level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.059884ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="54.242µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="922.45µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="4.84µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=92.350018ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="12.65µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="18.44µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="48.072µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="53.722µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="91.653µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="449.334µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.58µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=8.471611ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=5.924199ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="31.921µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="34.081µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="214.027µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="76.622µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="55.102µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=51.296318ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="75.333µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="9.101µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="1.33µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.227.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=205.517901ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="3.6µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.861111ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.58µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.977944ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="5.31µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="3.47µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.2µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.81µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="4.45µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="22.77µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="20.861µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="41.831µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="337.32µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.62µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="8.92µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="231.067µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="828.326µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.27453ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="5.19µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="28.221µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=162.253.55.227 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=162.253.55.227 ipAddr.ipv6="" k8sNodeIP=162.253.55.227 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 162.253.55.227" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.98" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 162.253.55.227" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 162.253.55.227} {CiliumInternalIP 10.0.0.98}] 10.0.0.0/24 [] [] 10.0.0.23 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:46243" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.7938401s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="19.55µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="7.73µs" function="*job.group.Start" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="47.922µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="7.99µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2684 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2684 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2684 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.823809524s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=301.435614ms file-path=/var/run/cilium/state/templates/9ff94aab91546c2a511d5bcea058505ddca3b5b744ebc27bf9d51b0c630bc3f8/bpf_host.o subsys=datapath-loader level=info msg="Create endpoint request" addressing="&{10.0.0.75 c124546a-9c18-406c-863e-bd453229ad05 default }" containerID=fd26493596016384f619b6ed71384a144187df1156a78fda61197d3cbf5d3274 datapathConfiguration="&{false false false false false }" interface=lxc13af4dc60b09 k8sPodName=kube-system/coredns-67659f764b-tdnk7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd26493596 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=305 ipv4=10.0.0.75 ipv6= k8sPodName=kube-system/coredns-67659f764b-tdnk7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd26493596 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=305 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.75 ipv6= k8sPodName=kube-system/coredns-67659f764b-tdnk7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fd26493596 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=305 identity=778 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.75 ipv6= k8sPodName=kube-system/coredns-67659f764b-tdnk7 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fd26493596 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=305 identity=778 ipv4=10.0.0.75 ipv6= k8sPodName=kube-system/coredns-67659f764b-tdnk7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 6780c203-2a41-46af-804d-9227459fcbc0 default }" containerID=e62365c75a693e60011f867e2bcdc229c17502dc279a2f73d7746a9d6f5d690a datapathConfiguration="&{false false false false false }" interface=lxc4a1f64726731 k8sPodName=cert-manager/cert-manager-75c4c745bc-tx9t8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e62365c75a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2156 ipv4=10.0.0.207 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-tx9t8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e62365c75a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2156 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.207 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-tx9t8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e62365c75a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2156 identity=16717 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.207 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-tx9t8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e62365c75a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2156 identity=16717 ipv4=10.0.0.207 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-tx9t8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 a1e24923-2972-4d4d-9620-89f7fcc10932 default }" containerID=7deaa2714523e641ae1d411c0995ebb49cf350b3ba99e7301db1750fc0bb8f06 datapathConfiguration="&{false false false false false }" interface=lxcf1665df27b83 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6bj96 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7deaa27145 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=518 ipv4=10.0.0.230 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6bj96 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7deaa27145 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=518 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.230 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6bj96 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2684 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.148 31083d3f-6f85-4709-8c03-f273b859f104 default }" containerID=ad89c080441c107f0f31f39c527a51e26002c6c1f9a62281cdc80d81fd1b441e datapathConfiguration="&{false false false false false }" interface=lxc18f1344ce699 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7bp75 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.77 fefc87f2-203b-4876-a086-2aa3450ddaa8 default }" containerID=91e5683b96f38ab0c7caf9426399864b4f956853a696755e537f7b2984d06527 datapathConfiguration="&{false false false false false }" interface=lxc765623b4d77b k8sPodName=kube-system/coredns-67659f764b-xzws5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad89c08044 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2394 ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7bp75 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 5803cc94-fc19-438f-bfbc-871f20456d5f default }" containerID=adcf6734ff8e3cb2c8e5d6f729cd709eb4202b92bf44a69efdb70e32071c6fc8 datapathConfiguration="&{false false false false false }" interface=lxc9adc9dcbf71b k8sPodName=kube-system/coredns-7c96b6546b-8jthb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=91e5683b96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1728 ipv4=10.0.0.77 ipv6= k8sPodName=kube-system/coredns-67659f764b-xzws5 subsys=endpoint level=info msg="New endpoint" containerID=adcf6734ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=474 ipv4=10.0.0.223 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8jthb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad89c08044 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2394 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7bp75 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=91e5683b96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1728 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.77 ipv6= k8sPodName=kube-system/coredns-67659f764b-xzws5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=adcf6734ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=474 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.223 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8jthb subsys=endpoint level=info msg="Identity of endpoint changed" containerID=91e5683b96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1728 identity=778 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.77 ipv6= k8sPodName=kube-system/coredns-67659f764b-xzws5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=91e5683b96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1728 identity=778 ipv4=10.0.0.77 ipv6= k8sPodName=kube-system/coredns-67659f764b-xzws5 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=adcf6734ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=474 identity=778 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.223 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8jthb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=adcf6734ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=474 identity=778 ipv4=10.0.0.223 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8jthb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 1e218b07-5d8b-41d5-ae44-6db3c6b0114f default }" containerID=a4a800527a0fda8f0fa43a66b481635367c4fdad508cbe18c8c4c5d239647ebc datapathConfiguration="&{false false false false false }" interface=lxcebcb27a9f22c k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qzhmh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a4a800527a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qzhmh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a4a800527a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qzhmh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.168 7207e5b4-1f02-4f5c-bfd1-abede2ea88d0 default }" containerID=8af8cd3400ccab6ee9b5aeb2bdf1adb5ff45766a617b1cf7363b4ede4dd838f8 datapathConfiguration="&{false false false false false }" interface=lxca52afec5ed80 k8sPodName=cert-manager/cert-manager-startupapicheck-dt7km labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8af8cd3400 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=667 ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dt7km subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8af8cd3400 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=667 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=a9d54b7c-ec3a-4d60-8789-b531aecafa19,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=a9d54b7c-ec3a-4d60-8789-b531aecafa19,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dt7km subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7deaa27145 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=518 identity=5983 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.230 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6bj96 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=7deaa27145 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=518 identity=5983 ipv4=10.0.0.230 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6bj96 subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2191 ipv4=10.0.0.23 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2191 identityLabels="reserved:health" ipv4=10.0.0.23 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2191 identity=4 identityLabels="reserved:health" ipv4=10.0.0.23 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a4a800527a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qzhmh line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=8af8cd3400 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=667 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dt7km line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=ad89c08044 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2394 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7bp75 line=611 subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=1.098899921s file-path=/var/run/cilium/state/templates/f02efa49914ee1feb553fae913c3195ca3f01b66a7ed1c232a0da69ec895d2c4/bpf_lxc.o subsys=datapath-loader level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad89c08044 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2394 identity=5718 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7bp75 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad89c08044 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2394 identity=5718 ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7bp75 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=adcf6734ff datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=474 identity=778 ipv4=10.0.0.223 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8jthb subsys=endpoint level=info msg="Successful endpoint creation" containerID=adcf6734ff datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=474 identity=778 ipv4=10.0.0.223 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8jthb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fd26493596 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=305 identity=778 ipv4=10.0.0.75 ipv6= k8sPodName=kube-system/coredns-67659f764b-tdnk7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd26493596 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=305 identity=778 ipv4=10.0.0.75 ipv6= k8sPodName=kube-system/coredns-67659f764b-tdnk7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7deaa27145 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=518 identity=5983 ipv4=10.0.0.230 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6bj96 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7deaa27145 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=518 identity=5983 ipv4=10.0.0.230 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6bj96 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e62365c75a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2156 identity=16717 ipv4=10.0.0.207 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-tx9t8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e62365c75a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2156 identity=16717 ipv4=10.0.0.207 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-tx9t8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2191 identity=4 ipv4=10.0.0.23 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=91e5683b96 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1728 identity=778 ipv4=10.0.0.77 ipv6= k8sPodName=kube-system/coredns-67659f764b-xzws5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=91e5683b96 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1728 identity=778 ipv4=10.0.0.77 ipv6= k8sPodName=kube-system/coredns-67659f764b-xzws5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ad89c08044 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2394 identity=5718 ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7bp75 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad89c08044 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2394 identity=5718 ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7bp75 subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a4a800527a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qzhmh line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=8af8cd3400 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=667 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dt7km line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a4a800527a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identity=11179 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qzhmh oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=a4a800527a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identity=11179 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qzhmh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a4a800527a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=660 identity=11179 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qzhmh subsys=endpoint level=info msg="Successful endpoint creation" containerID=a4a800527a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=660 identity=11179 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qzhmh subsys=daemon level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=a9d54b7c-ec3a-4d60-8789-b531aecafa19;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=a9d54b7c-ec3a-4d60-8789-b531aecafa19;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8af8cd3400 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=667 identity=13102 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=a9d54b7c-ec3a-4d60-8789-b531aecafa19,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=a9d54b7c-ec3a-4d60-8789-b531aecafa19,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dt7km oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8af8cd3400 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=667 identity=13102 ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dt7km subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8af8cd3400 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=667 identity=13102 ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dt7km subsys=endpoint level=info msg="Successful endpoint creation" containerID=8af8cd3400 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=667 identity=13102 ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dt7km subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=adcf6734ff endpointID=474 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-8jthb subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=adcf6734ff datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=474 identity=778 ipv4=10.0.0.223 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8jthb subsys=endpoint level=info msg="Delete endpoint request" containerID=8af8cd3400 endpointID=667 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-dt7km subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=a9d54b7c-ec3a-4d60-8789-b531aecafa19 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=a9d54b7c-ec3a-4d60-8789-b531aecafa19 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=8af8cd3400 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=667 identity=13102 ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dt7km subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 f73b73ca-4511-4d60-837c-48a9467ef23a default }" containerID=bf5672de20088b003052c7fa1d8447f4a1075e7abc8ccd8871c7413834997b89 datapathConfiguration="&{false false false false false }" interface=lxcc8bedbdd4a96 k8sPodName=ingress-nginx/ingress-nginx-admission-create-vkw8p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf5672de20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=528 ipv4=10.0.0.58 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-vkw8p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf5672de20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=528 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=4d3aca6e-b60d-462e-b330-e5b24f1a9f1d,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=4d3aca6e-b60d-462e-b330-e5b24f1a9f1d,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.58 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-vkw8p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=4d3aca6e-b60d-462e-b330-e5b24f1a9f1d;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=4d3aca6e-b60d-462e-b330-e5b24f1a9f1d;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf5672de20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=528 identity=45372 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=4d3aca6e-b60d-462e-b330-e5b24f1a9f1d,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=4d3aca6e-b60d-462e-b330-e5b24f1a9f1d,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.58 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-vkw8p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf5672de20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=528 identity=45372 ipv4=10.0.0.58 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-vkw8p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bf5672de20 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=528 identity=45372 ipv4=10.0.0.58 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-vkw8p subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf5672de20 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=528 identity=45372 ipv4=10.0.0.58 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-vkw8p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bf5672de20 endpointID=528 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-vkw8p subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=4d3aca6e-b60d-462e-b330-e5b24f1a9f1d k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=4d3aca6e-b60d-462e-b330-e5b24f1a9f1d k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=bf5672de20 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=528 identity=45372 ipv4=10.0.0.58 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-vkw8p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 8022e3a4-2856-4b89-b9e0-71533263e07f default }" containerID=c13dc1e0370235c3700d8b39a0ea715d3ad80fdc08f4565da8675803196c87c3 datapathConfiguration="&{false false false false false }" interface=lxc6e9244094258 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-phbm7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c13dc1e037 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3615 ipv4=10.0.0.59 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-phbm7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c13dc1e037 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3615 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.59 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-phbm7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c13dc1e037 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3615 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.59 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-phbm7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c13dc1e037 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3615 identity=49978 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.59 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-phbm7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c13dc1e037 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3615 identity=49978 ipv4=10.0.0.59 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-phbm7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c13dc1e037 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3615 identity=49978 ipv4=10.0.0.59 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-phbm7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c13dc1e037 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3615 identity=49978 ipv4=10.0.0.59 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-phbm7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.86 7dd3d35f-69e0-44ec-b863-d9f837b2d147 default }" containerID=46aab335cd3e65794fcf1131f96751c058c8ef415e219e3fab2b630950d9e8cb datapathConfiguration="&{false false false false false }" interface=lxc0ec598a759d5 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-lw9dq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=46aab335cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3221 ipv4=10.0.0.86 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-lw9dq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=46aab335cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3221 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=e4dad2b3-031a-4adc-ab49-0e8cac20be40,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=e4dad2b3-031a-4adc-ab49-0e8cac20be40,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.86 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-lw9dq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=e4dad2b3-031a-4adc-ab49-0e8cac20be40;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=e4dad2b3-031a-4adc-ab49-0e8cac20be40;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=46aab335cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3221 identity=25360 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=e4dad2b3-031a-4adc-ab49-0e8cac20be40,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=e4dad2b3-031a-4adc-ab49-0e8cac20be40,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.86 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-lw9dq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=46aab335cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3221 identity=25360 ipv4=10.0.0.86 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-lw9dq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=46aab335cd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3221 identity=25360 ipv4=10.0.0.86 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-lw9dq subsys=endpoint level=info msg="Successful endpoint creation" containerID=46aab335cd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3221 identity=25360 ipv4=10.0.0.86 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-lw9dq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=46aab335cd endpointID=3221 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-lw9dq subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=e4dad2b3-031a-4adc-ab49-0e8cac20be40 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=e4dad2b3-031a-4adc-ab49-0e8cac20be40 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=46aab335cd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3221 identity=25360 ipv4=10.0.0.86 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-lw9dq subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=f4211f79-499e-4b24-b462-259058c4f1cb] Description:}]" policyAddRequest=18928898-e198-4464-952c-394c92ec74a3 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=18928898-e198-4464-952c-394c92ec74a3 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=001a9332-a6f1-4c31-badd-00fea278c7ec] Description:}]" policyAddRequest=2ec6c449-dca7-4599-8915-d94f44092bea subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=2ec6c449-dca7-4599-8915-d94f44092bea policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.228 91cf493a-28e8-411c-831d-cdd46dc5ac92 default }" containerID=f019f14f88d8e3cfce5877a1eb5f2dfab32fa8e6b4ff6f5f355e67a96817cc21 datapathConfiguration="&{false false false false false }" interface=lxc1ecf1c232bce k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-p9lqf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f019f14f88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-p9lqf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f019f14f88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-p9lqf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f019f14f88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-p9lqf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f019f14f88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identity=3923 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-p9lqf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f019f14f88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identity=3923 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-p9lqf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f019f14f88 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=249 identity=3923 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-p9lqf subsys=endpoint level=info msg="Successful endpoint creation" containerID=f019f14f88 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=249 identity=3923 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-p9lqf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.232 e189e05f-05d3-46ad-a1f9-ba7eb66a9de7 default }" containerID=f5079b2b00750202535e15f2a62d29280f3b26c417ae13dbb5429eedc58d6663 datapathConfiguration="&{false false false false false }" interface=lxcc7b9e44a8dca k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-xh6kr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5079b2b00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-xh6kr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5079b2b00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-xh6kr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f5079b2b00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 identity=58345 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-xh6kr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f5079b2b00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 identity=58345 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-xh6kr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f5079b2b00 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=88 identity=58345 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-xh6kr subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5079b2b00 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=88 identity=58345 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-xh6kr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.118 a11d3761-f0fc-4824-8904-d19611fd3a95 default }" containerID=2295991395ee268f95b7da5f3039d2509d12d60202ba88637b13d805f060bd9f datapathConfiguration="&{false false false false false }" interface=lxc8dd7c25154a2 k8sPodName=openstack/pxc-operator-69cb5bbdb9-k84k5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2295991395 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=959 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-k84k5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2295991395 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=959 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-k84k5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2295991395 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=959 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-k84k5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2295991395 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=959 identity=11616 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-k84k5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2295991395 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=959 identity=11616 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-k84k5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2295991395 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=959 identity=11616 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-k84k5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2295991395 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=959 identity=11616 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-k84k5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.112 3893d38d-b407-4183-bda3-a23c03ac6a36 default }" containerID=fc6b678634e02573b48af91fa1d075e7b35a92a6ebc96e8ec994bedea12fb488 datapathConfiguration="&{false false false false false }" interface=lxc030393a6310d k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc6b678634 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1381 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc6b678634 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1381 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc6b678634 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1381 identity=28343 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc6b678634 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1381 identity=28343 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fc6b678634 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1381 identity=28343 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc6b678634 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1381 identity=28343 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.43 f97e63a7-585a-42cd-8a1d-6b4feee6a01a default }" containerID=99eb476fe637c92d679468382c236dfd604ce76190564a4a5ff5be4e9acc5683 datapathConfiguration="&{false false false false false }" interface=lxc537f544b79de k8sPodName=local-path-storage/helper-pod-create-pvc-c382c12f-b05d-4fb1-b9ff-4ef0694f2883 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=99eb476fe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1338 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c382c12f-b05d-4fb1-b9ff-4ef0694f2883 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=99eb476fe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1338 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c382c12f-b05d-4fb1-b9ff-4ef0694f2883 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=99eb476fe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1338 identity=1469 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c382c12f-b05d-4fb1-b9ff-4ef0694f2883 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=99eb476fe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1338 identity=1469 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c382c12f-b05d-4fb1-b9ff-4ef0694f2883 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=99eb476fe6 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1338 identity=1469 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c382c12f-b05d-4fb1-b9ff-4ef0694f2883 subsys=endpoint level=info msg="Successful endpoint creation" containerID=99eb476fe6 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1338 identity=1469 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c382c12f-b05d-4fb1-b9ff-4ef0694f2883 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=99eb476fe6 endpointID=1338 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c382c12f-b05d-4fb1-b9ff-4ef0694f2883 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=99eb476fe6 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1338 identity=1469 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c382c12f-b05d-4fb1-b9ff-4ef0694f2883 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 63d11204-18a6-42f8-825e-a64c0a72f6e3 default }" containerID=7de94f19d39ea4211cda6675a1c33b838e3a51b527ebe4a8048fd539a3905401 datapathConfiguration="&{false false false false false }" interface=lxc21e6629cef14 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7de94f19d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2861 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7de94f19d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2861 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7de94f19d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2861 identity=33712 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7de94f19d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2861 identity=33712 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7de94f19d3 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2861 identity=33712 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7de94f19d3 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2861 identity=33712 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=df3c716c-dac4-4bcb-9488-414e4ee39e72] Description:}]" policyAddRequest=c4e94e02-35cc-4e9c-93aa-2d81f14f6549 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=c4e94e02-35cc-4e9c-93aa-2d81f14f6549 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.174 6a683786-5294-4a5d-bf41-e07abb8afcaf default }" containerID=27cc857a5634af4a255274b48b4fc9481364105718875ea0593b8d8ca1416d06 datapathConfiguration="&{false false false false false }" interface=lxc6b632098301f k8sPodName=local-path-storage/helper-pod-create-pvc-8de16ddf-8b49-4493-b8f0-d2295c66273f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=27cc857a56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=644 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8de16ddf-8b49-4493-b8f0-d2295c66273f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=27cc857a56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=644 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8de16ddf-8b49-4493-b8f0-d2295c66273f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=27cc857a56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=644 identity=1469 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8de16ddf-8b49-4493-b8f0-d2295c66273f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=27cc857a56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=644 identity=1469 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8de16ddf-8b49-4493-b8f0-d2295c66273f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=27cc857a56 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=644 identity=1469 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8de16ddf-8b49-4493-b8f0-d2295c66273f subsys=endpoint level=info msg="Successful endpoint creation" containerID=27cc857a56 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=644 identity=1469 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8de16ddf-8b49-4493-b8f0-d2295c66273f subsys=daemon level=info msg="Delete endpoint request" containerID=27cc857a56 endpointID=644 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8de16ddf-8b49-4493-b8f0-d2295c66273f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=27cc857a56 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=644 identity=1469 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8de16ddf-8b49-4493-b8f0-d2295c66273f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 6dd17a0b-beea-4281-8be3-8e36c13a4953 default }" containerID=953833e6404b0ed11b62c1de96988f525c18277ad95267e8da27d473499e5734 datapathConfiguration="&{false false false false false }" interface=lxc1bcf1799f70a k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=953833e640 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=953833e640 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=953833e640 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identity=827 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=953833e640 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identity=827 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=953833e640 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=439 identity=827 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=953833e640 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=439 identity=827 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=7c028232-2de8-447d-b784-15049239fbf1] Description:}]" policyAddRequest=578ce84e-b6ec-451a-a5c0-82b868074982 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=578ce84e-b6ec-451a-a5c0-82b868074982 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.121 4857a97c-64cc-41f6-aee1-e4157b5251fc default }" containerID=4365713bb9fbaefd7a6d81356520a32847ff37513c959c4933ae0cdff8624836 datapathConfiguration="&{false false false false false }" interface=lxcc2060b2481df k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4365713bb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2224 ipv4=10.0.0.121 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4365713bb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2224 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.121 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4365713bb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2224 identity=14824 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.121 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4365713bb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2224 identity=14824 ipv4=10.0.0.121 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4365713bb9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2224 identity=14824 ipv4=10.0.0.121 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4365713bb9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2224 identity=14824 ipv4=10.0.0.121 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.00939440258633517 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.192 d8362686-7326-4fb2-bee4-35489957698c default }" containerID=0ef3cefa9da9c041a9f03143366e91893b16156abd03afc57f5c7363d2b7f7ea datapathConfiguration="&{false false false false false }" interface=lxc4bea210009f8 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nvmvl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ef3cefa9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3692 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nvmvl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ef3cefa9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3692 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nvmvl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0ef3cefa9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3692 identity=15053 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nvmvl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ef3cefa9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3692 identity=15053 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nvmvl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0ef3cefa9d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3692 identity=15053 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nvmvl subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ef3cefa9d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3692 identity=15053 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nvmvl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.123 7102a3e7-581d-4987-bdfe-d5b294bd3f14 default }" containerID=74f9078f72df6d223c8135c71d41319674ec5fea36ce02464ea789c852e996d8 datapathConfiguration="&{false false false false false }" interface=lxcd0d57258c4be k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-pvth9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74f9078f72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-pvth9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.222 9f010d8b-3e95-44cb-9777-22c2fbbb6ad7 default }" containerID=4061e5a13610256a53c28f4316c39afc3bc89f50dbc6a4fdad21f6a151a3c4ad datapathConfiguration="&{false false false false false }" interface=lxc9d408d09a172 k8sPodName=monitoring/node-feature-discovery-worker-cr75f labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=74f9078f72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-pvth9 subsys=endpoint level=info msg="New endpoint" containerID=4061e5a136 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1742 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-cr75f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=4061e5a136 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1742 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-cr75f subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=74f9078f72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identity=921 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-pvth9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=74f9078f72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identity=921 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-pvth9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4061e5a136 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1742 identity=41252 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-cr75f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4061e5a136 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1742 identity=41252 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-cr75f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=74f9078f72 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=46 identity=921 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-pvth9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=74f9078f72 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=46 identity=921 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-pvth9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4061e5a136 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1742 identity=41252 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-cr75f subsys=endpoint level=info msg="Successful endpoint creation" containerID=4061e5a136 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1742 identity=41252 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-cr75f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.12 84e490a1-1a9b-4398-90a1-9644c58eb1f8 default }" containerID=ad9a6e5383d6a11d41dd72c58e8d763431237eecdde0e5984aeb9fef87ba7ca8 datapathConfiguration="&{false false false false false }" interface=lxc833c8f44223e k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-np5nb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad9a6e5383 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 ipv4=10.0.0.12 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-np5nb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad9a6e5383 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.12 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-np5nb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad9a6e5383 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 identity=15513 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.12 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-np5nb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad9a6e5383 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 identity=15513 ipv4=10.0.0.12 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-np5nb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ad9a6e5383 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=128 identity=15513 ipv4=10.0.0.12 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-np5nb subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad9a6e5383 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=128 identity=15513 ipv4=10.0.0.12 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-np5nb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2684 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-171-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02684 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02684 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02684 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02684:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2684 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 9cce8590-51ec-4558-a7db-4d2999454bf5 default }" containerID=83904d02ef113e51e8b40925e4b74aba1b018af5d3abeb13956d491788004d2e datapathConfiguration="&{false false false false false }" interface=lxc2241ec775242 k8sPodName=monitoring/kube-prometheus-stack-admission-create-8mmz4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=83904d02ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1476 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8mmz4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=83904d02ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1476 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=8c2f768a-0679-43fd-bb62-867e2c25a128,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=8c2f768a-0679-43fd-bb62-867e2c25a128,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8mmz4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=8c2f768a-0679-43fd-bb62-867e2c25a128;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=8c2f768a-0679-43fd-bb62-867e2c25a128;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=83904d02ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1476 identity=31976 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=8c2f768a-0679-43fd-bb62-867e2c25a128,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=8c2f768a-0679-43fd-bb62-867e2c25a128,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8mmz4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=83904d02ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1476 identity=31976 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8mmz4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=83904d02ef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1476 identity=31976 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8mmz4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=83904d02ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1476 identity=31976 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8mmz4 subsys=daemon level=info msg="Delete endpoint request" containerID=83904d02ef endpointID=1476 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-8mmz4 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=8c2f768a-0679-43fd-bb62-867e2c25a128 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=8c2f768a-0679-43fd-bb62-867e2c25a128 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=83904d02ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1476 identity=31976 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8mmz4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 15d14404-823f-4055-8587-023373f6db6d default }" containerID=44be39097997285d6b03e51610145786ca49c68fa6a946d8d97befdc3460afa0 datapathConfiguration="&{false false false false false }" interface=lxcd85be615033c k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fvmvs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44be390979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2406 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fvmvs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44be390979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2406 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fvmvs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.114 6326f919-d131-4a83-b2f7-253a283ae6be default }" containerID=ed68c159978de38867a7676fc6a2ff97c4e99f95145520c2304b3af24a74242d datapathConfiguration="&{false false false false false }" interface=lxc5efb349116e8 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-brvqb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed68c15997 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2080 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-brvqb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed68c15997 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2080 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-brvqb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ed68c15997 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2080 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-brvqb line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=44be390979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2406 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fvmvs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44be390979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2406 identity=40138 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fvmvs oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=44be390979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2406 identity=40138 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fvmvs subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed68c15997 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2080 identity=9682 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-brvqb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed68c15997 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2080 identity=9682 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-brvqb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 3fc01574-9ba3-4a8b-b554-6b435b43c50c default }" containerID=828a6b85307b5df1ddc45e6f95d3a588e5e6592f686bd87074403476d35e5673 datapathConfiguration="&{false false false false false }" interface=lxc3976ab615969 k8sPodName=monitoring/kube-prometheus-stack-grafana-77f75fb6c6-lhlrx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=828a6b8530 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2222 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-77f75fb6c6-lhlrx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=828a6b8530 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2222 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-77f75fb6c6-lhlrx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=828a6b8530 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2222 identity=38284 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-77f75fb6c6-lhlrx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=828a6b8530 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2222 identity=38284 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-77f75fb6c6-lhlrx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=44be390979 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2406 identity=40138 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fvmvs subsys=endpoint level=info msg="Successful endpoint creation" containerID=44be390979 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2406 identity=40138 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fvmvs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ed68c15997 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2080 identity=9682 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-brvqb subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed68c15997 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2080 identity=9682 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-brvqb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=828a6b8530 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2222 identity=38284 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-77f75fb6c6-lhlrx subsys=endpoint level=info msg="Successful endpoint creation" containerID=828a6b8530 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2222 identity=38284 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-77f75fb6c6-lhlrx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.115 47f60b36-9aab-487e-ad65-03a24225aedf default }" containerID=ef92625b8e7b5221b829959c56629f88aa597661dd3e613c1d1df69d65c4084e datapathConfiguration="&{false false false false false }" interface=lxcc56f47ef59c3 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bps4n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef92625b8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bps4n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef92625b8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=aa7c2626-c789-401d-895d-c70a3090ddc6,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=aa7c2626-c789-401d-895d-c70a3090ddc6,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bps4n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=aa7c2626-c789-401d-895d-c70a3090ddc6;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=aa7c2626-c789-401d-895d-c70a3090ddc6;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ef92625b8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 identity=61279 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=aa7c2626-c789-401d-895d-c70a3090ddc6,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=aa7c2626-c789-401d-895d-c70a3090ddc6,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bps4n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef92625b8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 identity=61279 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bps4n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ef92625b8e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=690 identity=61279 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bps4n subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef92625b8e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=690 identity=61279 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bps4n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ef92625b8e endpointID=690 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-bps4n subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=aa7c2626-c789-401d-895d-c70a3090ddc6 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=aa7c2626-c789-401d-895d-c70a3090ddc6 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=ef92625b8e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=690 identity=61279 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bps4n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 4330b700-4ac2-4c9e-b335-130cca8eec15 default }" containerID=2b5f2bc48b60cd994b1d0afd623312bb44e84d8d499462244f1acc791ca32067 datapathConfiguration="&{false false false false false }" interface=lxc89eb5c10ae66 k8sPodName=local-path-storage/helper-pod-create-pvc-4a8b1a24-9e28-43f4-ae17-6133cbc1d882 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b5f2bc48b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=534 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a8b1a24-9e28-43f4-ae17-6133cbc1d882 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b5f2bc48b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=534 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a8b1a24-9e28-43f4-ae17-6133cbc1d882 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b5f2bc48b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=534 identity=1469 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a8b1a24-9e28-43f4-ae17-6133cbc1d882 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b5f2bc48b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=534 identity=1469 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a8b1a24-9e28-43f4-ae17-6133cbc1d882 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2b5f2bc48b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=534 identity=1469 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a8b1a24-9e28-43f4-ae17-6133cbc1d882 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b5f2bc48b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=534 identity=1469 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a8b1a24-9e28-43f4-ae17-6133cbc1d882 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.245 bb86b357-6105-4716-8fc3-4f18c6a8f919 default }" containerID=a1ebf8b8500fbc181b5db150918e31fa198f621d90675480f69ac1cdd41c0cc4 datapathConfiguration="&{false false false false false }" interface=lxc9921e5c593fe k8sPodName=local-path-storage/helper-pod-create-pvc-aaad5a0a-666b-48de-a614-f91178df55d3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1ebf8b850 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2858 ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aaad5a0a-666b-48de-a614-f91178df55d3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1ebf8b850 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2858 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aaad5a0a-666b-48de-a614-f91178df55d3 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a1ebf8b850 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2858 identity=1469 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aaad5a0a-666b-48de-a614-f91178df55d3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1ebf8b850 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2858 identity=1469 ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aaad5a0a-666b-48de-a614-f91178df55d3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a1ebf8b850 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2858 identity=1469 ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aaad5a0a-666b-48de-a614-f91178df55d3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1ebf8b850 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2858 identity=1469 ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aaad5a0a-666b-48de-a614-f91178df55d3 subsys=daemon level=info msg="Delete endpoint request" containerID=2b5f2bc48b endpointID=534 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4a8b1a24-9e28-43f4-ae17-6133cbc1d882 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=a1ebf8b850 endpointID=2858 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-aaad5a0a-666b-48de-a614-f91178df55d3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2b5f2bc48b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=534 identity=1469 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a8b1a24-9e28-43f4-ae17-6133cbc1d882 subsys=endpoint level=info msg="Removed endpoint" containerID=a1ebf8b850 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2858 identity=1469 ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aaad5a0a-666b-48de-a614-f91178df55d3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 f26b2966-18c6-48a2-a2a1-97ca23f37e52 default }" containerID=406f0230c65ae78df30fd5d57b0593bf4c9bf68cf5a43e4bd43883ba2f908ce2 datapathConfiguration="&{false false false false false }" interface=lxceb3760a468c3 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=406f0230c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1347 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=406f0230c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1347 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=406f0230c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1347 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=406f0230c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1347 identity=32642 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=406f0230c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1347 identity=32642 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 1dff982c-e537-4f17-8e06-c83f1f510426 default }" containerID=94c24875785982e7e6dc294ef79391244e6fb2572ef614f9fada992398d9ac5a datapathConfiguration="&{false false false false false }" interface=lxcb926fafcfcf1 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94c2487578 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94c2487578 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=94c2487578 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identity=14899 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=94c2487578 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identity=14899 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=406f0230c6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1347 identity=32642 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=406f0230c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1347 identity=32642 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=94c2487578 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=51 identity=14899 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=94c2487578 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=51 identity=14899 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.248 df985f9f-8145-445b-9408-0a6a660949d7 default }" containerID=a3f94f1c224e0ffe860535c8b296f4b6ea0854fa843fa7e0bb6c3adac45cabc3 datapathConfiguration="&{false false false false false }" interface=lxc9a08d0610c3f k8sPodName=monitoring/loki-gateway-cf54cb88c-mdk9b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a3f94f1c22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=865 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-mdk9b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a3f94f1c22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=865 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-mdk9b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a3f94f1c22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=865 identity=27327 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-mdk9b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a3f94f1c22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=865 identity=27327 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-mdk9b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.130 5c1bb8c5-2d9c-47a2-8d71-d0dea0c336e3 default }" containerID=2f359ab93299c53859ed44d49ffd645f8eac35eb57b39bfdb6f8c86f34994a48 datapathConfiguration="&{false false false false false }" interface=lxc16059fdba0e9 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2f359ab932 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1272 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 f717189f-e0cd-4f0e-8b77-fb8c6c1ef4cc default }" containerID=c15a001f5a8ec4c0f52e98cd5c2a9ff6fd6910e5917d41efb3c9a71eac6c94e2 datapathConfiguration="&{false false false false false }" interface=lxc4c6ef5ceacbc k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=2f359ab932 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1272 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.28 6a3805d2-ff57-4614-9835-25e30b2ee670 default }" containerID=227be81205e3a497faa4379f4293ab2c196f3f0c9e5f9980b48573c9dcdf528e datapathConfiguration="&{false false false false false }" interface=lxce30acb303282 k8sPodName=local-path-storage/helper-pod-create-pvc-b95b3bcf-6792-40ca-b518-194dee097070 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=227be81205 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b95b3bcf-6792-40ca-b518-194dee097070 subsys=endpoint level=info msg="New endpoint" containerID=c15a001f5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=520 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=227be81205 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b95b3bcf-6792-40ca-b518-194dee097070 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c15a001f5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=520 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a3f94f1c22 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=865 identity=27327 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-mdk9b subsys=endpoint level=info msg="Successful endpoint creation" containerID=a3f94f1c22 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=865 identity=27327 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-mdk9b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2f359ab932 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1272 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=c15a001f5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=520 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/loki-results-cache-0 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=227be81205 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b95b3bcf-6792-40ca-b518-194dee097070 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2f359ab932 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1272 identity=19869 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2f359ab932 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1272 identity=19869 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=227be81205 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 identity=1469 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b95b3bcf-6792-40ca-b518-194dee097070 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=227be81205 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 identity=1469 ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b95b3bcf-6792-40ca-b518-194dee097070 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c15a001f5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=520 identity=20522 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c15a001f5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=520 identity=20522 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2f359ab932 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1272 identity=19869 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2f359ab932 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1272 identity=19869 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=227be81205 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=740 identity=1469 ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b95b3bcf-6792-40ca-b518-194dee097070 subsys=endpoint level=info msg="Successful endpoint creation" containerID=227be81205 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=740 identity=1469 ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b95b3bcf-6792-40ca-b518-194dee097070 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c15a001f5a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=520 identity=20522 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c15a001f5a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=520 identity=20522 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.218 9d72a60b-a84e-4018-a40c-046a5e502553 default }" containerID=bccf7c4b24cc0e25f855f5fd4701bf4373f3447939bcb6476290daa15317351f datapathConfiguration="&{false false false false false }" interface=lxc0c9c234f6ede k8sPodName=monitoring/vector-4f89m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bccf7c4b24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1228 ipv4=10.0.0.218 ipv6= k8sPodName=monitoring/vector-4f89m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bccf7c4b24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1228 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.218 ipv6= k8sPodName=monitoring/vector-4f89m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bccf7c4b24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1228 identity=57502 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.218 ipv6= k8sPodName=monitoring/vector-4f89m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bccf7c4b24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1228 identity=57502 ipv4=10.0.0.218 ipv6= k8sPodName=monitoring/vector-4f89m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bccf7c4b24 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1228 identity=57502 ipv4=10.0.0.218 ipv6= k8sPodName=monitoring/vector-4f89m subsys=endpoint level=info msg="Successful endpoint creation" containerID=bccf7c4b24 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1228 identity=57502 ipv4=10.0.0.218 ipv6= k8sPodName=monitoring/vector-4f89m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=227be81205 endpointID=740 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b95b3bcf-6792-40ca-b518-194dee097070 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=227be81205 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=740 identity=1469 ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b95b3bcf-6792-40ca-b518-194dee097070 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.159 1a938383-8442-4881-a9de-73b86c97d99d default }" containerID=f9bfcd9b8f058987d183f6d8a8c0a72214ff1b4d22c626dbac2cce4ebc7de29d datapathConfiguration="&{false false false false false }" interface=lxcd0c5822e62b3 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9bfcd9b8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=668 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9bfcd9b8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=668 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f9bfcd9b8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=668 identity=1721 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9bfcd9b8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=668 identity=1721 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f9bfcd9b8f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=668 identity=1721 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9bfcd9b8f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=668 identity=1721 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.124 b6175adb-56cd-441b-8c53-53f1fb8f7127 default }" containerID=b313a0637095c36cd0e651ce68ee7fb884c0e9edb41c75e545e3ea9f1ad64037 datapathConfiguration="&{false false false false false }" interface=lxc3807c38e9812 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-55q8q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b313a06370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=850 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-55q8q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b313a06370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=850 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-55q8q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b313a06370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=850 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-55q8q line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b313a06370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=850 identity=42159 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-55q8q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b313a06370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=850 identity=42159 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-55q8q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b313a06370 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=850 identity=42159 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-55q8q subsys=endpoint level=info msg="Successful endpoint creation" containerID=b313a06370 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=850 identity=42159 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-55q8q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.86 495bd30f-011f-4e76-9e7b-d392e160759a default }" containerID=b7b47b9c0c850433bd785429079ffbb96b52174e50e836429b6963e580155bbd datapathConfiguration="&{false false false false false }" interface=lxc40fc3ae32451 k8sPodName=openstack/memcached-memcached-cf56b6468-xn487 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7b47b9c0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1312 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-xn487 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7b47b9c0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1312 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-xn487 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b7b47b9c0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1312 identity=33304 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-xn487 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7b47b9c0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1312 identity=33304 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-xn487 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b7b47b9c0c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1312 identity=33304 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-xn487 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7b47b9c0c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1312 identity=33304 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-xn487 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.13 c859888f-5097-4acb-8264-9494751b5232 default }" containerID=0f0600fc27a2f414e5067cf05ef5e9e621fb6ae17c4c1f75e2a8988f50094c1c datapathConfiguration="&{false false false false false }" interface=lxc983d94142772 k8sPodName=local-path-storage/helper-pod-create-pvc-e3eb0657-a74b-40cd-a998-22f0062b39ca labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f0600fc27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1201 ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3eb0657-a74b-40cd-a998-22f0062b39ca subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f0600fc27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1201 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3eb0657-a74b-40cd-a998-22f0062b39ca subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f0600fc27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1201 identity=1469 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3eb0657-a74b-40cd-a998-22f0062b39ca oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f0600fc27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1201 identity=1469 ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3eb0657-a74b-40cd-a998-22f0062b39ca subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0f0600fc27 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1201 identity=1469 ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3eb0657-a74b-40cd-a998-22f0062b39ca subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f0600fc27 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1201 identity=1469 ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3eb0657-a74b-40cd-a998-22f0062b39ca subsys=daemon level=info msg="Delete endpoint request" containerID=0f0600fc27 endpointID=1201 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e3eb0657-a74b-40cd-a998-22f0062b39ca subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0f0600fc27 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1201 identity=1469 ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3eb0657-a74b-40cd-a998-22f0062b39ca subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 f70f97a7-c76d-46e6-88ef-62d993b720f9 default }" containerID=703b0e0f3ff18d969b8174469a234e6848b596330261f1135407d5000670f717 datapathConfiguration="&{false false false false false }" interface=lxcb767c9f79661 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=703b0e0f3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1794 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=703b0e0f3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1794 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=703b0e0f3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1794 identity=9129 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=703b0e0f3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1794 identity=9129 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=703b0e0f3f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1794 identity=9129 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=703b0e0f3f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1794 identity=9129 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.36 f78246cc-303d-4c97-9540-f0105414ba48 default }" containerID=df1547e656385078d750ab7d6ff28d309376746839a9f81030585c28c23c0ce8 datapathConfiguration="&{false false false false false }" interface=lxcb4a066db4399 k8sPodName=openstack/keystone-api-648fdb7b75-cm6pp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df1547e656 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/keystone-api-648fdb7b75-cm6pp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df1547e656 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/keystone-api-648fdb7b75-cm6pp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=df1547e656 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identity=16627 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/keystone-api-648fdb7b75-cm6pp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df1547e656 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identity=16627 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/keystone-api-648fdb7b75-cm6pp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 bd810eba-dc7b-4c3b-80e5-d938bb65405d default }" containerID=65b47f5ca29de5fadd8ef7cae88a3752e3d053839895044b588353b9180987b6 datapathConfiguration="&{false false false false false }" interface=lxc3fc9a6a8a8d6 k8sPodName=openstack/keystone-credential-setup-74jxt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65b47f5ca2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3489 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-credential-setup-74jxt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65b47f5ca2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3489 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=945ba8ee-e8c9-4ee8-9d9b-a4b73323dc86,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=945ba8ee-e8c9-4ee8-9d9b-a4b73323dc86,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-credential-setup-74jxt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=945ba8ee-e8c9-4ee8-9d9b-a4b73323dc86;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=945ba8ee-e8c9-4ee8-9d9b-a4b73323dc86;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=65b47f5ca2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3489 identity=2363 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=945ba8ee-e8c9-4ee8-9d9b-a4b73323dc86,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=945ba8ee-e8c9-4ee8-9d9b-a4b73323dc86,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-credential-setup-74jxt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=65b47f5ca2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3489 identity=2363 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-credential-setup-74jxt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df1547e656 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1094 identity=16627 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/keystone-api-648fdb7b75-cm6pp subsys=endpoint level=info msg="Successful endpoint creation" containerID=df1547e656 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1094 identity=16627 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/keystone-api-648fdb7b75-cm6pp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=65b47f5ca2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3489 identity=2363 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-credential-setup-74jxt subsys=endpoint level=info msg="Successful endpoint creation" containerID=65b47f5ca2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3489 identity=2363 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-credential-setup-74jxt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=65b47f5ca2 endpointID=3489 k8sNamespace=openstack k8sPodName=keystone-credential-setup-74jxt subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=945ba8ee-e8c9-4ee8-9d9b-a4b73323dc86 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=945ba8ee-e8c9-4ee8-9d9b-a4b73323dc86 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=65b47f5ca2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3489 identity=2363 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-credential-setup-74jxt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 641123b5-605b-4154-99cd-6a6f19e7c630 default }" containerID=22a1d3efcfa4f2aa1c44a7b9a9ab339069d437221148d9cc198d7f4221049381 datapathConfiguration="&{false false false false false }" interface=lxc7bf7f3bdc4ad k8sPodName=openstack/keystone-db-init-4gh6h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=22a1d3efcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3938 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-db-init-4gh6h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=22a1d3efcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3938 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=25965d43-71d7-4e47-8917-2d809f6df155,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=25965d43-71d7-4e47-8917-2d809f6df155,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-db-init-4gh6h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=25965d43-71d7-4e47-8917-2d809f6df155;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=25965d43-71d7-4e47-8917-2d809f6df155;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=22a1d3efcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3938 identity=339 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=25965d43-71d7-4e47-8917-2d809f6df155,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=25965d43-71d7-4e47-8917-2d809f6df155,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-db-init-4gh6h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=22a1d3efcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3938 identity=339 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-db-init-4gh6h subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=22a1d3efcf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3938 identity=339 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-db-init-4gh6h subsys=endpoint level=info msg="Successful endpoint creation" containerID=22a1d3efcf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3938 identity=339 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-db-init-4gh6h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=22a1d3efcf endpointID=3938 k8sNamespace=openstack k8sPodName=keystone-db-init-4gh6h subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=25965d43-71d7-4e47-8917-2d809f6df155 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=25965d43-71d7-4e47-8917-2d809f6df155 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=22a1d3efcf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3938 identity=339 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-db-init-4gh6h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 edd3f996-8d6d-418c-a3c6-7dbae2e223d6 default }" containerID=7812ecb7533ab3d9479843fdc20007a1913dd18ef307c2e748977b13eb57cba3 datapathConfiguration="&{false false false false false }" interface=lxcb0f3885c94b0 k8sPodName=openstack/keystone-fernet-setup-jp59s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7812ecb753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2743 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-jp59s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7812ecb753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2743 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6ee369f7-3383-4131-9d38-3171adbdddda,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=6ee369f7-3383-4131-9d38-3171adbdddda,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-jp59s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6ee369f7-3383-4131-9d38-3171adbdddda;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=6ee369f7-3383-4131-9d38-3171adbdddda;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7812ecb753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2743 identity=20308 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6ee369f7-3383-4131-9d38-3171adbdddda,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=6ee369f7-3383-4131-9d38-3171adbdddda,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-jp59s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7812ecb753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2743 identity=20308 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-jp59s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7812ecb753 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2743 identity=20308 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-jp59s subsys=endpoint level=info msg="Successful endpoint creation" containerID=7812ecb753 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2743 identity=20308 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-jp59s subsys=daemon level=info msg="Delete endpoint request" containerID=7812ecb753 endpointID=2743 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-jp59s subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6ee369f7-3383-4131-9d38-3171adbdddda k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=6ee369f7-3383-4131-9d38-3171adbdddda k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=7812ecb753 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2743 identity=20308 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-jp59s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.167 3a1431c7-9d07-4112-89cf-5777c6ae6324 default }" containerID=041104ab8ef4a1ff89d319ab83a8b36a0b98418174cbfdc1080d2639dbb7d976 datapathConfiguration="&{false false false false false }" interface=lxcb3d1288a6608 k8sPodName=openstack/keystone-db-sync-qsr28 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=041104ab8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3761 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-db-sync-qsr28 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=041104ab8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3761 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9cf98bf5-e5c5-4a0b-add3-bbc25eb5fd83,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=9cf98bf5-e5c5-4a0b-add3-bbc25eb5fd83,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-db-sync-qsr28 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9cf98bf5-e5c5-4a0b-add3-bbc25eb5fd83;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=9cf98bf5-e5c5-4a0b-add3-bbc25eb5fd83;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=041104ab8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3761 identity=17048 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9cf98bf5-e5c5-4a0b-add3-bbc25eb5fd83,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=9cf98bf5-e5c5-4a0b-add3-bbc25eb5fd83,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-db-sync-qsr28 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=041104ab8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3761 identity=17048 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-db-sync-qsr28 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=041104ab8e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3761 identity=17048 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-db-sync-qsr28 subsys=endpoint level=info msg="Successful endpoint creation" containerID=041104ab8e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3761 identity=17048 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-db-sync-qsr28 subsys=daemon level=info msg="Delete endpoint request" containerID=041104ab8e endpointID=3761 k8sNamespace=openstack k8sPodName=keystone-db-sync-qsr28 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9cf98bf5-e5c5-4a0b-add3-bbc25eb5fd83 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=9cf98bf5-e5c5-4a0b-add3-bbc25eb5fd83 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=041104ab8e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3761 identity=17048 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-db-sync-qsr28 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 c2b6300f-18a1-4a0d-a845-cfbc522b283c default }" containerID=46158969dc0e74b34ccc20e94e9ce73d3f7cfb9956422e7a7a2cd63d94cd809a datapathConfiguration="&{false false false false false }" interface=lxc3d8b7186f759 k8sPodName=openstack/keystone-rabbit-init-bfvpf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=46158969dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-rabbit-init-bfvpf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=46158969dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9f21f4e0-3b1a-4f4f-b161-156e8d2a43b0,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=9f21f4e0-3b1a-4f4f-b161-156e8d2a43b0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-rabbit-init-bfvpf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9f21f4e0-3b1a-4f4f-b161-156e8d2a43b0;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=9f21f4e0-3b1a-4f4f-b161-156e8d2a43b0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=46158969dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 identity=27385 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9f21f4e0-3b1a-4f4f-b161-156e8d2a43b0,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=9f21f4e0-3b1a-4f4f-b161-156e8d2a43b0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-rabbit-init-bfvpf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=46158969dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 identity=27385 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-rabbit-init-bfvpf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=46158969dc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=74 identity=27385 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-rabbit-init-bfvpf subsys=endpoint level=info msg="Successful endpoint creation" containerID=46158969dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=74 identity=27385 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-rabbit-init-bfvpf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=46158969dc endpointID=74 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-bfvpf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9f21f4e0-3b1a-4f4f-b161-156e8d2a43b0 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=9f21f4e0-3b1a-4f4f-b161-156e8d2a43b0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=46158969dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=74 identity=27385 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-rabbit-init-bfvpf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.104 dd22309e-92d8-4a73-88fe-a922f3b225d2 default }" containerID=ca0d53b1cb37fbb93bf4fafed8bc7311551dc04c0d22af7814ffa6c0ef602551 datapathConfiguration="&{false false false false false }" interface=lxcc55fe89a3840 k8sPodName=openstack/keystone-domain-manage-6cjbx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca0d53b1cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1857 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-domain-manage-6cjbx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca0d53b1cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1857 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a6814e06-41f1-4ef4-8378-55969ccdef3a,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=a6814e06-41f1-4ef4-8378-55969ccdef3a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-domain-manage-6cjbx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ca0d53b1cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1857 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-domain-manage-6cjbx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a6814e06-41f1-4ef4-8378-55969ccdef3a;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=a6814e06-41f1-4ef4-8378-55969ccdef3a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ca0d53b1cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1857 identity=22839 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a6814e06-41f1-4ef4-8378-55969ccdef3a,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=a6814e06-41f1-4ef4-8378-55969ccdef3a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-domain-manage-6cjbx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca0d53b1cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1857 identity=22839 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-domain-manage-6cjbx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ca0d53b1cb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1857 identity=22839 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-domain-manage-6cjbx subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca0d53b1cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1857 identity=22839 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-domain-manage-6cjbx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ca0d53b1cb endpointID=1857 k8sNamespace=openstack k8sPodName=keystone-domain-manage-6cjbx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a6814e06-41f1-4ef4-8378-55969ccdef3a k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=a6814e06-41f1-4ef4-8378-55969ccdef3a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ca0d53b1cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1857 identity=22839 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-domain-manage-6cjbx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 9eb8ebaf-d601-4634-afa7-a159e29bbd7c default }" containerID=7812327b75967af00d06cf58033d07573adf5228949660ef516caf5626d60f5d datapathConfiguration="&{false false false false false }" interface=lxcc014fd93cf9c k8sPodName=openstack/keystone-bootstrap-blrq4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7812327b75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3606 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-bootstrap-blrq4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7812327b75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3606 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dacfcdac-52dd-4e2e-b30b-066a82399e6f,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=dacfcdac-52dd-4e2e-b30b-066a82399e6f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-bootstrap-blrq4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=dacfcdac-52dd-4e2e-b30b-066a82399e6f;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=dacfcdac-52dd-4e2e-b30b-066a82399e6f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7812327b75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3606 identity=29962 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dacfcdac-52dd-4e2e-b30b-066a82399e6f,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=dacfcdac-52dd-4e2e-b30b-066a82399e6f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-bootstrap-blrq4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7812327b75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3606 identity=29962 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-bootstrap-blrq4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7812327b75 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3606 identity=29962 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-bootstrap-blrq4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7812327b75 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3606 identity=29962 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-bootstrap-blrq4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7812327b75 endpointID=3606 k8sNamespace=openstack k8sPodName=keystone-bootstrap-blrq4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=dacfcdac-52dd-4e2e-b30b-066a82399e6f k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=dacfcdac-52dd-4e2e-b30b-066a82399e6f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=7812327b75 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3606 identity=29962 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-bootstrap-blrq4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 88d9e987-0ce3-4757-80a2-8210dce2c483 default }" containerID=06316a5835a77dcd39f3e0cb87fd88afd6075cfa8f112a9a56319b697c534094 datapathConfiguration="&{false false false false false }" interface=lxc6f7e1b10e698 k8sPodName=local-path-storage/helper-pod-create-pvc-05a09c17-257c-41d4-97a6-20f5e5623391 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=06316a5835 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1659 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05a09c17-257c-41d4-97a6-20f5e5623391 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=06316a5835 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1659 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05a09c17-257c-41d4-97a6-20f5e5623391 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=06316a5835 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1659 identity=1469 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05a09c17-257c-41d4-97a6-20f5e5623391 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=06316a5835 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1659 identity=1469 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05a09c17-257c-41d4-97a6-20f5e5623391 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=06316a5835 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1659 identity=1469 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05a09c17-257c-41d4-97a6-20f5e5623391 subsys=endpoint level=info msg="Successful endpoint creation" containerID=06316a5835 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1659 identity=1469 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05a09c17-257c-41d4-97a6-20f5e5623391 subsys=daemon level=info msg="Delete endpoint request" containerID=06316a5835 endpointID=1659 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-05a09c17-257c-41d4-97a6-20f5e5623391 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=06316a5835 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1659 identity=1469 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05a09c17-257c-41d4-97a6-20f5e5623391 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.219 723f4534-fd2a-48bf-be59-43e18b6afaca default }" containerID=1144a1bb110e3b8fda4b62d976d4d679e1dbe7862c5601b4db1a393aa23f6f03 datapathConfiguration="&{false false false false false }" interface=lxc651d25974c36 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1144a1bb11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1144a1bb11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=1144a1bb11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.219 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1144a1bb11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 identity=36199 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1144a1bb11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 identity=36199 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1144a1bb11 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1390 identity=36199 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1144a1bb11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1390 identity=36199 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.034361599956714055 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.137 a447d130-3190-41a4-9287-6a029d57fc5f default }" containerID=9fa0098cb1c1d3428de451bd53bcd95acbf155cf7d31966e7c219c70d2ad7f58 datapathConfiguration="&{false false false false false }" interface=lxc5e8d25f2cc7f k8sPodName=openstack/barbican-api-5f58c98777-lrtxn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9fa0098cb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-api-5f58c98777-lrtxn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9fa0098cb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-api-5f58c98777-lrtxn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=9fa0098cb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-api-5f58c98777-lrtxn line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9fa0098cb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 identity=6160 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-api-5f58c98777-lrtxn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9fa0098cb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 identity=6160 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-api-5f58c98777-lrtxn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 8bc963b5-a962-483c-b06e-774382699584 default }" containerID=1378aad517a786faa0ad1fca264c0d1c14a948cb4df961193f72285ad856d080 datapathConfiguration="&{false false false false false }" interface=lxc0a57016bc411 k8sPodName=openstack/barbican-db-init-vdfj5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1378aad517 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=884 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/barbican-db-init-vdfj5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1378aad517 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=884 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=79571f42-323f-42a8-9e2a-ffef1873f8eb,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=79571f42-323f-42a8-9e2a-ffef1873f8eb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/barbican-db-init-vdfj5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=79571f42-323f-42a8-9e2a-ffef1873f8eb;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=79571f42-323f-42a8-9e2a-ffef1873f8eb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1378aad517 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=884 identity=35228 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=79571f42-323f-42a8-9e2a-ffef1873f8eb,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=79571f42-323f-42a8-9e2a-ffef1873f8eb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/barbican-db-init-vdfj5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1378aad517 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=884 identity=35228 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/barbican-db-init-vdfj5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9fa0098cb1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1431 identity=6160 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-api-5f58c98777-lrtxn subsys=endpoint level=info msg="Successful endpoint creation" containerID=9fa0098cb1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1431 identity=6160 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-api-5f58c98777-lrtxn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1378aad517 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=884 identity=35228 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/barbican-db-init-vdfj5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1378aad517 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=884 identity=35228 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/barbican-db-init-vdfj5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1378aad517 endpointID=884 k8sNamespace=openstack k8sPodName=barbican-db-init-vdfj5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=79571f42-323f-42a8-9e2a-ffef1873f8eb k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=79571f42-323f-42a8-9e2a-ffef1873f8eb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=1378aad517 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=884 identity=35228 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/barbican-db-init-vdfj5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 83a78946-8fd6-4eff-b9d1-9cdcbdf0650c default }" containerID=2c5f7b6b94318085943b3f8efc0b435a80b53209fa0cd840a606a032a203c831 datapathConfiguration="&{false false false false false }" interface=lxc699c519a557b k8sPodName=openstack/barbican-db-sync-8q942 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c5f7b6b94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3102 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-db-sync-8q942 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c5f7b6b94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3102 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c3b93c44-1eb6-465d-8d08-73289dc30b76,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=c3b93c44-1eb6-465d-8d08-73289dc30b76,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-db-sync-8q942 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2c5f7b6b94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3102 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-db-sync-8q942 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=c3b93c44-1eb6-465d-8d08-73289dc30b76;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=c3b93c44-1eb6-465d-8d08-73289dc30b76;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c5f7b6b94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3102 identity=9193 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c3b93c44-1eb6-465d-8d08-73289dc30b76,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=c3b93c44-1eb6-465d-8d08-73289dc30b76,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-db-sync-8q942 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c5f7b6b94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3102 identity=9193 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-db-sync-8q942 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2c5f7b6b94 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3102 identity=9193 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-db-sync-8q942 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c5f7b6b94 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3102 identity=9193 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-db-sync-8q942 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2c5f7b6b94 endpointID=3102 k8sNamespace=openstack k8sPodName=barbican-db-sync-8q942 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=c3b93c44-1eb6-465d-8d08-73289dc30b76 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=c3b93c44-1eb6-465d-8d08-73289dc30b76 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2c5f7b6b94 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3102 identity=9193 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-db-sync-8q942 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 78667dd1-8f9e-4418-a1a2-2b8ad20f737e default }" containerID=4773cd4a8db6e85e226f9f534309e05429c1f6af08e60b848e7833e41ea0d851 datapathConfiguration="&{false false false false false }" interface=lxcd6d9f1eafb3a k8sPodName=openstack/barbican-rabbit-init-fng26 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4773cd4a8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-rabbit-init-fng26 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4773cd4a8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=71fb85f7-328d-40e4-a171-4acf6a68294c,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=71fb85f7-328d-40e4-a171-4acf6a68294c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-rabbit-init-fng26 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=71fb85f7-328d-40e4-a171-4acf6a68294c;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=71fb85f7-328d-40e4-a171-4acf6a68294c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4773cd4a8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 identity=10549 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=71fb85f7-328d-40e4-a171-4acf6a68294c,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=71fb85f7-328d-40e4-a171-4acf6a68294c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-rabbit-init-fng26 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4773cd4a8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 identity=10549 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-rabbit-init-fng26 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4773cd4a8d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=289 identity=10549 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-rabbit-init-fng26 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4773cd4a8d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=289 identity=10549 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-rabbit-init-fng26 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4773cd4a8d endpointID=289 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-fng26 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=71fb85f7-328d-40e4-a171-4acf6a68294c k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=71fb85f7-328d-40e4-a171-4acf6a68294c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=4773cd4a8d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=289 identity=10549 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-rabbit-init-fng26 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 9aeba758-a3c6-42bd-ba4a-c71b0e82c5cf default }" containerID=b749ae5617fe2c74c6d136be34c0e003dc86bc5e8f19703e65b28972ceceaf98 datapathConfiguration="&{false false false false false }" interface=lxc9e1d3c183dbf k8sPodName=openstack/barbican-ks-service-lxl5x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b749ae5617 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-service-lxl5x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b749ae5617 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6ac3079d-4837-4a3a-bc69-b7fac0569bb4,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=6ac3079d-4837-4a3a-bc69-b7fac0569bb4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-service-lxl5x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=6ac3079d-4837-4a3a-bc69-b7fac0569bb4;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=6ac3079d-4837-4a3a-bc69-b7fac0569bb4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b749ae5617 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 identity=20026 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6ac3079d-4837-4a3a-bc69-b7fac0569bb4,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=6ac3079d-4837-4a3a-bc69-b7fac0569bb4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-service-lxl5x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b749ae5617 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 identity=20026 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-service-lxl5x subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b749ae5617 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1289 identity=20026 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-service-lxl5x subsys=endpoint level=info msg="Successful endpoint creation" containerID=b749ae5617 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1289 identity=20026 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-service-lxl5x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b749ae5617 endpointID=1289 k8sNamespace=openstack k8sPodName=barbican-ks-service-lxl5x subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=6ac3079d-4837-4a3a-bc69-b7fac0569bb4 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=6ac3079d-4837-4a3a-bc69-b7fac0569bb4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b749ae5617 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1289 identity=20026 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-service-lxl5x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 a2947af2-470b-4c48-8c9a-896e5dfffd93 default }" containerID=a472094afc9b1456608d624fe259ed51d6eb29ec6b67613797e9624721aa0b43 datapathConfiguration="&{false false false false false }" interface=lxcbe9caa9f379b k8sPodName=openstack/barbican-ks-endpoints-n76db labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a472094afc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=793 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-ks-endpoints-n76db subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a472094afc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=793 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f6a057ea-6803-4f2e-9cc7-9edec6b67e38,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f6a057ea-6803-4f2e-9cc7-9edec6b67e38,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-ks-endpoints-n76db subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=f6a057ea-6803-4f2e-9cc7-9edec6b67e38;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=f6a057ea-6803-4f2e-9cc7-9edec6b67e38;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a472094afc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=793 identity=62572 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f6a057ea-6803-4f2e-9cc7-9edec6b67e38,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f6a057ea-6803-4f2e-9cc7-9edec6b67e38,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-ks-endpoints-n76db oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a472094afc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=793 identity=62572 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-ks-endpoints-n76db subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a472094afc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=793 identity=62572 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-ks-endpoints-n76db subsys=endpoint level=info msg="Successful endpoint creation" containerID=a472094afc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=793 identity=62572 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-ks-endpoints-n76db subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a472094afc endpointID=793 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-n76db subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=f6a057ea-6803-4f2e-9cc7-9edec6b67e38 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=f6a057ea-6803-4f2e-9cc7-9edec6b67e38 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=a472094afc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=793 identity=62572 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-ks-endpoints-n76db subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 0a40bed3-a485-4955-a574-9611ce4a1ae0 default }" containerID=fbae66b0c843ceffaa74fb7f6f4a5f67c7d24bdfcded6f842ae3d04f2ed164ff datapathConfiguration="&{false false false false false }" interface=lxc0716a0da8b94 k8sPodName=openstack/barbican-ks-user-p9mz8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fbae66b0c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-ks-user-p9mz8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fbae66b0c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=74066de1-30e1-410b-8d96-978c190cc1f5,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=74066de1-30e1-410b-8d96-978c190cc1f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-ks-user-p9mz8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fbae66b0c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-ks-user-p9mz8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=74066de1-30e1-410b-8d96-978c190cc1f5;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=74066de1-30e1-410b-8d96-978c190cc1f5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fbae66b0c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 identity=1829 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=74066de1-30e1-410b-8d96-978c190cc1f5,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=74066de1-30e1-410b-8d96-978c190cc1f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-ks-user-p9mz8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fbae66b0c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 identity=1829 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-ks-user-p9mz8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fbae66b0c8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=105 identity=1829 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-ks-user-p9mz8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fbae66b0c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=105 identity=1829 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-ks-user-p9mz8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fbae66b0c8 endpointID=105 k8sNamespace=openstack k8sPodName=barbican-ks-user-p9mz8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=74066de1-30e1-410b-8d96-978c190cc1f5 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=74066de1-30e1-410b-8d96-978c190cc1f5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=fbae66b0c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=105 identity=1829 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-ks-user-p9mz8 subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.227 b0c53987-cd2b-4fdc-8146-6d803f0b7d52 default }" containerID=362cd14df56fa118d9d791f7f4cb2e6c226d6cb4d4bc3b08b153b76edffea20d datapathConfiguration="&{false false false false false }" interface=lxceea4f6478f92 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-4ch5n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=362cd14df5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=224 ipv4=10.0.0.227 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-4ch5n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=362cd14df5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=224 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.227 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-4ch5n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=362cd14df5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=224 identity=26064 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.227 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-4ch5n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=362cd14df5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=224 identity=26064 ipv4=10.0.0.227 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-4ch5n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=362cd14df5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=224 identity=26064 ipv4=10.0.0.227 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-4ch5n subsys=endpoint level=info msg="Successful endpoint creation" containerID=362cd14df5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=224 identity=26064 ipv4=10.0.0.227 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-4ch5n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.140 f9bfbf83-5c58-43fc-9272-aa8b9a1b7368 default }" containerID=e52cbe3151c3e7c71291b8858f988c3b9494fa00beca392007ee01d2728ff893 datapathConfiguration="&{false false false false false }" interface=lxcc81357708987 k8sPodName=openstack/rook-ceph-detect-version-tmvhj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e52cbe3151 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=461 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tmvhj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e52cbe3151 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=461 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=2a34446f-27ed-4343-910f-f290fef7c32e,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=2a34446f-27ed-4343-910f-f290fef7c32e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tmvhj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=2a34446f-27ed-4343-910f-f290fef7c32e;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=2a34446f-27ed-4343-910f-f290fef7c32e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e52cbe3151 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=461 identity=33243 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=2a34446f-27ed-4343-910f-f290fef7c32e,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=2a34446f-27ed-4343-910f-f290fef7c32e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tmvhj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e52cbe3151 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=461 identity=33243 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tmvhj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e52cbe3151 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=461 identity=33243 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tmvhj subsys=endpoint level=info msg="Successful endpoint creation" containerID=e52cbe3151 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=461 identity=33243 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tmvhj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e52cbe3151 endpointID=461 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-tmvhj subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=2a34446f-27ed-4343-910f-f290fef7c32e k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=2a34446f-27ed-4343-910f-f290fef7c32e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=e52cbe3151 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=461 identity=33243 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tmvhj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 10edad29-7616-4801-97f1-2b114b448b8c default }" containerID=1bdf25de22a88217d5a6e4f47d338500482a52eb632cbe66d573a3eb05a12fc0 datapathConfiguration="&{false false false false false }" interface=lxca74a58b6f07d k8sPodName=openstack/ceph-object-controller-detect-version-wmlzf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1bdf25de22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1691 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wmlzf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1bdf25de22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1691 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=fecfbef5-2242-4412-98df-7099793fd783,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=fecfbef5-2242-4412-98df-7099793fd783,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wmlzf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=fecfbef5-2242-4412-98df-7099793fd783;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=fecfbef5-2242-4412-98df-7099793fd783;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1bdf25de22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1691 identity=53527 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=fecfbef5-2242-4412-98df-7099793fd783,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=fecfbef5-2242-4412-98df-7099793fd783,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wmlzf oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1bdf25de22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1691 identity=53527 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wmlzf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1bdf25de22 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1691 identity=53527 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wmlzf subsys=endpoint level=info msg="Successful endpoint creation" containerID=1bdf25de22 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1691 identity=53527 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wmlzf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1bdf25de22 endpointID=1691 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-wmlzf subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=fecfbef5-2242-4412-98df-7099793fd783 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=fecfbef5-2242-4412-98df-7099793fd783 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=1bdf25de22 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1691 identity=53527 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wmlzf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 a545583f-f370-409a-954b-ad2c0189df5e default }" containerID=1edb01bfdfc35b2e8f47105a5769b386b3db882dee19ac35adbfa7a4069220bb datapathConfiguration="&{false false false false false }" interface=lxc236d8bd64572 k8sPodName=local-path-storage/helper-pod-create-pvc-eb91b8bd-e1d0-4943-9d37-dd1c345d16ac labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1edb01bfdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eb91b8bd-e1d0-4943-9d37-dd1c345d16ac subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1edb01bfdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eb91b8bd-e1d0-4943-9d37-dd1c345d16ac subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1edb01bfdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 identity=1469 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eb91b8bd-e1d0-4943-9d37-dd1c345d16ac oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1edb01bfdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 identity=1469 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eb91b8bd-e1d0-4943-9d37-dd1c345d16ac subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1edb01bfdf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1912 identity=1469 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eb91b8bd-e1d0-4943-9d37-dd1c345d16ac subsys=endpoint level=info msg="Successful endpoint creation" containerID=1edb01bfdf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1912 identity=1469 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eb91b8bd-e1d0-4943-9d37-dd1c345d16ac subsys=daemon level=info msg="Delete endpoint request" containerID=1edb01bfdf endpointID=1912 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-eb91b8bd-e1d0-4943-9d37-dd1c345d16ac subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1edb01bfdf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1912 identity=1469 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eb91b8bd-e1d0-4943-9d37-dd1c345d16ac subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 de6942f6-5cd3-4efb-840f-e1256f185709 default }" containerID=00b8e2ea2f8753a647f96924f15b4bc7fa48c9f273dbbbf183bebad2c8ed00b5 datapathConfiguration="&{false false false false false }" interface=lxc05dff33f57fd k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00b8e2ea2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1098 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00b8e2ea2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1098 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=00b8e2ea2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1098 identity=4914 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=00b8e2ea2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1098 identity=4914 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=00b8e2ea2f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1098 identity=4914 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=00b8e2ea2f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1098 identity=4914 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.55 dc2d268d-26a1-4654-8ca7-9d37367d75b9 default }" containerID=98ad9afeaa963616d501008e46d661a766334eaa1640b5fc3178643c26a8f613 datapathConfiguration="&{false false false false false }" interface=lxc826792cda562 k8sPodName=openstack/glance-db-init-6fxvr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98ad9afeaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=729 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-db-init-6fxvr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98ad9afeaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=729 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=dd338de4-65b5-425b-b4a5-2734ee099959,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=dd338de4-65b5-425b-b4a5-2734ee099959,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-db-init-6fxvr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=dd338de4-65b5-425b-b4a5-2734ee099959;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=dd338de4-65b5-425b-b4a5-2734ee099959;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98ad9afeaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=729 identity=63667 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=dd338de4-65b5-425b-b4a5-2734ee099959,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=dd338de4-65b5-425b-b4a5-2734ee099959,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-db-init-6fxvr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=98ad9afeaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=729 identity=63667 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-db-init-6fxvr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=98ad9afeaa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=729 identity=63667 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-db-init-6fxvr subsys=endpoint level=info msg="Successful endpoint creation" containerID=98ad9afeaa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=729 identity=63667 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-db-init-6fxvr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=98ad9afeaa endpointID=729 k8sNamespace=openstack k8sPodName=glance-db-init-6fxvr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=dd338de4-65b5-425b-b4a5-2734ee099959 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=dd338de4-65b5-425b-b4a5-2734ee099959 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=98ad9afeaa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=729 identity=63667 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-db-init-6fxvr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 a011856c-ec32-4e4a-a690-43e74327684c default }" containerID=8bb75cd7779351f4772fb7ec34af7a5b3aa42b50f197de66ef565ef961f85680 datapathConfiguration="&{false false false false false }" interface=lxcea18ede6f6a9 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-x4bbw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8bb75cd777 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3158 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-x4bbw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8bb75cd777 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3158 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-x4bbw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=8bb75cd777 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3158 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.69 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-x4bbw line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8bb75cd777 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3158 identity=58316 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-x4bbw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8bb75cd777 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3158 identity=58316 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-x4bbw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.249 f031d28b-36c2-49db-9014-96f80fd9d57c default }" containerID=87c66e0a3642b65bdd9bac28c19aea33049fb29b0264a2b9051c3d2c4b5c9335 datapathConfiguration="&{false false false false false }" interface=lxcf251e050e1b0 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-xq9pv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=87c66e0a36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=687 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-xq9pv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=87c66e0a36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=687 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-xq9pv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=87c66e0a36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=687 identity=5454 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-xq9pv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=87c66e0a36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=687 identity=5454 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-xq9pv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8bb75cd777 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3158 identity=58316 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-x4bbw subsys=endpoint level=info msg="Successful endpoint creation" containerID=8bb75cd777 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3158 identity=58316 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-x4bbw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=87c66e0a36 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=687 identity=5454 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-xq9pv subsys=endpoint level=info msg="Successful endpoint creation" containerID=87c66e0a36 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=687 identity=5454 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-xq9pv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.155 28583876-3457-49ca-9210-4fb13175749a default }" containerID=3649fd3a31470a967cddc5b4ce53e4108af2a4ea1d3a969983a52b833ff6db5f datapathConfiguration="&{false false false false false }" interface=lxc00cb7f30d900 k8sPodName=openstack/glance-db-sync-n49lm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3649fd3a31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3344 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-db-sync-n49lm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3649fd3a31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3344 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6078d01a-6b76-4020-bffe-686b86308c95,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=6078d01a-6b76-4020-bffe-686b86308c95,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-db-sync-n49lm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6078d01a-6b76-4020-bffe-686b86308c95;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=6078d01a-6b76-4020-bffe-686b86308c95;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3649fd3a31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3344 identity=4270 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6078d01a-6b76-4020-bffe-686b86308c95,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=6078d01a-6b76-4020-bffe-686b86308c95,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-db-sync-n49lm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3649fd3a31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3344 identity=4270 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-db-sync-n49lm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3649fd3a31 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3344 identity=4270 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-db-sync-n49lm subsys=endpoint level=info msg="Successful endpoint creation" containerID=3649fd3a31 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3344 identity=4270 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-db-sync-n49lm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3649fd3a31 endpointID=3344 k8sNamespace=openstack k8sPodName=glance-db-sync-n49lm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6078d01a-6b76-4020-bffe-686b86308c95 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=6078d01a-6b76-4020-bffe-686b86308c95 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3649fd3a31 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3344 identity=4270 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-db-sync-n49lm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 df97ab99-8aca-481a-bdde-67c310701e2f default }" containerID=a31dd0f825c51b384890d8cd6af5cca6a52ad8200957557f2183774bc7786aed datapathConfiguration="&{false false false false false }" interface=lxc0f4778f38716 k8sPodName=openstack/glance-rabbit-init-dtm46 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a31dd0f825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1665 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-rabbit-init-dtm46 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a31dd0f825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1665 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=88a32dc7-9b62-4ba8-9f94-c578d87163e4,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=88a32dc7-9b62-4ba8-9f94-c578d87163e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-rabbit-init-dtm46 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a31dd0f825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1665 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-rabbit-init-dtm46 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=88a32dc7-9b62-4ba8-9f94-c578d87163e4;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=88a32dc7-9b62-4ba8-9f94-c578d87163e4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a31dd0f825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1665 identity=10604 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=88a32dc7-9b62-4ba8-9f94-c578d87163e4,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=88a32dc7-9b62-4ba8-9f94-c578d87163e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-rabbit-init-dtm46 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a31dd0f825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1665 identity=10604 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-rabbit-init-dtm46 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a31dd0f825 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1665 identity=10604 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-rabbit-init-dtm46 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a31dd0f825 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1665 identity=10604 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-rabbit-init-dtm46 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a31dd0f825 endpointID=1665 k8sNamespace=openstack k8sPodName=glance-rabbit-init-dtm46 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=88a32dc7-9b62-4ba8-9f94-c578d87163e4 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=88a32dc7-9b62-4ba8-9f94-c578d87163e4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a31dd0f825 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1665 identity=10604 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-rabbit-init-dtm46 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 904c44af-b319-4215-a958-0e7d3318cdbb default }" containerID=97b0287f80e8ebad1fdc4ef89ee9ee833e04067eb8a46644246293a85fd8e7f8 datapathConfiguration="&{false false false false false }" interface=lxcc42d571deaac k8sPodName=openstack/glance-ks-service-pnvb7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=97b0287f80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-service-pnvb7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=97b0287f80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f6d502bf-ccdd-4797-b803-063a933eb22d,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=f6d502bf-ccdd-4797-b803-063a933eb22d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-service-pnvb7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f6d502bf-ccdd-4797-b803-063a933eb22d;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=f6d502bf-ccdd-4797-b803-063a933eb22d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=97b0287f80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 identity=33387 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f6d502bf-ccdd-4797-b803-063a933eb22d,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=f6d502bf-ccdd-4797-b803-063a933eb22d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-service-pnvb7 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=97b0287f80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 identity=33387 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-service-pnvb7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=97b0287f80 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=603 identity=33387 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-service-pnvb7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=97b0287f80 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=603 identity=33387 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-service-pnvb7 subsys=daemon level=info msg="Delete endpoint request" containerID=97b0287f80 endpointID=603 k8sNamespace=openstack k8sPodName=glance-ks-service-pnvb7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f6d502bf-ccdd-4797-b803-063a933eb22d k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=f6d502bf-ccdd-4797-b803-063a933eb22d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=97b0287f80 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=603 identity=33387 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-service-pnvb7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 08da8751-fa89-463e-a8d4-f191dc329c46 default }" containerID=df4dc18c971a5603b570db845e1ba5e9ddb0584bc7ea5db72a129c4e6567d039 datapathConfiguration="&{false false false false false }" interface=lxc673fc565d3aa k8sPodName=openstack/glance-ks-endpoints-bgmd6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df4dc18c97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-ks-endpoints-bgmd6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df4dc18c97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e0d22573-7bc2-4079-89b8-16db54788f7a,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=e0d22573-7bc2-4079-89b8-16db54788f7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-ks-endpoints-bgmd6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e0d22573-7bc2-4079-89b8-16db54788f7a;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=e0d22573-7bc2-4079-89b8-16db54788f7a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=df4dc18c97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 identity=35364 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e0d22573-7bc2-4079-89b8-16db54788f7a,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=e0d22573-7bc2-4079-89b8-16db54788f7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-ks-endpoints-bgmd6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df4dc18c97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 identity=35364 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-ks-endpoints-bgmd6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df4dc18c97 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1341 identity=35364 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-ks-endpoints-bgmd6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=df4dc18c97 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1341 identity=35364 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-ks-endpoints-bgmd6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=df4dc18c97 endpointID=1341 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-bgmd6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e0d22573-7bc2-4079-89b8-16db54788f7a k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=e0d22573-7bc2-4079-89b8-16db54788f7a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=df4dc18c97 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1341 identity=35364 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-ks-endpoints-bgmd6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 d83fbb6f-f4f3-49b5-a1be-4e70a577a006 default }" containerID=9a857dbdc87bd961d5be67a4edc7fb0df358b5824af73c07cfa3046bdc3f7097 datapathConfiguration="&{false false false false false }" interface=lxcd6af27385785 k8sPodName=openstack/glance-ks-user-nd6rp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a857dbdc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1302 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-ks-user-nd6rp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a857dbdc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1302 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7ecb19ec-f6a7-4cb6-a63c-3294921f8782,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=7ecb19ec-f6a7-4cb6-a63c-3294921f8782,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-ks-user-nd6rp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7ecb19ec-f6a7-4cb6-a63c-3294921f8782;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=7ecb19ec-f6a7-4cb6-a63c-3294921f8782;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a857dbdc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1302 identity=63321 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7ecb19ec-f6a7-4cb6-a63c-3294921f8782,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=7ecb19ec-f6a7-4cb6-a63c-3294921f8782,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-ks-user-nd6rp oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9a857dbdc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1302 identity=63321 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-ks-user-nd6rp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9a857dbdc8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1302 identity=63321 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-ks-user-nd6rp subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a857dbdc8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1302 identity=63321 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-ks-user-nd6rp subsys=daemon level=info msg="Delete endpoint request" containerID=9a857dbdc8 endpointID=1302 k8sNamespace=openstack k8sPodName=glance-ks-user-nd6rp subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7ecb19ec-f6a7-4cb6-a63c-3294921f8782 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=7ecb19ec-f6a7-4cb6-a63c-3294921f8782 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9a857dbdc8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1302 identity=63321 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-ks-user-nd6rp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 4126768f-88b0-4168-a205-f656c48d8259 default }" containerID=c62924da25e2285ac08196ab6ddde06220f20cee933582fa054d9720f63baafc datapathConfiguration="&{false false false false false }" interface=lxcb669ce52686d k8sPodName=openstack/glance-metadefs-load-frh55 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c62924da25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=964 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-metadefs-load-frh55 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c62924da25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=964 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4b245158-c72e-46fd-a5a6-83b854861a25,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=4b245158-c72e-46fd-a5a6-83b854861a25,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-metadefs-load-frh55 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4b245158-c72e-46fd-a5a6-83b854861a25;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=4b245158-c72e-46fd-a5a6-83b854861a25;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c62924da25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=964 identity=50126 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4b245158-c72e-46fd-a5a6-83b854861a25,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=4b245158-c72e-46fd-a5a6-83b854861a25,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-metadefs-load-frh55 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c62924da25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=964 identity=50126 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-metadefs-load-frh55 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c62924da25 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=964 identity=50126 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-metadefs-load-frh55 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c62924da25 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=964 identity=50126 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-metadefs-load-frh55 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c62924da25 endpointID=964 k8sNamespace=openstack k8sPodName=glance-metadefs-load-frh55 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4b245158-c72e-46fd-a5a6-83b854861a25 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=4b245158-c72e-46fd-a5a6-83b854861a25 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c62924da25 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=964 identity=50126 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-metadefs-load-frh55 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 316076b9-35d3-4243-b4fb-ff2910c8ed65 default }" containerID=c0310bfc6f8c6acc7857af8b4a347088898c156edce8374aa62de6aaefae05a7 datapathConfiguration="&{false false false false false }" interface=lxc671476e62f87 k8sPodName=openstack/glance-storage-init-w84hg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0310bfc6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=848 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-storage-init-w84hg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0310bfc6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=848 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9d428c1c-31e2-40b7-ac48-38529c0d9157,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=9d428c1c-31e2-40b7-ac48-38529c0d9157,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-storage-init-w84hg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9d428c1c-31e2-40b7-ac48-38529c0d9157;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=9d428c1c-31e2-40b7-ac48-38529c0d9157;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c0310bfc6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=848 identity=31526 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9d428c1c-31e2-40b7-ac48-38529c0d9157,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=9d428c1c-31e2-40b7-ac48-38529c0d9157,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-storage-init-w84hg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c0310bfc6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=848 identity=31526 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-storage-init-w84hg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c0310bfc6f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=848 identity=31526 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-storage-init-w84hg subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0310bfc6f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=848 identity=31526 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-storage-init-w84hg subsys=daemon level=info msg="Delete endpoint request" containerID=c0310bfc6f endpointID=848 k8sNamespace=openstack k8sPodName=glance-storage-init-w84hg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9d428c1c-31e2-40b7-ac48-38529c0d9157 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=9d428c1c-31e2-40b7-ac48-38529c0d9157 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c0310bfc6f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=848 identity=31526 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-storage-init-w84hg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 0289c738-4182-4fe0-a086-f73993a75f99 default }" containerID=5560d6f73b27ebcaf498e99caece8b4e87372be995f09eece9e26603140c193f datapathConfiguration="&{false false false false false }" interface=lxc365d256ce42e k8sPodName=openstack/glance-api-6876d47dd9-j6f8x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5560d6f73b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-api-6876d47dd9-j6f8x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5560d6f73b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-api-6876d47dd9-j6f8x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5560d6f73b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-api-6876d47dd9-j6f8x line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5560d6f73b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 identity=2951 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-api-6876d47dd9-j6f8x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5560d6f73b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 identity=2951 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-api-6876d47dd9-j6f8x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5560d6f73b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=712 identity=2951 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-api-6876d47dd9-j6f8x subsys=endpoint level=info msg="Successful endpoint creation" containerID=5560d6f73b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=712 identity=2951 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-api-6876d47dd9-j6f8x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.40 948760f7-8a4f-4ae6-83c4-8559b4c52e6d default }" containerID=e4d55a62faf4ae67b972e30a1e0b57f99ee86726c912d2f5e9328c1d0e12ecb3 datapathConfiguration="&{false false false false false }" interface=lxcbc2a230a4cad k8sPodName=openstack/staffeln-conductor-7f89d5f88-mlmrd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4d55a62fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=950 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/staffeln-conductor-7f89d5f88-mlmrd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4d55a62fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=950 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/staffeln-conductor-7f89d5f88-mlmrd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e4d55a62fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=950 identity=7607 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/staffeln-conductor-7f89d5f88-mlmrd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4d55a62fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=950 identity=7607 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/staffeln-conductor-7f89d5f88-mlmrd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.211 5f4becfe-f570-46a9-9e98-826bb29c4b59 default }" containerID=497f732ace6f87c5888b35fa512e5aa753c37b6065ab6e89d9e861f53f484b07 datapathConfiguration="&{false false false false false }" interface=lxc8ada87692f64 k8sPodName=openstack/staffeln-api-554cfb8fd9-fzf4d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=497f732ace datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2981 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/staffeln-api-554cfb8fd9-fzf4d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=497f732ace datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2981 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/staffeln-api-554cfb8fd9-fzf4d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=497f732ace datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2981 identity=10857 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/staffeln-api-554cfb8fd9-fzf4d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=497f732ace datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2981 identity=10857 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/staffeln-api-554cfb8fd9-fzf4d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e4d55a62fa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=950 identity=7607 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/staffeln-conductor-7f89d5f88-mlmrd subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4d55a62fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=950 identity=7607 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/staffeln-conductor-7f89d5f88-mlmrd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=497f732ace datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2981 identity=10857 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/staffeln-api-554cfb8fd9-fzf4d subsys=endpoint level=info msg="Successful endpoint creation" containerID=497f732ace datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2981 identity=10857 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/staffeln-api-554cfb8fd9-fzf4d subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.199 356cd586-8816-4caf-9edd-f1804f917d36 default }" containerID=db44544527572abfbdd52a3bee95e56fc094fadc2894843006e8f739ec31c60e datapathConfiguration="&{false false false false false }" interface=lxc7e0929bacdd6 k8sPodName=openstack/staffeln-db-init-m9jx6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=db44544527 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=735 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-init-m9jx6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=db44544527 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=735 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=870b065e-afcb-444c-81db-617c958c451e,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=870b065e-afcb-444c-81db-617c958c451e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-init-m9jx6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=870b065e-afcb-444c-81db-617c958c451e;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=870b065e-afcb-444c-81db-617c958c451e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=db44544527 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=735 identity=26905 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=870b065e-afcb-444c-81db-617c958c451e,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=870b065e-afcb-444c-81db-617c958c451e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-init-m9jx6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=db44544527 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=735 identity=26905 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-init-m9jx6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=db44544527 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=735 identity=26905 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-init-m9jx6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=db44544527 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=735 identity=26905 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-init-m9jx6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=db44544527 endpointID=735 k8sNamespace=openstack k8sPodName=staffeln-db-init-m9jx6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=870b065e-afcb-444c-81db-617c958c451e k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=870b065e-afcb-444c-81db-617c958c451e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=db44544527 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=735 identity=26905 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-init-m9jx6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 dfdb8dc3-0299-4a19-8ec0-8dd33d7ea6bd default }" containerID=84b3c2529cfbb5f63a9ef0d6e02d2c6c21922b2de751604081be0ca297479054 datapathConfiguration="&{false false false false false }" interface=lxcd4263cd3f7ee k8sPodName=openstack/staffeln-db-sync-gtpfk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=84b3c2529c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/staffeln-db-sync-gtpfk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=84b3c2529c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=5eb03b8a-7407-4b89-9103-1cd3a7cd2c5d,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=5eb03b8a-7407-4b89-9103-1cd3a7cd2c5d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/staffeln-db-sync-gtpfk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=84b3c2529c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.169 ipv6= k8sPodName=openstack/staffeln-db-sync-gtpfk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=5eb03b8a-7407-4b89-9103-1cd3a7cd2c5d;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=5eb03b8a-7407-4b89-9103-1cd3a7cd2c5d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=84b3c2529c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 identity=22396 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=5eb03b8a-7407-4b89-9103-1cd3a7cd2c5d,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=5eb03b8a-7407-4b89-9103-1cd3a7cd2c5d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/staffeln-db-sync-gtpfk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=84b3c2529c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 identity=22396 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/staffeln-db-sync-gtpfk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=84b3c2529c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2323 identity=22396 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/staffeln-db-sync-gtpfk subsys=endpoint level=info msg="Successful endpoint creation" containerID=84b3c2529c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2323 identity=22396 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/staffeln-db-sync-gtpfk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=84b3c2529c endpointID=2323 k8sNamespace=openstack k8sPodName=staffeln-db-sync-gtpfk subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=5eb03b8a-7407-4b89-9103-1cd3a7cd2c5d k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=5eb03b8a-7407-4b89-9103-1cd3a7cd2c5d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=84b3c2529c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2323 identity=22396 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/staffeln-db-sync-gtpfk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 d61318ba-6076-437b-86eb-fdb0aba883e7 default }" containerID=07b60dd7de99c1e1e885a82f265e6e3be57755cec7cc7b84596e298546bdb6de datapathConfiguration="&{false false false false false }" interface=lxc7dfce2ce2e63 k8sPodName=local-path-storage/helper-pod-create-pvc-93fac9bf-5c79-43ec-a6a4-7ba9882ebebf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=07b60dd7de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1607 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-93fac9bf-5c79-43ec-a6a4-7ba9882ebebf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=07b60dd7de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1607 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-93fac9bf-5c79-43ec-a6a4-7ba9882ebebf subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=07b60dd7de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1607 identity=1469 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-93fac9bf-5c79-43ec-a6a4-7ba9882ebebf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=07b60dd7de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1607 identity=1469 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-93fac9bf-5c79-43ec-a6a4-7ba9882ebebf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=07b60dd7de datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1607 identity=1469 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-93fac9bf-5c79-43ec-a6a4-7ba9882ebebf subsys=endpoint level=info msg="Successful endpoint creation" containerID=07b60dd7de datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1607 identity=1469 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-93fac9bf-5c79-43ec-a6a4-7ba9882ebebf subsys=daemon level=info msg="Delete endpoint request" containerID=07b60dd7de endpointID=1607 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-93fac9bf-5c79-43ec-a6a4-7ba9882ebebf subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=07b60dd7de datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1607 identity=1469 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-93fac9bf-5c79-43ec-a6a4-7ba9882ebebf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 4a0123db-1107-42d2-bd11-010d75603d29 default }" containerID=189d699005d33714b928ac1996779da2ce01c5ba71e936edd31a0eeb7d457a59 datapathConfiguration="&{false false false false false }" interface=lxcb0c611eabe0d k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=189d699005 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1807 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=189d699005 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1807 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=189d699005 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1807 identity=20385 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=189d699005 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1807 identity=20385 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=189d699005 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1807 identity=20385 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=189d699005 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1807 identity=20385 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.147 db7efca5-5c0d-4825-a65f-891d502b864e default }" containerID=165298be87365999bfc63ac98ff9fd1b52cdc00f673693dc560dc4db13f8cc54 datapathConfiguration="&{false false false false false }" interface=lxccbae883a22c7 k8sPodName=openstack/cinder-scheduler-7dbf5c75f8-ttwqm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=165298be87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3907 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/cinder-scheduler-7dbf5c75f8-ttwqm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=165298be87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3907 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/cinder-scheduler-7dbf5c75f8-ttwqm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=165298be87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3907 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.147 ipv6= k8sPodName=openstack/cinder-scheduler-7dbf5c75f8-ttwqm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=165298be87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3907 identity=17529 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/cinder-scheduler-7dbf5c75f8-ttwqm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=165298be87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3907 identity=17529 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/cinder-scheduler-7dbf5c75f8-ttwqm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 c242e49b-caf8-471e-9adf-d1b33f8d45b5 default }" containerID=5bf802a6172122408846fc83fd9d7410519ca80d69596938cac968906e52810b datapathConfiguration="&{false false false false false }" interface=lxc8ce0579ce8be k8sPodName=openstack/cinder-api-7b5bf9fc86-9w82s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5bf802a617 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/cinder-api-7b5bf9fc86-9w82s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5bf802a617 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/cinder-api-7b5bf9fc86-9w82s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5bf802a617 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 identity=9266 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/cinder-api-7b5bf9fc86-9w82s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5bf802a617 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 identity=9266 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/cinder-api-7b5bf9fc86-9w82s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 bf405316-0c8c-41c9-abec-5706f8655149 default }" containerID=94c3de675241913ccc134d1b2897193b39a5194f82ebe55717bd6cdcfee7ba0f datapathConfiguration="&{false false false false false }" interface=lxc919ea7b6ffaf k8sPodName=openstack/cinder-db-init-8lx8k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94c3de6752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/cinder-db-init-8lx8k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94c3de6752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=10f8e556-b8a9-4967-8f02-cc2903a23176,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=10f8e556-b8a9-4967-8f02-cc2903a23176,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/cinder-db-init-8lx8k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=10f8e556-b8a9-4967-8f02-cc2903a23176;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=10f8e556-b8a9-4967-8f02-cc2903a23176;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=94c3de6752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 identity=47975 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=10f8e556-b8a9-4967-8f02-cc2903a23176,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=10f8e556-b8a9-4967-8f02-cc2903a23176,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/cinder-db-init-8lx8k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=94c3de6752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 identity=47975 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/cinder-db-init-8lx8k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=165298be87 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3907 identity=17529 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/cinder-scheduler-7dbf5c75f8-ttwqm subsys=endpoint level=info msg="Successful endpoint creation" containerID=165298be87 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3907 identity=17529 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/cinder-scheduler-7dbf5c75f8-ttwqm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5bf802a617 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=281 identity=9266 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/cinder-api-7b5bf9fc86-9w82s subsys=endpoint level=info msg="Successful endpoint creation" containerID=5bf802a617 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=281 identity=9266 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/cinder-api-7b5bf9fc86-9w82s subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=94c3de6752 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=373 identity=47975 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/cinder-db-init-8lx8k subsys=endpoint level=info msg="Successful endpoint creation" containerID=94c3de6752 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=373 identity=47975 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/cinder-db-init-8lx8k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=94c3de6752 endpointID=373 k8sNamespace=openstack k8sPodName=cinder-db-init-8lx8k subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=10f8e556-b8a9-4967-8f02-cc2903a23176 k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=10f8e556-b8a9-4967-8f02-cc2903a23176 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=94c3de6752 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=373 identity=47975 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/cinder-db-init-8lx8k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.129 1ee46fe6-2453-4a93-886f-94da91663474 default }" containerID=c69c0679eaa5b10e486204bdf0ece75218765b5dcdaad5d440fbcf7add30824a datapathConfiguration="&{false false false false false }" interface=lxc56a558a8a7fb k8sPodName=openstack/cinder-db-sync-9dvkq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c69c0679ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1241 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/cinder-db-sync-9dvkq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c69c0679ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1241 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=16dd4b10-8eb9-4d0b-87d9-3f61fddddc41,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=16dd4b10-8eb9-4d0b-87d9-3f61fddddc41,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/cinder-db-sync-9dvkq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c69c0679ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1241 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.129 ipv6= k8sPodName=openstack/cinder-db-sync-9dvkq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=16dd4b10-8eb9-4d0b-87d9-3f61fddddc41;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=16dd4b10-8eb9-4d0b-87d9-3f61fddddc41;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c69c0679ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1241 identity=2432 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=16dd4b10-8eb9-4d0b-87d9-3f61fddddc41,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=16dd4b10-8eb9-4d0b-87d9-3f61fddddc41,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/cinder-db-sync-9dvkq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c69c0679ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1241 identity=2432 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/cinder-db-sync-9dvkq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c69c0679ea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1241 identity=2432 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/cinder-db-sync-9dvkq subsys=endpoint level=info msg="Successful endpoint creation" containerID=c69c0679ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1241 identity=2432 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/cinder-db-sync-9dvkq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c69c0679ea endpointID=1241 k8sNamespace=openstack k8sPodName=cinder-db-sync-9dvkq subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=16dd4b10-8eb9-4d0b-87d9-3f61fddddc41 k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=16dd4b10-8eb9-4d0b-87d9-3f61fddddc41 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=c69c0679ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1241 identity=2432 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/cinder-db-sync-9dvkq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 3b780bd9-021d-4820-9473-9312c04a46a8 default }" containerID=1d338e3cb4e009b59482beca5096ec8acf50e42abea8d9baa48fffdb6a98b583 datapathConfiguration="&{false false false false false }" interface=lxce2f8d8764711 k8sPodName=openstack/cinder-rabbit-init-mr8xt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d338e3cb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=530 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-rabbit-init-mr8xt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d338e3cb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=530 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=77228f46-c492-4174-91a1-bc48addd74eb,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=77228f46-c492-4174-91a1-bc48addd74eb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-rabbit-init-mr8xt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=77228f46-c492-4174-91a1-bc48addd74eb;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=77228f46-c492-4174-91a1-bc48addd74eb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=1d338e3cb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=530 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-rabbit-init-mr8xt line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1d338e3cb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=530 identity=14708 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=77228f46-c492-4174-91a1-bc48addd74eb,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=77228f46-c492-4174-91a1-bc48addd74eb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-rabbit-init-mr8xt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d338e3cb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=530 identity=14708 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-rabbit-init-mr8xt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d338e3cb4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=530 identity=14708 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-rabbit-init-mr8xt subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d338e3cb4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=530 identity=14708 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-rabbit-init-mr8xt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1d338e3cb4 endpointID=530 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-mr8xt subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=77228f46-c492-4174-91a1-bc48addd74eb k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=77228f46-c492-4174-91a1-bc48addd74eb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=1d338e3cb4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=530 identity=14708 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-rabbit-init-mr8xt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 c3d27c42-583c-408b-9ed0-502a926983a7 default }" containerID=64e89ea4b8c2fcb2910b6ef512391a94c68cf1d05b1675440107f891fb9ba03c datapathConfiguration="&{false false false false false }" interface=lxc91da94b8fea9 k8sPodName=openstack/cinder-ks-service-qkpcr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64e89ea4b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3673 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-ks-service-qkpcr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64e89ea4b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3673 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=2e5cf4d7-ccf3-4bcf-9dca-18aa1f0d3afa,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=2e5cf4d7-ccf3-4bcf-9dca-18aa1f0d3afa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-ks-service-qkpcr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=2e5cf4d7-ccf3-4bcf-9dca-18aa1f0d3afa;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=2e5cf4d7-ccf3-4bcf-9dca-18aa1f0d3afa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=64e89ea4b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3673 identity=36286 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=2e5cf4d7-ccf3-4bcf-9dca-18aa1f0d3afa,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=2e5cf4d7-ccf3-4bcf-9dca-18aa1f0d3afa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-ks-service-qkpcr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=64e89ea4b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3673 identity=36286 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-ks-service-qkpcr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=64e89ea4b8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3673 identity=36286 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-ks-service-qkpcr subsys=endpoint level=info msg="Successful endpoint creation" containerID=64e89ea4b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3673 identity=36286 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-ks-service-qkpcr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=64e89ea4b8 endpointID=3673 k8sNamespace=openstack k8sPodName=cinder-ks-service-qkpcr subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=2e5cf4d7-ccf3-4bcf-9dca-18aa1f0d3afa k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=2e5cf4d7-ccf3-4bcf-9dca-18aa1f0d3afa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=64e89ea4b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3673 identity=36286 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-ks-service-qkpcr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.38 166e5f2c-ff84-4fd3-92ff-979874aa82b9 default }" containerID=29ed553f9c64a33bd45f39feec0d7bbe9c915592717f946b07a4605549bd9829 datapathConfiguration="&{false false false false false }" interface=lxc6dff1c942ea7 k8sPodName=openstack/cinder-ks-endpoints-57c4f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=29ed553f9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=811 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/cinder-ks-endpoints-57c4f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=29ed553f9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=811 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=3f259395-2ca2-4ae5-a5f8-e4bacd3d2a15,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3f259395-2ca2-4ae5-a5f8-e4bacd3d2a15,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/cinder-ks-endpoints-57c4f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=3f259395-2ca2-4ae5-a5f8-e4bacd3d2a15;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=3f259395-2ca2-4ae5-a5f8-e4bacd3d2a15;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=29ed553f9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=811 identity=15307 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=3f259395-2ca2-4ae5-a5f8-e4bacd3d2a15,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3f259395-2ca2-4ae5-a5f8-e4bacd3d2a15,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/cinder-ks-endpoints-57c4f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=29ed553f9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=811 identity=15307 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/cinder-ks-endpoints-57c4f subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=29ed553f9c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=811 identity=15307 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/cinder-ks-endpoints-57c4f subsys=endpoint level=info msg="Successful endpoint creation" containerID=29ed553f9c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=811 identity=15307 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/cinder-ks-endpoints-57c4f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=29ed553f9c endpointID=811 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-57c4f subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=3f259395-2ca2-4ae5-a5f8-e4bacd3d2a15 k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=3f259395-2ca2-4ae5-a5f8-e4bacd3d2a15 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=29ed553f9c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=811 identity=15307 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/cinder-ks-endpoints-57c4f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 96e1ab63-4d6f-4c16-bb85-ae0174faa545 default }" containerID=5243a8e59852e1de2c8c3ae7064bd3eb66a2e263d0a331e46382f8f9d0f6a809 datapathConfiguration="&{false false false false false }" interface=lxc285291e2a042 k8sPodName=openstack/cinder-ks-user-x7knn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5243a8e598 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=165 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-ks-user-x7knn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5243a8e598 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=165 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=11a65892-91ac-4179-81e4-adb930fe95f0,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=11a65892-91ac-4179-81e4-adb930fe95f0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-ks-user-x7knn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=11a65892-91ac-4179-81e4-adb930fe95f0;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=11a65892-91ac-4179-81e4-adb930fe95f0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5243a8e598 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=165 identity=4589 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=11a65892-91ac-4179-81e4-adb930fe95f0,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=11a65892-91ac-4179-81e4-adb930fe95f0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-ks-user-x7knn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5243a8e598 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=165 identity=4589 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-ks-user-x7knn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5243a8e598 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=165 identity=4589 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-ks-user-x7knn subsys=endpoint level=info msg="Successful endpoint creation" containerID=5243a8e598 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=165 identity=4589 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-ks-user-x7knn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5243a8e598 endpointID=165 k8sNamespace=openstack k8sPodName=cinder-ks-user-x7knn subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=11a65892-91ac-4179-81e4-adb930fe95f0 k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=11a65892-91ac-4179-81e4-adb930fe95f0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=5243a8e598 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=165 identity=4589 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-ks-user-x7knn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 0f7bc602-7b74-4ffe-a5f1-155e471b3a68 default }" containerID=8f98ae8079218e5dd742d4dc25c1c8eb84830d4d72001419ae0173bb67aa5328 datapathConfiguration="&{false false false false false }" interface=lxc665241a47ca3 k8sPodName=openstack/cinder-backup-storage-init-lqwxk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f98ae8079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3169 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/cinder-backup-storage-init-lqwxk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f98ae8079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3169 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=636b78b9-c7a1-41f2-8789-c8448da036d1,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=636b78b9-c7a1-41f2-8789-c8448da036d1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/cinder-backup-storage-init-lqwxk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8f98ae8079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3169 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.221 ipv6= k8sPodName=openstack/cinder-backup-storage-init-lqwxk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=636b78b9-c7a1-41f2-8789-c8448da036d1;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=636b78b9-c7a1-41f2-8789-c8448da036d1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8f98ae8079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3169 identity=14423 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=636b78b9-c7a1-41f2-8789-c8448da036d1,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=636b78b9-c7a1-41f2-8789-c8448da036d1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/cinder-backup-storage-init-lqwxk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f98ae8079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3169 identity=14423 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/cinder-backup-storage-init-lqwxk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8f98ae8079 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3169 identity=14423 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/cinder-backup-storage-init-lqwxk subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f98ae8079 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3169 identity=14423 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/cinder-backup-storage-init-lqwxk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8f98ae8079 endpointID=3169 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-lqwxk subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=636b78b9-c7a1-41f2-8789-c8448da036d1 k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=636b78b9-c7a1-41f2-8789-c8448da036d1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=8f98ae8079 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3169 identity=14423 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/cinder-backup-storage-init-lqwxk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 8b316315-b1fd-49e1-a355-b330f6d4fa0f default }" containerID=771078a514391631628c444926143009999bf98576cfdce375f7e3a754cd4435 datapathConfiguration="&{false false false false false }" interface=lxc3d2c0c036237 k8sPodName=openstack/cinder-create-internal-tenant-nbp47 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=771078a514 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=834 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-nbp47 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=771078a514 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=834 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=5ecff89d-fdc0-4017-b5a8-5ce207b41760,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=5ecff89d-fdc0-4017-b5a8-5ce207b41760,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-nbp47 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=5ecff89d-fdc0-4017-b5a8-5ce207b41760;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=5ecff89d-fdc0-4017-b5a8-5ce207b41760;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=771078a514 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=834 identity=44137 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=5ecff89d-fdc0-4017-b5a8-5ce207b41760,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=5ecff89d-fdc0-4017-b5a8-5ce207b41760,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-nbp47 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=771078a514 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=834 identity=44137 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-nbp47 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=771078a514 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=834 identity=44137 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-nbp47 subsys=endpoint level=info msg="Successful endpoint creation" containerID=771078a514 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=834 identity=44137 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-nbp47 subsys=daemon level=info msg="Delete endpoint request" containerID=771078a514 endpointID=834 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-nbp47 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=5ecff89d-fdc0-4017-b5a8-5ce207b41760 k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=5ecff89d-fdc0-4017-b5a8-5ce207b41760 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=771078a514 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=834 identity=44137 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-nbp47 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 676daf51-bd5a-4090-bc62-ee1e2b0d35d8 default }" containerID=7ca419fe67d005369c1528b92e0833da626f49ae9835c306f7d49636d02bf43b datapathConfiguration="&{false false false false false }" interface=lxc9692c259d822 k8sPodName=openstack/cinder-storage-init-css97 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ca419fe67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=820 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-storage-init-css97 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ca419fe67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=820 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=46e41d4f-36af-4020-a461-e5fdf3276179,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=46e41d4f-36af-4020-a461-e5fdf3276179,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-storage-init-css97 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7ca419fe67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=820 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-storage-init-css97 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=46e41d4f-36af-4020-a461-e5fdf3276179;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=46e41d4f-36af-4020-a461-e5fdf3276179;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ca419fe67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=820 identity=6549 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=46e41d4f-36af-4020-a461-e5fdf3276179,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=46e41d4f-36af-4020-a461-e5fdf3276179,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-storage-init-css97 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ca419fe67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=820 identity=6549 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-storage-init-css97 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7ca419fe67 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=820 identity=6549 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-storage-init-css97 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ca419fe67 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=820 identity=6549 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-storage-init-css97 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7ca419fe67 endpointID=820 k8sNamespace=openstack k8sPodName=cinder-storage-init-css97 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=46e41d4f-36af-4020-a461-e5fdf3276179 k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=46e41d4f-36af-4020-a461-e5fdf3276179 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=7ca419fe67 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=820 identity=6549 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-storage-init-css97 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 d3befda4-ce2c-4591-bb50-ae51ab33dd5d default }" containerID=54e0416367bd1edf055930444481f52f2849200eab6dbd184fedab6cf6318f57 datapathConfiguration="&{false false false false false }" interface=lxca471f44aaf5d k8sPodName=openstack/cinder-bootstrap-jfdrc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=54e0416367 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/cinder-bootstrap-jfdrc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=54e0416367 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=28b5c6ed-1820-46ee-8c65-e99cff40681f,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=28b5c6ed-1820-46ee-8c65-e99cff40681f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/cinder-bootstrap-jfdrc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=28b5c6ed-1820-46ee-8c65-e99cff40681f;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=28b5c6ed-1820-46ee-8c65-e99cff40681f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=54e0416367 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.176 ipv6= k8sPodName=openstack/cinder-bootstrap-jfdrc line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=54e0416367 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 identity=1363 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=28b5c6ed-1820-46ee-8c65-e99cff40681f,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=28b5c6ed-1820-46ee-8c65-e99cff40681f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/cinder-bootstrap-jfdrc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=54e0416367 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 identity=1363 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/cinder-bootstrap-jfdrc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=54e0416367 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2189 identity=1363 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/cinder-bootstrap-jfdrc subsys=endpoint level=info msg="Successful endpoint creation" containerID=54e0416367 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2189 identity=1363 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/cinder-bootstrap-jfdrc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.60 3d845f8e-984c-4ff0-af19-d4c2fe708163 default }" containerID=d88111faffc1c24d0cd1777f321b0f52eefc1a3a45bf52c69b152c3408d48c5f datapathConfiguration="&{false false false false false }" interface=lxc8f1443aa0c52 k8sPodName=openstack/cinder-volume-6cd95897d5-4xtp7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d88111faff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2800 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/cinder-volume-6cd95897d5-4xtp7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d88111faff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2800 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/cinder-volume-6cd95897d5-4xtp7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d88111faff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2800 identity=15417 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/cinder-volume-6cd95897d5-4xtp7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d88111faff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2800 identity=15417 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/cinder-volume-6cd95897d5-4xtp7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d88111faff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2800 identity=15417 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/cinder-volume-6cd95897d5-4xtp7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d88111faff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2800 identity=15417 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/cinder-volume-6cd95897d5-4xtp7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.111 4e1f75bc-c030-479a-ae0b-51c2b3f41f34 default }" containerID=da3ac780f759f3ff0d0cea1949ad2544f1c83b73aa0d6b2f3a2b286b5bdf78cd datapathConfiguration="&{false false false false false }" interface=lxc82071e5e1119 k8sPodName=openstack/cinder-backup-65f74b7787-q97gg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da3ac780f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2279 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/cinder-backup-65f74b7787-q97gg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da3ac780f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2279 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/cinder-backup-65f74b7787-q97gg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da3ac780f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2279 identity=15509 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/cinder-backup-65f74b7787-q97gg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da3ac780f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2279 identity=15509 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/cinder-backup-65f74b7787-q97gg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=da3ac780f7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2279 identity=15509 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/cinder-backup-65f74b7787-q97gg subsys=endpoint level=info msg="Successful endpoint creation" containerID=da3ac780f7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2279 identity=15509 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/cinder-backup-65f74b7787-q97gg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=54e0416367 endpointID=2189 k8sNamespace=openstack k8sPodName=cinder-bootstrap-jfdrc subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=28b5c6ed-1820-46ee-8c65-e99cff40681f k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=28b5c6ed-1820-46ee-8c65-e99cff40681f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=54e0416367 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2189 identity=1363 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/cinder-bootstrap-jfdrc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 d0c84549-4752-4e44-9988-0934d3fa172d default }" containerID=b684b1b4f2e111a4feb16a72e944a45c16b2909b357f8bbdbb4deaa71d4e9a40 datapathConfiguration="&{false false false false false }" interface=lxc976deb0d8b4a k8sPodName=openstack/placement-api-64f685b6cf-5qm4g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b684b1b4f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4084 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/placement-api-64f685b6cf-5qm4g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b684b1b4f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4084 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/placement-api-64f685b6cf-5qm4g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b684b1b4f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4084 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.3 ipv6= k8sPodName=openstack/placement-api-64f685b6cf-5qm4g line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b684b1b4f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4084 identity=54957 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/placement-api-64f685b6cf-5qm4g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b684b1b4f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4084 identity=54957 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/placement-api-64f685b6cf-5qm4g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 788ee420-818f-4719-93dc-606c1ff44363 default }" containerID=c692dd4d550abfed761174dc6dc5a5b7956db51c166a7b7a487d484ccac221ec datapathConfiguration="&{false false false false false }" interface=lxcba0ac0cc00c8 k8sPodName=openstack/placement-db-init-7c6s5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c692dd4d55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/placement-db-init-7c6s5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c692dd4d55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=573c7ec2-158b-4013-840a-db13db06e311,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=573c7ec2-158b-4013-840a-db13db06e311,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/placement-db-init-7c6s5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=573c7ec2-158b-4013-840a-db13db06e311;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=573c7ec2-158b-4013-840a-db13db06e311;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c692dd4d55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 identity=45374 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=573c7ec2-158b-4013-840a-db13db06e311,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=573c7ec2-158b-4013-840a-db13db06e311,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/placement-db-init-7c6s5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c692dd4d55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 identity=45374 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/placement-db-init-7c6s5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b684b1b4f2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4084 identity=54957 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/placement-api-64f685b6cf-5qm4g subsys=endpoint level=info msg="Successful endpoint creation" containerID=b684b1b4f2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4084 identity=54957 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/placement-api-64f685b6cf-5qm4g subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c692dd4d55 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=777 identity=45374 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/placement-db-init-7c6s5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c692dd4d55 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=777 identity=45374 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/placement-db-init-7c6s5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c692dd4d55 endpointID=777 k8sNamespace=openstack k8sPodName=placement-db-init-7c6s5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=573c7ec2-158b-4013-840a-db13db06e311 k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=573c7ec2-158b-4013-840a-db13db06e311 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=c692dd4d55 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=777 identity=45374 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/placement-db-init-7c6s5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.212 29c8a60f-f9c0-4319-bd9e-4c52486e8bbd default }" containerID=0c0c10dd0d471301002780b9ac9d2050f4d4db5935f01a02fd04a09ca8bb9e03 datapathConfiguration="&{false false false false false }" interface=lxc35f44ddb5e92 k8sPodName=openstack/placement-db-sync-qghkm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0c0c10dd0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4066 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/placement-db-sync-qghkm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0c0c10dd0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4066 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=648e6e07-9979-4673-aab0-400bacb94b75,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=648e6e07-9979-4673-aab0-400bacb94b75,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/placement-db-sync-qghkm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=648e6e07-9979-4673-aab0-400bacb94b75;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=648e6e07-9979-4673-aab0-400bacb94b75;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0c0c10dd0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4066 identity=46190 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=648e6e07-9979-4673-aab0-400bacb94b75,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=648e6e07-9979-4673-aab0-400bacb94b75,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/placement-db-sync-qghkm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0c0c10dd0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4066 identity=46190 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/placement-db-sync-qghkm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0c0c10dd0d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4066 identity=46190 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/placement-db-sync-qghkm subsys=endpoint level=info msg="Successful endpoint creation" containerID=0c0c10dd0d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4066 identity=46190 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/placement-db-sync-qghkm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0c0c10dd0d endpointID=4066 k8sNamespace=openstack k8sPodName=placement-db-sync-qghkm subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=648e6e07-9979-4673-aab0-400bacb94b75 k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=648e6e07-9979-4673-aab0-400bacb94b75 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=0c0c10dd0d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4066 identity=46190 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/placement-db-sync-qghkm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 0536ce0d-5a99-48af-8b63-4f65f9e66808 default }" containerID=d187e49e62d99627ed9c56426a655f7ca79b08963a25bae89553e7060cb8c1b0 datapathConfiguration="&{false false false false false }" interface=lxcd554039078aa k8sPodName=openstack/placement-ks-service-87c2h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d187e49e62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/placement-ks-service-87c2h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d187e49e62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=6ddf4e01-829c-4375-b2a3-726474c69655,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=6ddf4e01-829c-4375-b2a3-726474c69655,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/placement-ks-service-87c2h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=6ddf4e01-829c-4375-b2a3-726474c69655;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=6ddf4e01-829c-4375-b2a3-726474c69655;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d187e49e62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 identity=26255 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=6ddf4e01-829c-4375-b2a3-726474c69655,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=6ddf4e01-829c-4375-b2a3-726474c69655,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/placement-ks-service-87c2h oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d187e49e62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 identity=26255 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/placement-ks-service-87c2h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d187e49e62 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2323 identity=26255 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/placement-ks-service-87c2h subsys=endpoint level=info msg="Successful endpoint creation" containerID=d187e49e62 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2323 identity=26255 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/placement-ks-service-87c2h subsys=daemon level=info msg="Delete endpoint request" containerID=d187e49e62 endpointID=2323 k8sNamespace=openstack k8sPodName=placement-ks-service-87c2h subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=6ddf4e01-829c-4375-b2a3-726474c69655 k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=6ddf4e01-829c-4375-b2a3-726474c69655 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=d187e49e62 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2323 identity=26255 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/placement-ks-service-87c2h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 86c5dc99-a45e-47fe-9119-34bd9d4ab052 default }" containerID=4c852afbdfdbf8120c4c775dc6c63d0866ccc530a13e5217becbee48fa53abf8 datapathConfiguration="&{false false false false false }" interface=lxc4193b865ea6c k8sPodName=openstack/placement-ks-user-fj7lz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c852afbdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/placement-ks-user-fj7lz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c852afbdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=ab9e86f6-24b4-405e-a2eb-b5614debcf74,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=ab9e86f6-24b4-405e-a2eb-b5614debcf74,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/placement-ks-user-fj7lz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=ab9e86f6-24b4-405e-a2eb-b5614debcf74;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=ab9e86f6-24b4-405e-a2eb-b5614debcf74;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4c852afbdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 identity=20491 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=ab9e86f6-24b4-405e-a2eb-b5614debcf74,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=ab9e86f6-24b4-405e-a2eb-b5614debcf74,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/placement-ks-user-fj7lz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4c852afbdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 identity=20491 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/placement-ks-user-fj7lz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4c852afbdf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1931 identity=20491 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/placement-ks-user-fj7lz subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c852afbdf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1931 identity=20491 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/placement-ks-user-fj7lz subsys=daemon level=info msg="Delete endpoint request" containerID=4c852afbdf endpointID=1931 k8sNamespace=openstack k8sPodName=placement-ks-user-fj7lz subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=ab9e86f6-24b4-405e-a2eb-b5614debcf74 k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=ab9e86f6-24b4-405e-a2eb-b5614debcf74 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=4c852afbdf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1931 identity=20491 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/placement-ks-user-fj7lz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.84 76e13aa7-e882-4acd-9afd-1dfb9b16716b default }" containerID=d788420a3e75db487da12a85fd5231f23487915407c53ac0c3ccf3bae3fc105b datapathConfiguration="&{false false false false false }" interface=lxc260f553bb8d4 k8sPodName=openstack/placement-ks-endpoints-9lhhz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d788420a3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=112 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/placement-ks-endpoints-9lhhz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d788420a3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=112 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=8b12fb0e-aac5-4825-bc2f-33da055174bf,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=8b12fb0e-aac5-4825-bc2f-33da055174bf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/placement-ks-endpoints-9lhhz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=8b12fb0e-aac5-4825-bc2f-33da055174bf;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=8b12fb0e-aac5-4825-bc2f-33da055174bf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d788420a3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=112 identity=17682 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=8b12fb0e-aac5-4825-bc2f-33da055174bf,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=8b12fb0e-aac5-4825-bc2f-33da055174bf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/placement-ks-endpoints-9lhhz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d788420a3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=112 identity=17682 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/placement-ks-endpoints-9lhhz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d788420a3e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=112 identity=17682 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/placement-ks-endpoints-9lhhz subsys=endpoint level=info msg="Successful endpoint creation" containerID=d788420a3e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=112 identity=17682 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/placement-ks-endpoints-9lhhz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d788420a3e endpointID=112 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-9lhhz subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=8b12fb0e-aac5-4825-bc2f-33da055174bf k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=8b12fb0e-aac5-4825-bc2f-33da055174bf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=d788420a3e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=112 identity=17682 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/placement-ks-endpoints-9lhhz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 555731e0-8edf-4be6-b726-f7c267b03ef0 default }" containerID=ec26370c85396de49fca73940cbce5abd8912dbf2ed58516f004d75e17a3c2b3 datapathConfiguration="&{false false false false false }" interface=lxca891278a1958 k8sPodName=openstack/neutron-coredns-7dd4958666-wwj67 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec26370c85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=991 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-wwj67 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec26370c85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=991 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-wwj67 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=neutron-coredns;k8s:app.kubernetes.io/name=coredns;k8s:application=neutron;k8s:component=coredns;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec26370c85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=991 identity=9707 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-wwj67 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec26370c85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=991 identity=9707 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-wwj67 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ec26370c85 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=991 identity=9707 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-wwj67 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec26370c85 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=991 identity=9707 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-wwj67 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.231 64dd318d-0b73-4642-b9a2-270314e0f928 default }" containerID=6bc51ed2aae26d6d7ed8458a181f39042cc834315b41d36879d19360703221c4 datapathConfiguration="&{false false false false false }" interface=lxc00e569f2644f k8sPodName=local-path-storage/helper-pod-create-pvc-234a1695-0bc3-4363-99fc-84a7769ccb9b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6bc51ed2aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-234a1695-0bc3-4363-99fc-84a7769ccb9b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6bc51ed2aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-234a1695-0bc3-4363-99fc-84a7769ccb9b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6bc51ed2aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 identity=1469 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-234a1695-0bc3-4363-99fc-84a7769ccb9b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6bc51ed2aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 identity=1469 ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-234a1695-0bc3-4363-99fc-84a7769ccb9b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6bc51ed2aa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=118 identity=1469 ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-234a1695-0bc3-4363-99fc-84a7769ccb9b subsys=endpoint level=info msg="Successful endpoint creation" containerID=6bc51ed2aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=118 identity=1469 ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-234a1695-0bc3-4363-99fc-84a7769ccb9b subsys=daemon level=info msg="Delete endpoint request" containerID=6bc51ed2aa endpointID=118 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-234a1695-0bc3-4363-99fc-84a7769ccb9b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6bc51ed2aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=118 identity=1469 ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-234a1695-0bc3-4363-99fc-84a7769ccb9b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 2d2add4a-5506-4f60-930f-e09107468a49 default }" containerID=c61985304b5a1c7934c9d6fca9a463a39f348815cf36d8784126adedf5c43faf datapathConfiguration="&{false false false false false }" interface=lxc93245d901509 k8sPodName=openstack/rabbitmq-nova-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c61985304b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1841 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c61985304b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1841 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-nova;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=c61985304b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1841 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c61985304b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1841 identity=22629 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c61985304b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1841 identity=22629 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c61985304b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1841 identity=22629 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c61985304b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1841 identity=22629 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.119 2725fdd3-1c3f-48c2-81e0-825b57487f86 default }" containerID=ff970fdbf0041f331fdb49f67bbb5e440434c602107dd42806f2aa14208d6d32 datapathConfiguration="&{false false false false false }" interface=lxc699206027f6c k8sPodName=openstack/nova-scheduler-bfb4769bf-qxqxn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff970fdbf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3719 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/nova-scheduler-bfb4769bf-qxqxn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff970fdbf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3719 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/nova-scheduler-bfb4769bf-qxqxn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff970fdbf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3719 identity=23417 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/nova-scheduler-bfb4769bf-qxqxn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ff970fdbf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3719 identity=23417 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/nova-scheduler-bfb4769bf-qxqxn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ff970fdbf0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3719 identity=23417 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/nova-scheduler-bfb4769bf-qxqxn subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff970fdbf0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3719 identity=23417 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/nova-scheduler-bfb4769bf-qxqxn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.25 c63e57a9-6bb1-4603-8761-f3eecbc42e43 default }" containerID=02685189038d8e2db0fc62906f7df9dd365c4657cfebd74a0e7abcd45517e27f datapathConfiguration="&{false false false false false }" interface=lxc565566a6748b k8sPodName=openstack/nova-api-osapi-8fdf7b959-l6wvm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0268518903 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=763 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/nova-api-osapi-8fdf7b959-l6wvm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0268518903 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=763 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/nova-api-osapi-8fdf7b959-l6wvm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.193 380a391c-947f-42d6-a7b5-1c2de717c7be default }" containerID=11757a07fc860ce0a734d2fe8edd4dc242ee83d3f798f50e39276e7a82b95aae datapathConfiguration="&{false false false false false }" interface=lxc1174d84a3344 k8sPodName=openstack/nova-storage-init-z7qnt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=11757a07fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/nova-storage-init-z7qnt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=11757a07fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=e99434bc-7c8d-4529-a876-518bd497eca9,k8s:batch.kubernetes.io/job-name=nova-storage-init,k8s:component=storage-init,k8s:controller-uid=e99434bc-7c8d-4529-a876-518bd497eca9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-storage-init,k8s:release_group=nova" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/nova-storage-init-z7qnt subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=os-api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0268518903 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=763 identity=41971 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/nova-api-osapi-8fdf7b959-l6wvm oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=0268518903 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=763 identity=41971 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/nova-api-osapi-8fdf7b959-l6wvm subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=e99434bc-7c8d-4529-a876-518bd497eca9;k8s:batch.kubernetes.io/job-name=nova-storage-init;k8s:component=storage-init;k8s:controller-uid=e99434bc-7c8d-4529-a876-518bd497eca9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-storage-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=11757a07fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identity=20605 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=e99434bc-7c8d-4529-a876-518bd497eca9,k8s:batch.kubernetes.io/job-name=nova-storage-init,k8s:component=storage-init,k8s:controller-uid=e99434bc-7c8d-4529-a876-518bd497eca9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-storage-init,k8s:release_group=nova" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/nova-storage-init-z7qnt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=11757a07fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identity=20605 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/nova-storage-init-z7qnt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 8c9dfd7b-0984-4621-aa34-cb96c36592b1 default }" containerID=4f9f7237759ad489e9246701d302634f44d02877f8b17b4fa3aa6153475084aa datapathConfiguration="&{false false false false false }" interface=lxc2a8fb6570dae k8sPodName=openstack/nova-conductor-768cc4976f-9k4f7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f9f723775 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/nova-conductor-768cc4976f-9k4f7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f9f723775 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/nova-conductor-768cc4976f-9k4f7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4f9f723775 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 identity=37632 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/nova-conductor-768cc4976f-9k4f7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4f9f723775 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 identity=37632 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/nova-conductor-768cc4976f-9k4f7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 50bd16fe-128d-4392-b984-44ef7b9f70f4 default }" containerID=4a91e2c8b2a0d9d562130bbd3028c7533480caa92768bf675d91e9128d1a822c datapathConfiguration="&{false false false false false }" interface=lxcbcf1f2a5f657 k8sPodName=openstack/nova-cell-setup-kgl8v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a91e2c8b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=878 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/nova-cell-setup-kgl8v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a91e2c8b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=878 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=97fb7087-94e7-4652-918a-6859df18a847,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=97fb7087-94e7-4652-918a-6859df18a847,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/nova-cell-setup-kgl8v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=97fb7087-94e7-4652-918a-6859df18a847;k8s:batch.kubernetes.io/job-name=nova-cell-setup;k8s:component=cell-setup;k8s:controller-uid=97fb7087-94e7-4652-918a-6859df18a847;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a91e2c8b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=878 identity=14038 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=97fb7087-94e7-4652-918a-6859df18a847,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=97fb7087-94e7-4652-918a-6859df18a847,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/nova-cell-setup-kgl8v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a91e2c8b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=878 identity=14038 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/nova-cell-setup-kgl8v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=11757a07fc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=151 identity=20605 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/nova-storage-init-z7qnt subsys=endpoint level=info msg="Successful endpoint creation" containerID=11757a07fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=151 identity=20605 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/nova-storage-init-z7qnt subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.63 37e45a60-d235-4433-acb5-29236adc8111 default }" containerID=03eae01743058bc987a2ae33b31bfd4cebedef668a9e19abd85001b721a1d092 datapathConfiguration="&{false false false false false }" interface=lxc38def05a5039 k8sPodName=openstack/nova-bootstrap-p8nbg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=03eae01743 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/nova-bootstrap-p8nbg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=03eae01743 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=d7e42429-401f-412d-8b99-2258826e1081,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=d7e42429-401f-412d-8b99-2258826e1081,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/nova-bootstrap-p8nbg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=0268518903 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=763 identity=41971 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/nova-api-osapi-8fdf7b959-l6wvm subsys=endpoint level=info msg="Successful endpoint creation" containerID=0268518903 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=763 identity=41971 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/nova-api-osapi-8fdf7b959-l6wvm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.14 b16037fb-5355-4520-b242-4aaa7bb932d4 default }" containerID=9b30e0c33075ff5d82afd8c300d8d7d5e2d336d7438b41153b09fa70151ece51 datapathConfiguration="&{false false false false false }" interface=lxcd3326b63d3ce k8sPodName=openstack/nova-api-metadata-59b9b99f8b-k689w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b30e0c330 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=340 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/nova-api-metadata-59b9b99f8b-k689w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b30e0c330 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=340 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/nova-api-metadata-59b9b99f8b-k689w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4f9f723775 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1092 identity=37632 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/nova-conductor-768cc4976f-9k4f7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f9f723775 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1092 identity=37632 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/nova-conductor-768cc4976f-9k4f7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4a91e2c8b2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=878 identity=14038 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/nova-cell-setup-kgl8v subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a91e2c8b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=878 identity=14038 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/nova-cell-setup-kgl8v subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=d7e42429-401f-412d-8b99-2258826e1081;k8s:batch.kubernetes.io/job-name=nova-bootstrap;k8s:component=bootstrap;k8s:controller-uid=d7e42429-401f-412d-8b99-2258826e1081;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-bootstrap;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=03eae01743 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 identity=29555 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=d7e42429-401f-412d-8b99-2258826e1081,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=d7e42429-401f-412d-8b99-2258826e1081,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/nova-bootstrap-p8nbg oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=03eae01743 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 identity=29555 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/nova-bootstrap-p8nbg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9b30e0c330 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=340 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.14 ipv6= k8sPodName=openstack/nova-api-metadata-59b9b99f8b-k689w line=611 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=03eae01743 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1818 identity=29555 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/nova-bootstrap-p8nbg subsys=endpoint level=info msg="Successful endpoint creation" containerID=03eae01743 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1818 identity=29555 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/nova-bootstrap-p8nbg subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=metadata;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b30e0c330 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=340 identity=33878 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/nova-api-metadata-59b9b99f8b-k689w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b30e0c330 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=340 identity=33878 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/nova-api-metadata-59b9b99f8b-k689w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9b30e0c330 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=340 identity=33878 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/nova-api-metadata-59b9b99f8b-k689w subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b30e0c330 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=340 identity=33878 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/nova-api-metadata-59b9b99f8b-k689w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.76 d35b2b06-7a08-44bd-8488-a1d15860d302 default }" containerID=6d2299616d08f46626d46b5a1e4d9b89822ade3afa14f176437d50a7fa7d2b3e datapathConfiguration="&{false false false false false }" interface=lxcaa026e55c3b9 k8sPodName=openstack/nova-novncproxy-cc6dbc75d-qk7xc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d2299616d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/nova-novncproxy-cc6dbc75d-qk7xc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d2299616d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/nova-novncproxy-cc6dbc75d-qk7xc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=novnc-proxy;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d2299616d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 identity=4688 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/nova-novncproxy-cc6dbc75d-qk7xc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6d2299616d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 identity=4688 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/nova-novncproxy-cc6dbc75d-qk7xc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6d2299616d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=875 identity=4688 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/nova-novncproxy-cc6dbc75d-qk7xc subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d2299616d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=875 identity=4688 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/nova-novncproxy-cc6dbc75d-qk7xc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.31 fe3321a7-8736-4ae8-af26-2f0b8f1b0e7c default }" containerID=4d7f8f3ca408bc771f7448310591c8972017d0172924ff36da7716ca299b7460 datapathConfiguration="&{false false false false false }" interface=lxced7e797cce4b k8sPodName=openstack/nova-cell-setup-29535420-mhsdv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d7f8f3ca4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3662 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/nova-cell-setup-29535420-mhsdv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d7f8f3ca4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3662 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=0ae24798-1b8e-4ce9-8c07-1f077ceeafa1,k8s:batch.kubernetes.io/job-name=nova-cell-setup-29535420,k8s:component=cell-setup,k8s:controller-uid=0ae24798-1b8e-4ce9-8c07-1f077ceeafa1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup-29535420,k8s:release_group=nova" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/nova-cell-setup-29535420-mhsdv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4d7f8f3ca4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3662 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.31 ipv6= k8sPodName=openstack/nova-cell-setup-29535420-mhsdv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=0ae24798-1b8e-4ce9-8c07-1f077ceeafa1;k8s:batch.kubernetes.io/job-name=nova-cell-setup-29535420;k8s:component=cell-setup;k8s:controller-uid=0ae24798-1b8e-4ce9-8c07-1f077ceeafa1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup-29535420;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d7f8f3ca4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3662 identity=55316 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=0ae24798-1b8e-4ce9-8c07-1f077ceeafa1,k8s:batch.kubernetes.io/job-name=nova-cell-setup-29535420,k8s:component=cell-setup,k8s:controller-uid=0ae24798-1b8e-4ce9-8c07-1f077ceeafa1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup-29535420,k8s:release_group=nova" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/nova-cell-setup-29535420-mhsdv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d7f8f3ca4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3662 identity=55316 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/nova-cell-setup-29535420-mhsdv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 9edd9386-a63d-4383-afaf-db904cca5080 default }" containerID=2a3bd140d6f280933456672dc7f793556966525f65d0348b2e74b329ed94fd8c datapathConfiguration="&{false false false false false }" interface=lxc55fa4cb764fb k8sPodName=openstack/nova-service-cleaner-29535420-x272h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a3bd140d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2602 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/nova-service-cleaner-29535420-x272h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a3bd140d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2602 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=f1e3fef3-2f58-49da-8197-7269db6fcc07,k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29535420,k8s:component=service-cleaner,k8s:controller-uid=f1e3fef3-2f58-49da-8197-7269db6fcc07,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-service-cleaner-29535420,k8s:release_group=nova" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/nova-service-cleaner-29535420-x272h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=f1e3fef3-2f58-49da-8197-7269db6fcc07;k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29535420;k8s:component=service-cleaner;k8s:controller-uid=f1e3fef3-2f58-49da-8197-7269db6fcc07;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-service-cleaner-29535420;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2a3bd140d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2602 identity=2893 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=f1e3fef3-2f58-49da-8197-7269db6fcc07,k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29535420,k8s:component=service-cleaner,k8s:controller-uid=f1e3fef3-2f58-49da-8197-7269db6fcc07,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-service-cleaner-29535420,k8s:release_group=nova" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/nova-service-cleaner-29535420-x272h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a3bd140d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2602 identity=2893 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/nova-service-cleaner-29535420-x272h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4d7f8f3ca4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3662 identity=55316 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/nova-cell-setup-29535420-mhsdv subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d7f8f3ca4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3662 identity=55316 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/nova-cell-setup-29535420-mhsdv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2a3bd140d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2602 identity=2893 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/nova-service-cleaner-29535420-x272h subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a3bd140d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2602 identity=2893 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/nova-service-cleaner-29535420-x272h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=11757a07fc endpointID=151 k8sNamespace=openstack k8sPodName=nova-storage-init-z7qnt subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=e99434bc-7c8d-4529-a876-518bd497eca9 k8s:batch.kubernetes.io/job-name=nova-storage-init k8s:component=storage-init k8s:controller-uid=e99434bc-7c8d-4529-a876-518bd497eca9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-storage-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=11757a07fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=151 identity=20605 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/nova-storage-init-z7qnt subsys=endpoint