918,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a3f64f0e-b1e6-4f7c-8585-3e48c20b1918,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/barbican-rabbit-init-g85nd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a3f64f0e-b1e6-4f7c-8585-3e48c20b1918;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=a3f64f0e-b1e6-4f7c-8585-3e48c20b1918;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cd3a6d846f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=315 identity=63242 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a3f64f0e-b1e6-4f7c-8585-3e48c20b1918,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a3f64f0e-b1e6-4f7c-8585-3e48c20b1918,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/barbican-rabbit-init-g85nd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cd3a6d846f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=315 identity=63242 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/barbican-rabbit-init-g85nd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cd3a6d846f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=315 identity=63242 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/barbican-rabbit-init-g85nd subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd3a6d846f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=315 identity=63242 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/barbican-rabbit-init-g85nd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cd3a6d846f endpointID=315 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-g85nd subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a3f64f0e-b1e6-4f7c-8585-3e48c20b1918 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=a3f64f0e-b1e6-4f7c-8585-3e48c20b1918 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=cd3a6d846f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=315 identity=63242 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/barbican-rabbit-init-g85nd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 53290350-a51f-47bd-aa52-849365e15437 default }" containerID=279837902621e02a33ff418164760412d390dc0ce8c661aa99c7aaabdc0d16d3 datapathConfiguration="&{false false false false false }" interface=lxca55b493acef0 k8sPodName=openstack/barbican-ks-service-k6dhv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2798379026 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=230 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/barbican-ks-service-k6dhv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2798379026 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=230 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e03ba8be-e248-4b06-aaaa-401edca22528,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=e03ba8be-e248-4b06-aaaa-401edca22528,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/barbican-ks-service-k6dhv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e03ba8be-e248-4b06-aaaa-401edca22528;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=e03ba8be-e248-4b06-aaaa-401edca22528;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=2798379026 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=230 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.244 ipv6= k8sPodName=openstack/barbican-ks-service-k6dhv line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2798379026 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=230 identity=30666 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e03ba8be-e248-4b06-aaaa-401edca22528,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=e03ba8be-e248-4b06-aaaa-401edca22528,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/barbican-ks-service-k6dhv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2798379026 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=230 identity=30666 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/barbican-ks-service-k6dhv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2798379026 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=230 identity=30666 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/barbican-ks-service-k6dhv subsys=endpoint level=info msg="Successful endpoint creation" containerID=2798379026 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=230 identity=30666 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/barbican-ks-service-k6dhv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03650560688246513 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=2798379026 endpointID=230 k8sNamespace=openstack k8sPodName=barbican-ks-service-k6dhv subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e03ba8be-e248-4b06-aaaa-401edca22528 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=e03ba8be-e248-4b06-aaaa-401edca22528 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2798379026 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=230 identity=30666 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/barbican-ks-service-k6dhv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.97 d47dfb1d-4fe1-4d46-a5e7-bfebf5e91c2c default }" containerID=ea3af19e9c79975b7233393d13272ca1472c5953421fad22ad8aba0a3b42248f datapathConfiguration="&{false false false false false }" interface=lxc00fd9c55ee98 k8sPodName=openstack/barbican-ks-endpoints-flxjs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea3af19e9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1002 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/barbican-ks-endpoints-flxjs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea3af19e9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1002 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=eaccf80b-da7b-455e-a47b-722c38f17344,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=eaccf80b-da7b-455e-a47b-722c38f17344,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/barbican-ks-endpoints-flxjs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ea3af19e9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1002 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.97 ipv6= k8sPodName=openstack/barbican-ks-endpoints-flxjs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=eaccf80b-da7b-455e-a47b-722c38f17344;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=eaccf80b-da7b-455e-a47b-722c38f17344;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea3af19e9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1002 identity=44609 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=eaccf80b-da7b-455e-a47b-722c38f17344,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=eaccf80b-da7b-455e-a47b-722c38f17344,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/barbican-ks-endpoints-flxjs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea3af19e9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1002 identity=44609 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/barbican-ks-endpoints-flxjs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea3af19e9c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1002 identity=44609 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/barbican-ks-endpoints-flxjs subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea3af19e9c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1002 identity=44609 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/barbican-ks-endpoints-flxjs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ea3af19e9c endpointID=1002 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-flxjs subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=eaccf80b-da7b-455e-a47b-722c38f17344 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=eaccf80b-da7b-455e-a47b-722c38f17344 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ea3af19e9c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1002 identity=44609 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/barbican-ks-endpoints-flxjs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 75b86416-5239-4908-a4be-853fe152a96d default }" containerID=86e01e37e0af10bb40c2e86f2472cadd5ceb20a38dbaf78ce7da1573a92dec41 datapathConfiguration="&{false false false false false }" interface=lxc7f84911d01ef k8sPodName=openstack/barbican-ks-user-vzvlf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=86e01e37e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-ks-user-vzvlf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=86e01e37e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6305a223-9c60-4094-be47-4a2fd9aebf78,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=6305a223-9c60-4094-be47-4a2fd9aebf78,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-ks-user-vzvlf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=86e01e37e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-ks-user-vzvlf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=6305a223-9c60-4094-be47-4a2fd9aebf78;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=6305a223-9c60-4094-be47-4a2fd9aebf78;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=86e01e37e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identity=40413 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6305a223-9c60-4094-be47-4a2fd9aebf78,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=6305a223-9c60-4094-be47-4a2fd9aebf78,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-ks-user-vzvlf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=86e01e37e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identity=40413 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-ks-user-vzvlf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=86e01e37e0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1152 identity=40413 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-ks-user-vzvlf subsys=endpoint level=info msg="Successful endpoint creation" containerID=86e01e37e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1152 identity=40413 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-ks-user-vzvlf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=86e01e37e0 endpointID=1152 k8sNamespace=openstack k8sPodName=barbican-ks-user-vzvlf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=6305a223-9c60-4094-be47-4a2fd9aebf78 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=6305a223-9c60-4094-be47-4a2fd9aebf78 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=86e01e37e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1152 identity=40413 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-ks-user-vzvlf subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.222 243856d0-522c-42da-bc4d-8fad01fc2491 default }" containerID=0d1340723afff2439132ad46332bb484289b34164321ee696b3f499cf8a8af6d datapathConfiguration="&{false false false false false }" interface=lxc7a371226e139 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-hgvm9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d1340723a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1567 ipv4=10.0.0.222 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-hgvm9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d1340723a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1567 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.222 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-hgvm9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d1340723a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1567 identity=50976 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.222 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-hgvm9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d1340723a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1567 identity=50976 ipv4=10.0.0.222 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-hgvm9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0d1340723a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1567 identity=50976 ipv4=10.0.0.222 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-hgvm9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d1340723a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1567 identity=50976 ipv4=10.0.0.222 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-hgvm9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.106 87f94efe-c897-4b61-a88c-a65fcb650fea default }" containerID=67db2c891a824f2df4bc30740b78b72a63920a20a4e2652ce0b4e580f8389b2d datapathConfiguration="&{false false false false false }" interface=lxc49cacfa821fa k8sPodName=openstack/rook-ceph-detect-version-lz6rq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=67db2c891a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2186 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lz6rq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=67db2c891a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2186 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=b8c6d55a-4a06-4c4a-b62d-c16c7447b7f5,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=b8c6d55a-4a06-4c4a-b62d-c16c7447b7f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lz6rq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=b8c6d55a-4a06-4c4a-b62d-c16c7447b7f5;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=b8c6d55a-4a06-4c4a-b62d-c16c7447b7f5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=67db2c891a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2186 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.106 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lz6rq line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=67db2c891a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2186 identity=15537 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=b8c6d55a-4a06-4c4a-b62d-c16c7447b7f5,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=b8c6d55a-4a06-4c4a-b62d-c16c7447b7f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lz6rq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=67db2c891a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2186 identity=15537 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lz6rq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=67db2c891a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2186 identity=15537 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lz6rq subsys=endpoint level=info msg="Successful endpoint creation" containerID=67db2c891a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2186 identity=15537 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lz6rq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=67db2c891a endpointID=2186 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-lz6rq subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=b8c6d55a-4a06-4c4a-b62d-c16c7447b7f5 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=b8c6d55a-4a06-4c4a-b62d-c16c7447b7f5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=67db2c891a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2186 identity=15537 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lz6rq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.249 14927ffc-7170-4231-b3fa-613966563be1 default }" containerID=1296dd84ff8dbecb94dfcf77bba4333e9cd97417470f2c3b7405bcd3abc758f6 datapathConfiguration="&{false false false false false }" interface=lxca1175ddbaa9a k8sPodName=openstack/ceph-object-controller-detect-version-b4wxf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1296dd84ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2355 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-b4wxf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1296dd84ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2355 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=3f559efa-10b3-4525-9d92-16cb8d36e43c,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=3f559efa-10b3-4525-9d92-16cb8d36e43c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-b4wxf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=3f559efa-10b3-4525-9d92-16cb8d36e43c;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=3f559efa-10b3-4525-9d92-16cb8d36e43c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1296dd84ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2355 identity=19176 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=3f559efa-10b3-4525-9d92-16cb8d36e43c,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=3f559efa-10b3-4525-9d92-16cb8d36e43c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-b4wxf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1296dd84ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2355 identity=19176 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-b4wxf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1296dd84ff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2355 identity=19176 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-b4wxf subsys=endpoint level=info msg="Successful endpoint creation" containerID=1296dd84ff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2355 identity=19176 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-b4wxf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1296dd84ff endpointID=2355 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-b4wxf subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=3f559efa-10b3-4525-9d92-16cb8d36e43c k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=3f559efa-10b3-4525-9d92-16cb8d36e43c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=1296dd84ff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2355 identity=19176 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-b4wxf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 888cf32a-88e5-450a-baed-e3c3481fa164 default }" containerID=a5c9f69d9fe55af94781de18fcd571608c2f6eaeaad81910b70ff630619ef0fd datapathConfiguration="&{false false false false false }" interface=lxc3fe6417d57c1 k8sPodName=local-path-storage/helper-pod-create-pvc-9c694542-ddfb-4793-85be-b189fccfb5f5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a5c9f69d9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=72 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9c694542-ddfb-4793-85be-b189fccfb5f5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a5c9f69d9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=72 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9c694542-ddfb-4793-85be-b189fccfb5f5 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a5c9f69d9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=72 identity=3643 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9c694542-ddfb-4793-85be-b189fccfb5f5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a5c9f69d9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=72 identity=3643 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9c694542-ddfb-4793-85be-b189fccfb5f5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a5c9f69d9f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=72 identity=3643 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9c694542-ddfb-4793-85be-b189fccfb5f5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a5c9f69d9f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=72 identity=3643 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9c694542-ddfb-4793-85be-b189fccfb5f5 subsys=daemon level=info msg="Delete endpoint request" containerID=a5c9f69d9f endpointID=72 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-9c694542-ddfb-4793-85be-b189fccfb5f5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a5c9f69d9f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=72 identity=3643 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9c694542-ddfb-4793-85be-b189fccfb5f5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 48a21916-3900-42e3-83ca-d811a1bbc699 default }" containerID=ddf1c5ccd217a30255f635bca00fa2f2ebf072f16308fa51b6975171ae97d4de datapathConfiguration="&{false false false false false }" interface=lxc03f6d1e40e6e k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ddf1c5ccd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3524 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ddf1c5ccd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3524 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ddf1c5ccd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3524 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ddf1c5ccd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3524 identity=31073 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ddf1c5ccd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3524 identity=31073 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ddf1c5ccd2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3524 identity=31073 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ddf1c5ccd2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3524 identity=31073 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.83 396428b3-d1be-4daa-b13f-37151b5c3160 default }" containerID=61e78310d1a4668b8726d55dcb7ca8f8d249b00138f6e2c1711913f0b6dc231d datapathConfiguration="&{false false false false false }" interface=lxcee55a27e0e60 k8sPodName=openstack/glance-db-init-whf7b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=61e78310d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=985 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-db-init-whf7b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=61e78310d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=985 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=71545e2f-d1b9-409d-9f0d-f8537c8cb353,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=71545e2f-d1b9-409d-9f0d-f8537c8cb353,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-db-init-whf7b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=61e78310d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=985 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-db-init-whf7b line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=71545e2f-d1b9-409d-9f0d-f8537c8cb353;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=71545e2f-d1b9-409d-9f0d-f8537c8cb353;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=61e78310d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=985 identity=40842 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=71545e2f-d1b9-409d-9f0d-f8537c8cb353,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=71545e2f-d1b9-409d-9f0d-f8537c8cb353,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-db-init-whf7b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=61e78310d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=985 identity=40842 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-db-init-whf7b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=61e78310d1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=985 identity=40842 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-db-init-whf7b subsys=endpoint level=info msg="Successful endpoint creation" containerID=61e78310d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=985 identity=40842 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-db-init-whf7b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=61e78310d1 endpointID=985 k8sNamespace=openstack k8sPodName=glance-db-init-whf7b subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=71545e2f-d1b9-409d-9f0d-f8537c8cb353 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=71545e2f-d1b9-409d-9f0d-f8537c8cb353 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=61e78310d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=985 identity=40842 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-db-init-whf7b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 c1242871-d7e9-4bfd-a641-5d6b8c5ead4d default }" containerID=43fed25ee9cccde33dee0f3d620d906fa441d6cef5d6ae1f7d03b8bc8d191de2 datapathConfiguration="&{false false false false false }" interface=lxcb86bac22d2a0 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-w98vk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=43fed25ee9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2813 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-w98vk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43fed25ee9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2813 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-w98vk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=43fed25ee9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2813 identity=15856 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-w98vk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=43fed25ee9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2813 identity=15856 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-w98vk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 07c985a8-187a-4ef3-a952-322f87200e05 default }" containerID=603c9d89b2e87c8cdd351dd5bf3d2584cdaaf3941f1604b6201437d80b8e40e0 datapathConfiguration="&{false false false false false }" interface=lxc927315034106 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-99kcw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=603c9d89b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-99kcw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=603c9d89b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-99kcw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=603c9d89b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 identity=48893 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-99kcw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=603c9d89b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 identity=48893 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-99kcw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=43fed25ee9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2813 identity=15856 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-w98vk subsys=endpoint level=info msg="Successful endpoint creation" containerID=43fed25ee9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2813 identity=15856 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-w98vk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=603c9d89b2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1574 identity=48893 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-99kcw subsys=endpoint level=info msg="Successful endpoint creation" containerID=603c9d89b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1574 identity=48893 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-99kcw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.227 9da18ac5-f231-4f6f-9ad3-c38087076d89 default }" containerID=8cdee625ccda613fc56b8139752742845ce35841abfae6b35f64eb4d278b98e1 datapathConfiguration="&{false false false false false }" interface=lxc50cf11b7ffe3 k8sPodName=openstack/glance-db-sync-xm5d7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8cdee625cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2759 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-db-sync-xm5d7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8cdee625cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2759 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2ad8d3ba-3a62-4af9-916d-8e2c535aec1b,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=2ad8d3ba-3a62-4af9-916d-8e2c535aec1b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-db-sync-xm5d7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=2ad8d3ba-3a62-4af9-916d-8e2c535aec1b;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=2ad8d3ba-3a62-4af9-916d-8e2c535aec1b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8cdee625cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2759 identity=25277 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2ad8d3ba-3a62-4af9-916d-8e2c535aec1b,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=2ad8d3ba-3a62-4af9-916d-8e2c535aec1b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-db-sync-xm5d7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8cdee625cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2759 identity=25277 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-db-sync-xm5d7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8cdee625cc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2759 identity=25277 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-db-sync-xm5d7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8cdee625cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2759 identity=25277 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-db-sync-xm5d7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8cdee625cc endpointID=2759 k8sNamespace=openstack k8sPodName=glance-db-sync-xm5d7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=2ad8d3ba-3a62-4af9-916d-8e2c535aec1b k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=2ad8d3ba-3a62-4af9-916d-8e2c535aec1b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8cdee625cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2759 identity=25277 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-db-sync-xm5d7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 6aa92a7a-ba61-418d-a027-9f1b685cdd22 default }" containerID=c46d5720f2911729c1f781c961a3f5e39c248bfdcd86bb313c86d0f8f99b268b datapathConfiguration="&{false false false false false }" interface=lxc30f08f8b0b84 k8sPodName=openstack/glance-rabbit-init-rftbg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c46d5720f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-rabbit-init-rftbg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c46d5720f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=548bd8ee-bf08-4b8c-a7f7-bef20da7af54,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=548bd8ee-bf08-4b8c-a7f7-bef20da7af54,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-rabbit-init-rftbg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c46d5720f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-rabbit-init-rftbg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=548bd8ee-bf08-4b8c-a7f7-bef20da7af54;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=548bd8ee-bf08-4b8c-a7f7-bef20da7af54;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c46d5720f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 identity=16046 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=548bd8ee-bf08-4b8c-a7f7-bef20da7af54,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=548bd8ee-bf08-4b8c-a7f7-bef20da7af54,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-rabbit-init-rftbg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c46d5720f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 identity=16046 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-rabbit-init-rftbg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c46d5720f2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=724 identity=16046 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-rabbit-init-rftbg subsys=endpoint level=info msg="Successful endpoint creation" containerID=c46d5720f2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=724 identity=16046 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-rabbit-init-rftbg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c46d5720f2 endpointID=724 k8sNamespace=openstack k8sPodName=glance-rabbit-init-rftbg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=548bd8ee-bf08-4b8c-a7f7-bef20da7af54 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=548bd8ee-bf08-4b8c-a7f7-bef20da7af54 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c46d5720f2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=724 identity=16046 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-rabbit-init-rftbg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 78525be8-4e85-4488-91ae-cffd7160741c default }" containerID=3dd853a86eddd2ca2e634221c894130fe255fae827e9dfe5380e63f4606d7733 datapathConfiguration="&{false false false false false }" interface=lxc4e9a692051c7 k8sPodName=openstack/glance-ks-service-zq7qz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3dd853a86e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1022 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-service-zq7qz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3dd853a86e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1022 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e7c34f0f-0abf-42ef-8675-74b1c406e53d,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=e7c34f0f-0abf-42ef-8675-74b1c406e53d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-service-zq7qz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e7c34f0f-0abf-42ef-8675-74b1c406e53d;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=e7c34f0f-0abf-42ef-8675-74b1c406e53d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3dd853a86e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1022 identity=23125 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e7c34f0f-0abf-42ef-8675-74b1c406e53d,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=e7c34f0f-0abf-42ef-8675-74b1c406e53d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-service-zq7qz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3dd853a86e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1022 identity=23125 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-service-zq7qz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3dd853a86e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1022 identity=23125 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-service-zq7qz subsys=endpoint level=info msg="Successful endpoint creation" containerID=3dd853a86e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1022 identity=23125 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-service-zq7qz subsys=daemon level=info msg="Delete endpoint request" containerID=3dd853a86e endpointID=1022 k8sNamespace=openstack k8sPodName=glance-ks-service-zq7qz subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e7c34f0f-0abf-42ef-8675-74b1c406e53d k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=e7c34f0f-0abf-42ef-8675-74b1c406e53d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3dd853a86e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1022 identity=23125 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-service-zq7qz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.64 18547622-c6d4-4825-943f-8e17e4908241 default }" containerID=b3f4b50f110c3c6f9d6ba839fb1290937c4356dc38b24b01a5c21c570d826cc2 datapathConfiguration="&{false false false false false }" interface=lxc45cd1f2aed6b k8sPodName=openstack/glance-ks-endpoints-c74gn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b3f4b50f11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=961 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-ks-endpoints-c74gn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b3f4b50f11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=961 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=141347c3-7a2e-4bd5-97e2-d1420c102c68,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=141347c3-7a2e-4bd5-97e2-d1420c102c68,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-ks-endpoints-c74gn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=141347c3-7a2e-4bd5-97e2-d1420c102c68;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=141347c3-7a2e-4bd5-97e2-d1420c102c68;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b3f4b50f11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=961 identity=555 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=141347c3-7a2e-4bd5-97e2-d1420c102c68,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=141347c3-7a2e-4bd5-97e2-d1420c102c68,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-ks-endpoints-c74gn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b3f4b50f11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=961 identity=555 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-ks-endpoints-c74gn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b3f4b50f11 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=961 identity=555 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-ks-endpoints-c74gn subsys=endpoint level=info msg="Successful endpoint creation" containerID=b3f4b50f11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=961 identity=555 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-ks-endpoints-c74gn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b3f4b50f11 endpointID=961 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-c74gn subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=141347c3-7a2e-4bd5-97e2-d1420c102c68 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=141347c3-7a2e-4bd5-97e2-d1420c102c68 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b3f4b50f11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=961 identity=555 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-ks-endpoints-c74gn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 a7faba78-e701-4cdd-b2ed-91fbf8a89a36 default }" containerID=a5f948bc3cb7bfbaecaff05eac7a626ca32fa6800213175d3e6b7569cc623e00 datapathConfiguration="&{false false false false false }" interface=lxc87855e7e9131 k8sPodName=openstack/glance-ks-user-f2x9c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a5f948bc3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-ks-user-f2x9c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a5f948bc3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=95d842ca-e22d-450d-b7d0-8c39b9ad0bf9,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=95d842ca-e22d-450d-b7d0-8c39b9ad0bf9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-ks-user-f2x9c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a5f948bc3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-ks-user-f2x9c line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=95d842ca-e22d-450d-b7d0-8c39b9ad0bf9;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=95d842ca-e22d-450d-b7d0-8c39b9ad0bf9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a5f948bc3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 identity=28731 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=95d842ca-e22d-450d-b7d0-8c39b9ad0bf9,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=95d842ca-e22d-450d-b7d0-8c39b9ad0bf9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-ks-user-f2x9c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a5f948bc3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 identity=28731 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-ks-user-f2x9c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a5f948bc3c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=5 identity=28731 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-ks-user-f2x9c subsys=endpoint level=info msg="Successful endpoint creation" containerID=a5f948bc3c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=5 identity=28731 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-ks-user-f2x9c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a5f948bc3c endpointID=5 k8sNamespace=openstack k8sPodName=glance-ks-user-f2x9c subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=95d842ca-e22d-450d-b7d0-8c39b9ad0bf9 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=95d842ca-e22d-450d-b7d0-8c39b9ad0bf9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a5f948bc3c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=5 identity=28731 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-ks-user-f2x9c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 440ef650-d478-4644-bb39-50484a36ed76 default }" containerID=24b066f0514fe63ebd97f203df52c05e4cf5256f2d2f86a8afbb211c2db20b23 datapathConfiguration="&{false false false false false }" interface=lxc222505dbcbb9 k8sPodName=openstack/glance-metadefs-load-sfjxv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=24b066f051 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1572 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-metadefs-load-sfjxv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=24b066f051 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1572 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8f22e4ec-17cf-4538-96a1-db0e1557f551,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=8f22e4ec-17cf-4538-96a1-db0e1557f551,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-metadefs-load-sfjxv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=24b066f051 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1572 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-metadefs-load-sfjxv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8f22e4ec-17cf-4538-96a1-db0e1557f551;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=8f22e4ec-17cf-4538-96a1-db0e1557f551;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=24b066f051 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1572 identity=10285 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8f22e4ec-17cf-4538-96a1-db0e1557f551,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=8f22e4ec-17cf-4538-96a1-db0e1557f551,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-metadefs-load-sfjxv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=24b066f051 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1572 identity=10285 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-metadefs-load-sfjxv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=24b066f051 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1572 identity=10285 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-metadefs-load-sfjxv subsys=endpoint level=info msg="Successful endpoint creation" containerID=24b066f051 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1572 identity=10285 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-metadefs-load-sfjxv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=24b066f051 endpointID=1572 k8sNamespace=openstack k8sPodName=glance-metadefs-load-sfjxv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8f22e4ec-17cf-4538-96a1-db0e1557f551 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=8f22e4ec-17cf-4538-96a1-db0e1557f551 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=24b066f051 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1572 identity=10285 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-metadefs-load-sfjxv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 87c6e126-9cc3-42e9-a5d3-18c56bde7b31 default }" containerID=ced29091c8cbd7dab49214c32db28567702c19b5d01dc774a10e1f20db689b48 datapathConfiguration="&{false false false false false }" interface=lxcdefce229fc19 k8sPodName=openstack/glance-storage-init-424c9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ced29091c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3523 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-storage-init-424c9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ced29091c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3523 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=16531c5a-78cd-43c5-b382-8fdb2a1b0608,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=16531c5a-78cd-43c5-b382-8fdb2a1b0608,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-storage-init-424c9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ced29091c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3523 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-storage-init-424c9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=16531c5a-78cd-43c5-b382-8fdb2a1b0608;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=16531c5a-78cd-43c5-b382-8fdb2a1b0608;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ced29091c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3523 identity=50543 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=16531c5a-78cd-43c5-b382-8fdb2a1b0608,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=16531c5a-78cd-43c5-b382-8fdb2a1b0608,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-storage-init-424c9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ced29091c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3523 identity=50543 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-storage-init-424c9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ced29091c8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3523 identity=50543 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-storage-init-424c9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ced29091c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3523 identity=50543 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-storage-init-424c9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ced29091c8 endpointID=3523 k8sNamespace=openstack k8sPodName=glance-storage-init-424c9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=16531c5a-78cd-43c5-b382-8fdb2a1b0608 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=16531c5a-78cd-43c5-b382-8fdb2a1b0608 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ced29091c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3523 identity=50543 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-storage-init-424c9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 ae86e651-7c15-4493-9390-081a13342d0f default }" containerID=e3ed88de6f2109a88b715658f71bcafdb07ca67da539925202513c584e93a6e4 datapathConfiguration="&{false false false false false }" interface=lxc1da7ff8d2463 k8sPodName=openstack/glance-api-dfccbc4fc-pgm4c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e3ed88de6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=49 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-api-dfccbc4fc-pgm4c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e3ed88de6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=49 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-api-dfccbc4fc-pgm4c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e3ed88de6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=49 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-api-dfccbc4fc-pgm4c line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e3ed88de6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=49 identity=488 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-api-dfccbc4fc-pgm4c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e3ed88de6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=49 identity=488 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-api-dfccbc4fc-pgm4c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e3ed88de6f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=49 identity=488 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-api-dfccbc4fc-pgm4c subsys=endpoint level=info msg="Successful endpoint creation" containerID=e3ed88de6f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=49 identity=488 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-api-dfccbc4fc-pgm4c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.139 8e5bfdd3-4a27-4dda-8969-d30f4b13a4c9 default }" containerID=f1cf2e95dc4ddfd37e73afc66c2c925a5bc98c6fead7cc3a5fcceae23200189c datapathConfiguration="&{false false false false false }" interface=lxc622d4913dee5 k8sPodName=openstack/staffeln-api-6cf99c7954-cxrqs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f1cf2e95dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3025 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/staffeln-api-6cf99c7954-cxrqs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f1cf2e95dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3025 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/staffeln-api-6cf99c7954-cxrqs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.57 9c635fa8-942d-4512-b286-e5b1a994055a default }" containerID=3cf47b14870d6cd904f6635f17a03f880e93820c179b7e4ec54c76d2cbe52772 datapathConfiguration="&{false false false false false }" interface=lxc9d3ea305c6ea k8sPodName=openstack/staffeln-conductor-7879879bf7-2z88z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3cf47b1487 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2016 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/staffeln-conductor-7879879bf7-2z88z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3cf47b1487 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2016 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/staffeln-conductor-7879879bf7-2z88z subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f1cf2e95dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3025 identity=47863 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/staffeln-api-6cf99c7954-cxrqs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f1cf2e95dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3025 identity=47863 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/staffeln-api-6cf99c7954-cxrqs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=3cf47b1487 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2016 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.57 ipv6= k8sPodName=openstack/staffeln-conductor-7879879bf7-2z88z line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3cf47b1487 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2016 identity=35861 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/staffeln-conductor-7879879bf7-2z88z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3cf47b1487 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2016 identity=35861 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/staffeln-conductor-7879879bf7-2z88z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 1657b852-442a-41d2-b552-13dae22c7648 default }" containerID=152444d9bfefd04ae08116262b880ab839267e78b50f246d9286f54235c7647f datapathConfiguration="&{false false false false false }" interface=lxc46c18cc65cc3 k8sPodName=openstack/staffeln-db-init-ch7v9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=152444d9bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1593 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/staffeln-db-init-ch7v9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=152444d9bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1593 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=b339e417-a0e4-4fae-aba6-774acc8d1278,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=b339e417-a0e4-4fae-aba6-774acc8d1278,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/staffeln-db-init-ch7v9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=b339e417-a0e4-4fae-aba6-774acc8d1278;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=b339e417-a0e4-4fae-aba6-774acc8d1278;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=152444d9bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1593 identity=50184 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=b339e417-a0e4-4fae-aba6-774acc8d1278,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=b339e417-a0e4-4fae-aba6-774acc8d1278,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/staffeln-db-init-ch7v9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=152444d9bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1593 identity=50184 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/staffeln-db-init-ch7v9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f1cf2e95dc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3025 identity=47863 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/staffeln-api-6cf99c7954-cxrqs subsys=endpoint level=info msg="Successful endpoint creation" containerID=f1cf2e95dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3025 identity=47863 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/staffeln-api-6cf99c7954-cxrqs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=152444d9bf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1593 identity=50184 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/staffeln-db-init-ch7v9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=152444d9bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1593 identity=50184 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/staffeln-db-init-ch7v9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3cf47b1487 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2016 identity=35861 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/staffeln-conductor-7879879bf7-2z88z subsys=endpoint level=info msg="Successful endpoint creation" containerID=3cf47b1487 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2016 identity=35861 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/staffeln-conductor-7879879bf7-2z88z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=152444d9bf endpointID=1593 k8sNamespace=openstack k8sPodName=staffeln-db-init-ch7v9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=b339e417-a0e4-4fae-aba6-774acc8d1278 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=b339e417-a0e4-4fae-aba6-774acc8d1278 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=152444d9bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1593 identity=50184 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/staffeln-db-init-ch7v9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.148 b11a408b-e5c0-4ebf-b02d-74918fa499c7 default }" containerID=e86f6dcddf77938755ec7beb741329337d1b80170771b7861d3c65fe052bfdb1 datapathConfiguration="&{false false false false false }" interface=lxc23709ae67ec4 k8sPodName=openstack/staffeln-db-sync-7jwn9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e86f6dcddf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2498 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/staffeln-db-sync-7jwn9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e86f6dcddf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2498 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=7fb424e9-33c2-4386-9c2c-6ede1173e5a9,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=7fb424e9-33c2-4386-9c2c-6ede1173e5a9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/staffeln-db-sync-7jwn9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=7fb424e9-33c2-4386-9c2c-6ede1173e5a9;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=7fb424e9-33c2-4386-9c2c-6ede1173e5a9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e86f6dcddf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2498 identity=46521 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=7fb424e9-33c2-4386-9c2c-6ede1173e5a9,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=7fb424e9-33c2-4386-9c2c-6ede1173e5a9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/staffeln-db-sync-7jwn9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e86f6dcddf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2498 identity=46521 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/staffeln-db-sync-7jwn9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e86f6dcddf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2498 identity=46521 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/staffeln-db-sync-7jwn9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e86f6dcddf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2498 identity=46521 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/staffeln-db-sync-7jwn9 subsys=daemon level=info msg="Delete endpoint request" containerID=e86f6dcddf endpointID=2498 k8sNamespace=openstack k8sPodName=staffeln-db-sync-7jwn9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=7fb424e9-33c2-4386-9c2c-6ede1173e5a9 k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=7fb424e9-33c2-4386-9c2c-6ede1173e5a9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=e86f6dcddf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2498 identity=46521 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/staffeln-db-sync-7jwn9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 90bfc7a9-713f-4ca5-9568-ed6a61b6ae41 default }" containerID=91812da0bc404e95222ab067a98c58ab31b12356a02ec14ad8b8307381f5995c datapathConfiguration="&{false false false false false }" interface=lxc31e492776300 k8sPodName=local-path-storage/helper-pod-create-pvc-e44b2cfe-129d-473e-ad33-a728985265db labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=91812da0bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e44b2cfe-129d-473e-ad33-a728985265db subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=91812da0bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e44b2cfe-129d-473e-ad33-a728985265db subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=91812da0bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 identity=3643 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e44b2cfe-129d-473e-ad33-a728985265db oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=91812da0bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 identity=3643 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e44b2cfe-129d-473e-ad33-a728985265db subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=91812da0bc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=294 identity=3643 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e44b2cfe-129d-473e-ad33-a728985265db subsys=endpoint level=info msg="Successful endpoint creation" containerID=91812da0bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=294 identity=3643 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e44b2cfe-129d-473e-ad33-a728985265db subsys=daemon level=info msg="Delete endpoint request" containerID=91812da0bc endpointID=294 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e44b2cfe-129d-473e-ad33-a728985265db subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=91812da0bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=294 identity=3643 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e44b2cfe-129d-473e-ad33-a728985265db subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 a164b2f0-a8d1-4b58-b68c-a20c39aaacf1 default }" containerID=7c7217459ce30bdd7077e7fc7d2ecdafaced980b066caf49f22bdd8c767138b1 datapathConfiguration="&{false false false false false }" interface=lxcfb1292e53b64 k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c7217459c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1162 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c7217459c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1162 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=7c7217459c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1162 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7c7217459c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1162 identity=29108 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c7217459c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1162 identity=29108 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c7217459c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1162 identity=29108 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c7217459c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1162 identity=29108 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.46 2ef7b7fe-ee89-417f-a8fc-d3e1b9973e12 default }" containerID=48b872f076996dbf171c3fd482dab93be834f70bd76008ba660a657ea3f758d6 datapathConfiguration="&{false false false false false }" interface=lxcb2213a7f9597 k8sPodName=openstack/cinder-api-5f6f97944-6dl8z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=48b872f076 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4026 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/cinder-api-5f6f97944-6dl8z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=48b872f076 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4026 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/cinder-api-5f6f97944-6dl8z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=48b872f076 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4026 identity=4644 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/cinder-api-5f6f97944-6dl8z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=48b872f076 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4026 identity=4644 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/cinder-api-5f6f97944-6dl8z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 77e02095-edfc-4905-8a33-77260cb090b9 default }" containerID=6f011b51fc7d94f4d095dc8d6dfbc03f02b81f041e6ff4c714a1911839e979a7 datapathConfiguration="&{false false false false false }" interface=lxcd3fb2538c188 k8sPodName=openstack/cinder-scheduler-6dbbdb6fdd-wg746 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f011b51fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1022 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/cinder-scheduler-6dbbdb6fdd-wg746 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f011b51fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1022 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/cinder-scheduler-6dbbdb6fdd-wg746 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f011b51fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1022 identity=577 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/cinder-scheduler-6dbbdb6fdd-wg746 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f011b51fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1022 identity=577 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/cinder-scheduler-6dbbdb6fdd-wg746 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=48b872f076 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4026 identity=4644 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/cinder-api-5f6f97944-6dl8z subsys=endpoint level=info msg="Successful endpoint creation" containerID=48b872f076 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4026 identity=4644 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/cinder-api-5f6f97944-6dl8z subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.234 2d8b300f-fa16-4752-a33f-2635e65a361b default }" containerID=6555ba0e15cac67aaf7090b9406d2484cb9a722b2117feb54e078cddb0d9fbbb datapathConfiguration="&{false false false false false }" interface=lxc9be8746dcbe1 k8sPodName=openstack/cinder-db-init-jfkmt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6555ba0e15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/cinder-db-init-jfkmt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6555ba0e15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=9e78e663-f227-41f3-8824-be0dbbed1b86,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=9e78e663-f227-41f3-8824-be0dbbed1b86,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/cinder-db-init-jfkmt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=9e78e663-f227-41f3-8824-be0dbbed1b86;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=9e78e663-f227-41f3-8824-be0dbbed1b86;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6555ba0e15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identity=9802 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=9e78e663-f227-41f3-8824-be0dbbed1b86,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=9e78e663-f227-41f3-8824-be0dbbed1b86,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/cinder-db-init-jfkmt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6555ba0e15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identity=9802 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/cinder-db-init-jfkmt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6f011b51fc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1022 identity=577 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/cinder-scheduler-6dbbdb6fdd-wg746 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f011b51fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1022 identity=577 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/cinder-scheduler-6dbbdb6fdd-wg746 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6555ba0e15 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=152 identity=9802 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/cinder-db-init-jfkmt subsys=endpoint level=info msg="Successful endpoint creation" containerID=6555ba0e15 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=152 identity=9802 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/cinder-db-init-jfkmt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6555ba0e15 endpointID=152 k8sNamespace=openstack k8sPodName=cinder-db-init-jfkmt subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=9e78e663-f227-41f3-8824-be0dbbed1b86 k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=9e78e663-f227-41f3-8824-be0dbbed1b86 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=6555ba0e15 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=152 identity=9802 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/cinder-db-init-jfkmt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 7337fa73-9226-48cf-8178-d9e93a1d96cb default }" containerID=76d62f0cdb32cff3bdd29c052daa13722e77bd0a706591e3f3e5f084f4e3c394 datapathConfiguration="&{false false false false false }" interface=lxc40b6032a7d88 k8sPodName=openstack/cinder-db-sync-nxnq9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76d62f0cdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4070 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/cinder-db-sync-nxnq9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76d62f0cdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4070 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=796fa5d2-36b4-49cb-a19e-6949675e2010,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=796fa5d2-36b4-49cb-a19e-6949675e2010,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/cinder-db-sync-nxnq9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=796fa5d2-36b4-49cb-a19e-6949675e2010;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=796fa5d2-36b4-49cb-a19e-6949675e2010;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76d62f0cdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4070 identity=10799 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=796fa5d2-36b4-49cb-a19e-6949675e2010,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=796fa5d2-36b4-49cb-a19e-6949675e2010,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/cinder-db-sync-nxnq9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76d62f0cdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4070 identity=10799 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/cinder-db-sync-nxnq9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=76d62f0cdb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4070 identity=10799 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/cinder-db-sync-nxnq9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=76d62f0cdb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4070 identity=10799 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/cinder-db-sync-nxnq9 subsys=daemon level=info msg="Delete endpoint request" containerID=76d62f0cdb endpointID=4070 k8sNamespace=openstack k8sPodName=cinder-db-sync-nxnq9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=796fa5d2-36b4-49cb-a19e-6949675e2010 k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=796fa5d2-36b4-49cb-a19e-6949675e2010 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=76d62f0cdb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4070 identity=10799 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/cinder-db-sync-nxnq9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 6a5d5673-5e65-4abd-a8b2-b6aa5e29fd57 default }" containerID=30d8cf9fe1bb3c6225b4a4ac042e950c3b49d38e47488f50a36ce636eb4140a7 datapathConfiguration="&{false false false false false }" interface=lxc65db28b815e8 k8sPodName=openstack/cinder-rabbit-init-w2xzq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=30d8cf9fe1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/cinder-rabbit-init-w2xzq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=30d8cf9fe1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=93685e86-4370-407b-abc1-362fcd23c437,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=93685e86-4370-407b-abc1-362fcd23c437,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/cinder-rabbit-init-w2xzq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=93685e86-4370-407b-abc1-362fcd23c437;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=93685e86-4370-407b-abc1-362fcd23c437;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=30d8cf9fe1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identity=21596 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=93685e86-4370-407b-abc1-362fcd23c437,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=93685e86-4370-407b-abc1-362fcd23c437,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/cinder-rabbit-init-w2xzq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=30d8cf9fe1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identity=21596 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/cinder-rabbit-init-w2xzq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=30d8cf9fe1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2047 identity=21596 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/cinder-rabbit-init-w2xzq subsys=endpoint level=info msg="Successful endpoint creation" containerID=30d8cf9fe1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2047 identity=21596 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/cinder-rabbit-init-w2xzq subsys=daemon level=info msg="Delete endpoint request" containerID=30d8cf9fe1 endpointID=2047 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-w2xzq subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=93685e86-4370-407b-abc1-362fcd23c437 k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=93685e86-4370-407b-abc1-362fcd23c437 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=30d8cf9fe1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2047 identity=21596 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/cinder-rabbit-init-w2xzq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 652b5fcc-8bff-4042-878d-312fd1f6205d default }" containerID=6b0757404a39f43d93a0bd7ba85a9d9e9b0141167ba1d56cd5901cc4b9b249c7 datapathConfiguration="&{false false false false false }" interface=lxcb3c8860dd5fa k8sPodName=openstack/cinder-ks-service-frhc7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b0757404a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/cinder-ks-service-frhc7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b0757404a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=74c20824-2d2d-49ac-ad9a-2a38ffffa556,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=74c20824-2d2d-49ac-ad9a-2a38ffffa556,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/cinder-ks-service-frhc7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=74c20824-2d2d-49ac-ad9a-2a38ffffa556;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=74c20824-2d2d-49ac-ad9a-2a38ffffa556;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6b0757404a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identity=8615 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=74c20824-2d2d-49ac-ad9a-2a38ffffa556,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=74c20824-2d2d-49ac-ad9a-2a38ffffa556,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/cinder-ks-service-frhc7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b0757404a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identity=8615 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/cinder-ks-service-frhc7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6b0757404a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=16 identity=8615 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/cinder-ks-service-frhc7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b0757404a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=16 identity=8615 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/cinder-ks-service-frhc7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6b0757404a endpointID=16 k8sNamespace=openstack k8sPodName=cinder-ks-service-frhc7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=74c20824-2d2d-49ac-ad9a-2a38ffffa556 k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=74c20824-2d2d-49ac-ad9a-2a38ffffa556 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=6b0757404a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=16 identity=8615 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/cinder-ks-service-frhc7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 3b8fde03-a9c0-4b9d-9676-d9228f4215b3 default }" containerID=835419c5df6adc71889e14251a10372bce1001760266ae27afc2ad5f59d699b3 datapathConfiguration="&{false false false false false }" interface=lxccbedc9185742 k8sPodName=openstack/cinder-ks-endpoints-7xhf8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=835419c5df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1518 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-ks-endpoints-7xhf8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=835419c5df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1518 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ad413872-cdbf-4cc7-92ee-337be3f915b8,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=ad413872-cdbf-4cc7-92ee-337be3f915b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-ks-endpoints-7xhf8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=ad413872-cdbf-4cc7-92ee-337be3f915b8;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=ad413872-cdbf-4cc7-92ee-337be3f915b8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=835419c5df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1518 identity=440 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ad413872-cdbf-4cc7-92ee-337be3f915b8,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=ad413872-cdbf-4cc7-92ee-337be3f915b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-ks-endpoints-7xhf8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=835419c5df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1518 identity=440 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-ks-endpoints-7xhf8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=835419c5df datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1518 identity=440 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-ks-endpoints-7xhf8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=835419c5df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1518 identity=440 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-ks-endpoints-7xhf8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=835419c5df endpointID=1518 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-7xhf8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=ad413872-cdbf-4cc7-92ee-337be3f915b8 k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=ad413872-cdbf-4cc7-92ee-337be3f915b8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=835419c5df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1518 identity=440 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-ks-endpoints-7xhf8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 3745ca66-680f-4089-8ec1-f3d85536febf default }" containerID=3d2ddf952f1758cd6fae20e911cdbac66fcb2820bf3186d85c5a0313ab7f1ca5 datapathConfiguration="&{false false false false false }" interface=lxccfa4d8406b61 k8sPodName=openstack/cinder-ks-user-g8xkc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d2ddf952f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1770 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/cinder-ks-user-g8xkc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d2ddf952f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1770 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a28b1a17-c073-41af-8652-172c786eadea,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=a28b1a17-c073-41af-8652-172c786eadea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/cinder-ks-user-g8xkc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=a28b1a17-c073-41af-8652-172c786eadea;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=a28b1a17-c073-41af-8652-172c786eadea;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3d2ddf952f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1770 identity=36152 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a28b1a17-c073-41af-8652-172c786eadea,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=a28b1a17-c073-41af-8652-172c786eadea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/cinder-ks-user-g8xkc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3d2ddf952f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1770 identity=36152 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/cinder-ks-user-g8xkc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3d2ddf952f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1770 identity=36152 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/cinder-ks-user-g8xkc subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d2ddf952f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1770 identity=36152 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/cinder-ks-user-g8xkc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3d2ddf952f endpointID=1770 k8sNamespace=openstack k8sPodName=cinder-ks-user-g8xkc subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=a28b1a17-c073-41af-8652-172c786eadea k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=a28b1a17-c073-41af-8652-172c786eadea k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=3d2ddf952f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1770 identity=36152 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/cinder-ks-user-g8xkc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 2d488201-1454-4460-9b88-1ea2c9a31df7 default }" containerID=0a14fc80ece9af66b6a5903594b049793d782ce0506b084897f10259c25b0d7f datapathConfiguration="&{false false false false false }" interface=lxca1a18ccc821a k8sPodName=openstack/cinder-backup-storage-init-p8pgw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a14fc80ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2283 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/cinder-backup-storage-init-p8pgw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a14fc80ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2283 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=cd9660ec-2bbb-45ee-9969-dae7dc319381,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=cd9660ec-2bbb-45ee-9969-dae7dc319381,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/cinder-backup-storage-init-p8pgw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=cd9660ec-2bbb-45ee-9969-dae7dc319381;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=cd9660ec-2bbb-45ee-9969-dae7dc319381;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a14fc80ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2283 identity=14201 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=cd9660ec-2bbb-45ee-9969-dae7dc319381,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=cd9660ec-2bbb-45ee-9969-dae7dc319381,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/cinder-backup-storage-init-p8pgw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a14fc80ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2283 identity=14201 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/cinder-backup-storage-init-p8pgw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0a14fc80ec datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2283 identity=14201 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/cinder-backup-storage-init-p8pgw subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a14fc80ec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2283 identity=14201 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/cinder-backup-storage-init-p8pgw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0a14fc80ec endpointID=2283 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-p8pgw subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=cd9660ec-2bbb-45ee-9969-dae7dc319381 k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=cd9660ec-2bbb-45ee-9969-dae7dc319381 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=0a14fc80ec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2283 identity=14201 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/cinder-backup-storage-init-p8pgw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 579fe706-557b-4037-91a6-9600267bb8ba default }" containerID=eadf91a3ef80a8d3868d52b253a4226f93b877f218e810142711b2cb5bb47fb2 datapathConfiguration="&{false false false false false }" interface=lxc9466c4d82d6b k8sPodName=openstack/cinder-create-internal-tenant-kcbmb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eadf91a3ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-kcbmb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eadf91a3ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=8f8bec8f-0b65-47d4-b61c-f9a7c650cfe6,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=8f8bec8f-0b65-47d4-b61c-f9a7c650cfe6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-kcbmb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=8f8bec8f-0b65-47d4-b61c-f9a7c650cfe6;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=8f8bec8f-0b65-47d4-b61c-f9a7c650cfe6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eadf91a3ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 identity=33834 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=8f8bec8f-0b65-47d4-b61c-f9a7c650cfe6,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=8f8bec8f-0b65-47d4-b61c-f9a7c650cfe6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-kcbmb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eadf91a3ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 identity=33834 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-kcbmb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eadf91a3ef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=548 identity=33834 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-kcbmb subsys=endpoint level=info msg="Successful endpoint creation" containerID=eadf91a3ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=548 identity=33834 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-kcbmb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eadf91a3ef endpointID=548 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-kcbmb subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=8f8bec8f-0b65-47d4-b61c-f9a7c650cfe6 k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=8f8bec8f-0b65-47d4-b61c-f9a7c650cfe6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=eadf91a3ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=548 identity=33834 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-kcbmb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 e152f6aa-a631-43c7-ba5c-a258ceb7c126 default }" containerID=d12cdd6fef45b2cc1ffd047aef159bb0e5d07a7f1c45eda6b3de16144c299bd0 datapathConfiguration="&{false false false false false }" interface=lxcd3233ed801f3 k8sPodName=openstack/cinder-storage-init-ddddk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d12cdd6fef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1007 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/cinder-storage-init-ddddk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d12cdd6fef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1007 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=def258a7-2ea9-403f-a350-c7d92aaa8f79,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=def258a7-2ea9-403f-a350-c7d92aaa8f79,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/cinder-storage-init-ddddk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d12cdd6fef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1007 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.114 ipv6= k8sPodName=openstack/cinder-storage-init-ddddk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=def258a7-2ea9-403f-a350-c7d92aaa8f79;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=def258a7-2ea9-403f-a350-c7d92aaa8f79;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d12cdd6fef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1007 identity=3958 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=def258a7-2ea9-403f-a350-c7d92aaa8f79,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=def258a7-2ea9-403f-a350-c7d92aaa8f79,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/cinder-storage-init-ddddk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d12cdd6fef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1007 identity=3958 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/cinder-storage-init-ddddk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d12cdd6fef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1007 identity=3958 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/cinder-storage-init-ddddk subsys=endpoint level=info msg="Successful endpoint creation" containerID=d12cdd6fef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1007 identity=3958 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/cinder-storage-init-ddddk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d12cdd6fef endpointID=1007 k8sNamespace=openstack k8sPodName=cinder-storage-init-ddddk subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=def258a7-2ea9-403f-a350-c7d92aaa8f79 k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=def258a7-2ea9-403f-a350-c7d92aaa8f79 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=d12cdd6fef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1007 identity=3958 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/cinder-storage-init-ddddk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 200ae098-51fa-4472-b792-46375b8e64e4 default }" containerID=4bfc03432e676fa736fbe8e1f655bb1eb8e2f1ae1acc901d98e721a6ab37d301 datapathConfiguration="&{false false false false false }" interface=lxc76cea13b8735 k8sPodName=openstack/cinder-bootstrap-m6z2d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4bfc03432e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1030 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-bootstrap-m6z2d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4bfc03432e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1030 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c8e936fa-0eef-40e9-8db2-8b7f2280879a,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=c8e936fa-0eef-40e9-8db2-8b7f2280879a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-bootstrap-m6z2d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=c8e936fa-0eef-40e9-8db2-8b7f2280879a;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=c8e936fa-0eef-40e9-8db2-8b7f2280879a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4bfc03432e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1030 identity=33465 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c8e936fa-0eef-40e9-8db2-8b7f2280879a,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=c8e936fa-0eef-40e9-8db2-8b7f2280879a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-bootstrap-m6z2d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4bfc03432e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1030 identity=33465 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-bootstrap-m6z2d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4bfc03432e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1030 identity=33465 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-bootstrap-m6z2d subsys=endpoint level=info msg="Successful endpoint creation" containerID=4bfc03432e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1030 identity=33465 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-bootstrap-m6z2d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.183 d44e7702-bfdc-42cd-87a6-5076f0775f5f default }" containerID=a09d8aaf94378f5206a5404eb7e268a6246b92babbfd4ac796d4984b49611267 datapathConfiguration="&{false false false false false }" interface=lxc15c7d3335c15 k8sPodName=openstack/cinder-backup-586df5774b-27tbl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a09d8aaf94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1873 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-backup-586df5774b-27tbl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a09d8aaf94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1873 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-backup-586df5774b-27tbl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a09d8aaf94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1873 identity=21838 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-backup-586df5774b-27tbl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a09d8aaf94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1873 identity=21838 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-backup-586df5774b-27tbl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.253 e1550f89-6cc1-48aa-b97a-d972b8dd1085 default }" containerID=38db3ad9f31d09059d556f9523e4fb2a25a2c85da32ac417dae09c3305e261ab datapathConfiguration="&{false false false false false }" interface=lxca8f3b90dc4df k8sPodName=openstack/cinder-volume-5ccdd4496c-mx65w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=38db3ad9f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2205 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-volume-5ccdd4496c-mx65w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=38db3ad9f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2205 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-volume-5ccdd4496c-mx65w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=38db3ad9f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2205 identity=50255 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-volume-5ccdd4496c-mx65w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=38db3ad9f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2205 identity=50255 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-volume-5ccdd4496c-mx65w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a09d8aaf94 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1873 identity=21838 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-backup-586df5774b-27tbl subsys=endpoint level=info msg="Successful endpoint creation" containerID=a09d8aaf94 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1873 identity=21838 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-backup-586df5774b-27tbl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=38db3ad9f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2205 identity=50255 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-volume-5ccdd4496c-mx65w subsys=endpoint level=info msg="Successful endpoint creation" containerID=38db3ad9f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2205 identity=50255 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-volume-5ccdd4496c-mx65w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4bfc03432e endpointID=1030 k8sNamespace=openstack k8sPodName=cinder-bootstrap-m6z2d subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=c8e936fa-0eef-40e9-8db2-8b7f2280879a k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=c8e936fa-0eef-40e9-8db2-8b7f2280879a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=4bfc03432e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1030 identity=33465 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-bootstrap-m6z2d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 45a48b01-5d05-40f4-a1cf-9e268b38c982 default }" containerID=1fb9ea8ecdbe3adac0a1501bf3b8fe3781a5fb98512d19053fc385153c1611d1 datapathConfiguration="&{false false false false false }" interface=lxcdb9b16f3cece k8sPodName=openstack/placement-api-6d555895dd-rjd66 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1fb9ea8ecd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1921 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/placement-api-6d555895dd-rjd66 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1fb9ea8ecd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1921 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/placement-api-6d555895dd-rjd66 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1fb9ea8ecd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1921 identity=36569 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/placement-api-6d555895dd-rjd66 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1fb9ea8ecd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1921 identity=36569 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/placement-api-6d555895dd-rjd66 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.121 99f3e7ca-78c4-43f4-a6a8-6e4c7364ded6 default }" containerID=a23c2724a7dcc384ba7bc940c524bc25b1d36f17fea857a28ddfc40ad750df0c datapathConfiguration="&{false false false false false }" interface=lxc95c0830fc356 k8sPodName=openstack/placement-db-init-nqn69 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a23c2724a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1954 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/placement-db-init-nqn69 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a23c2724a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1954 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=c1b6ecf5-368f-4690-b322-21dbc99445bf,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=c1b6ecf5-368f-4690-b322-21dbc99445bf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/placement-db-init-nqn69 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=c1b6ecf5-368f-4690-b322-21dbc99445bf;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=c1b6ecf5-368f-4690-b322-21dbc99445bf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a23c2724a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1954 identity=19624 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=c1b6ecf5-368f-4690-b322-21dbc99445bf,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=c1b6ecf5-368f-4690-b322-21dbc99445bf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/placement-db-init-nqn69 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a23c2724a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1954 identity=19624 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/placement-db-init-nqn69 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1fb9ea8ecd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1921 identity=36569 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/placement-api-6d555895dd-rjd66 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1fb9ea8ecd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1921 identity=36569 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/placement-api-6d555895dd-rjd66 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a23c2724a7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1954 identity=19624 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/placement-db-init-nqn69 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a23c2724a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1954 identity=19624 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/placement-db-init-nqn69 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a23c2724a7 endpointID=1954 k8sNamespace=openstack k8sPodName=placement-db-init-nqn69 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=c1b6ecf5-368f-4690-b322-21dbc99445bf k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=c1b6ecf5-368f-4690-b322-21dbc99445bf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=a23c2724a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1954 identity=19624 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/placement-db-init-nqn69 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 999b10b0-cd19-4fe2-ad0d-bfff1c27cbee default }" containerID=68379dc89bbb08240da42c53a9eef51ceaa004d31fac64c94f53f3db2b3a6009 datapathConfiguration="&{false false false false false }" interface=lxc1956d8b40206 k8sPodName=openstack/placement-db-sync-66ssb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68379dc89b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1283 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/placement-db-sync-66ssb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68379dc89b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1283 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=c9e90cf2-3dc6-485f-965a-ea8b0e69c4af,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=c9e90cf2-3dc6-485f-965a-ea8b0e69c4af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/placement-db-sync-66ssb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=c9e90cf2-3dc6-485f-965a-ea8b0e69c4af;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=c9e90cf2-3dc6-485f-965a-ea8b0e69c4af;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68379dc89b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1283 identity=8939 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=c9e90cf2-3dc6-485f-965a-ea8b0e69c4af,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=c9e90cf2-3dc6-485f-965a-ea8b0e69c4af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/placement-db-sync-66ssb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68379dc89b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1283 identity=8939 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/placement-db-sync-66ssb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=68379dc89b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1283 identity=8939 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/placement-db-sync-66ssb subsys=endpoint level=info msg="Successful endpoint creation" containerID=68379dc89b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1283 identity=8939 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/placement-db-sync-66ssb subsys=daemon level=info msg="Delete endpoint request" containerID=68379dc89b endpointID=1283 k8sNamespace=openstack k8sPodName=placement-db-sync-66ssb subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=c9e90cf2-3dc6-485f-965a-ea8b0e69c4af k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=c9e90cf2-3dc6-485f-965a-ea8b0e69c4af k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=68379dc89b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1283 identity=8939 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/placement-db-sync-66ssb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.52 7c2b6c70-d178-4bf4-aafd-7dc20a8103f6 default }" containerID=59af2c5b05e6693afe233d17b0f2d4ce3a0b26456fdefe5c00d0a9844b0b6eb4 datapathConfiguration="&{false false false false false }" interface=lxcfa13801d880f k8sPodName=openstack/placement-ks-service-wwkbc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=59af2c5b05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2098 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/placement-ks-service-wwkbc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=59af2c5b05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2098 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=f302899a-95cd-417a-b77c-97de8b43eee9,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=f302899a-95cd-417a-b77c-97de8b43eee9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/placement-ks-service-wwkbc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=f302899a-95cd-417a-b77c-97de8b43eee9;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=f302899a-95cd-417a-b77c-97de8b43eee9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=59af2c5b05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2098 identity=8546 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=f302899a-95cd-417a-b77c-97de8b43eee9,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=f302899a-95cd-417a-b77c-97de8b43eee9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/placement-ks-service-wwkbc oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=59af2c5b05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2098 identity=8546 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/placement-ks-service-wwkbc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=59af2c5b05 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2098 identity=8546 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/placement-ks-service-wwkbc subsys=endpoint level=info msg="Successful endpoint creation" containerID=59af2c5b05 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2098 identity=8546 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/placement-ks-service-wwkbc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=59af2c5b05 endpointID=2098 k8sNamespace=openstack k8sPodName=placement-ks-service-wwkbc subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=f302899a-95cd-417a-b77c-97de8b43eee9 k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=f302899a-95cd-417a-b77c-97de8b43eee9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=59af2c5b05 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2098 identity=8546 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/placement-ks-service-wwkbc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.38 ebf7f71d-8da5-434c-8e45-a724397cfcd3 default }" containerID=68dd1d7fbc15485668bc22198afee0c50a7863aed98731a284cbe4eaa5ad834e datapathConfiguration="&{false false false false false }" interface=lxca2857d881a48 k8sPodName=openstack/placement-ks-user-mhzjz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68dd1d7fbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=707 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/placement-ks-user-mhzjz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68dd1d7fbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=707 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=7d281853-6b3d-41b4-bfb1-53315a387988,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=7d281853-6b3d-41b4-bfb1-53315a387988,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/placement-ks-user-mhzjz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=7d281853-6b3d-41b4-bfb1-53315a387988;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=7d281853-6b3d-41b4-bfb1-53315a387988;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68dd1d7fbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=707 identity=41406 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=7d281853-6b3d-41b4-bfb1-53315a387988,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=7d281853-6b3d-41b4-bfb1-53315a387988,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/placement-ks-user-mhzjz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68dd1d7fbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=707 identity=41406 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/placement-ks-user-mhzjz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=68dd1d7fbc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=707 identity=41406 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/placement-ks-user-mhzjz subsys=endpoint level=info msg="Successful endpoint creation" containerID=68dd1d7fbc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=707 identity=41406 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/placement-ks-user-mhzjz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=68dd1d7fbc endpointID=707 k8sNamespace=openstack k8sPodName=placement-ks-user-mhzjz subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=7d281853-6b3d-41b4-bfb1-53315a387988 k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=7d281853-6b3d-41b4-bfb1-53315a387988 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=68dd1d7fbc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=707 identity=41406 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/placement-ks-user-mhzjz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 eba6c48c-0947-4cc0-aad1-0b5ad1aafd13 default }" containerID=0b571284825ff843445df6c43afa8feed52651bfdc6196f54a5623272cfcd5ac datapathConfiguration="&{false false false false false }" interface=lxc425a19c3ca8b k8sPodName=openstack/placement-ks-endpoints-ksbjc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b57128482 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=741 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/placement-ks-endpoints-ksbjc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b57128482 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=741 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=00e99afc-3074-40af-8316-a37b96f9b789,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=00e99afc-3074-40af-8316-a37b96f9b789,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/placement-ks-endpoints-ksbjc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=00e99afc-3074-40af-8316-a37b96f9b789;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=00e99afc-3074-40af-8316-a37b96f9b789;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b57128482 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=741 identity=43316 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=00e99afc-3074-40af-8316-a37b96f9b789,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=00e99afc-3074-40af-8316-a37b96f9b789,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/placement-ks-endpoints-ksbjc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b57128482 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=741 identity=43316 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/placement-ks-endpoints-ksbjc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0b57128482 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=741 identity=43316 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/placement-ks-endpoints-ksbjc subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b57128482 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=741 identity=43316 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/placement-ks-endpoints-ksbjc subsys=daemon level=info msg="Delete endpoint request" containerID=0b57128482 endpointID=741 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-ksbjc subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=00e99afc-3074-40af-8316-a37b96f9b789 k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=00e99afc-3074-40af-8316-a37b96f9b789 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=0b57128482 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=741 identity=43316 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/placement-ks-endpoints-ksbjc subsys=endpoint