level=info msg="Memory available for map entries (0.003% of 67421634560B): 168554086B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.122674ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="62.311µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.391798ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="29µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=111.964472ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="13.06µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="16.49µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="60.811µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="72.381µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="75.931µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="482.561µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.82µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.006746ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.975694ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="38.11µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="36.691µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="247.125µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="107.242µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="82.881µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=39.983541ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="114.072µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="17.53µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="5.47µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.162.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.495117ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="13.17µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.632519ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="5.37µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.590834ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="39.681µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.78µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="5.7µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.56µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.821µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="55.471µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="41.231µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="39.281µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="397.328µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.02µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="53.751µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="294.817µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="934.049µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.303966ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="5.32µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="15.551µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.162 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.162 ipAddr.ipv6="" k8sNodeIP=199.204.45.162 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.162" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.146" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.162" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.162} {CiliumInternalIP 10.0.0.146}] 10.0.0.0/24 [] [] 10.0.0.235 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:39849" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.673196165s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="17.621µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="6.9µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="39.141µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="6.44µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1282 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1282 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1282 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.730951969s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=322.744105ms file-path=/var/run/cilium/state/templates/de3f150dce3de43b2ffba9edaf55f1aa8c4b32dcc52648bb38ae96ee9270e7dc/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1282 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 6977a25f-b720-4c02-830f-9fec38e8e9e6 default }" containerID=69a8cbddde0ff95bf7f3e33a0d03db284175e43093e7b054ed992a63c5c37602 datapathConfiguration="&{false false false false false }" interface=lxc8892c80c8d8f k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jr87d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=69a8cbddde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1035 ipv4=10.0.0.145 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jr87d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=69a8cbddde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1035 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=3140a17b-6db7-4292-9134-2df89a2b1491,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=3140a17b-6db7-4292-9134-2df89a2b1491,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.145 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jr87d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=3140a17b-6db7-4292-9134-2df89a2b1491;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=3140a17b-6db7-4292-9134-2df89a2b1491;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=69a8cbddde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1035 identity=23710 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=3140a17b-6db7-4292-9134-2df89a2b1491,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=3140a17b-6db7-4292-9134-2df89a2b1491,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.145 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jr87d oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=69a8cbddde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1035 identity=23710 ipv4=10.0.0.145 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jr87d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 4e3c9275-2df0-4181-bc51-28ac4eb4b64e default }" containerID=c0d1df606ddc99ecdf193be8bb7ab440c70ffd238622413a425aa3bf104b50fe datapathConfiguration="&{false false false false false }" interface=lxcd3e5c5f2055d k8sPodName=kube-system/coredns-7c96b6546b-v6xbm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0d1df606d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=736 ipv4=10.0.0.100 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-v6xbm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0d1df606d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=736 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.100 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-v6xbm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c0d1df606d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=736 identity=8801 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.100 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-v6xbm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c0d1df606d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=736 identity=8801 ipv4=10.0.0.100 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-v6xbm subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=759 ipv4=10.0.0.235 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=759 identityLabels="reserved:health" ipv4=10.0.0.235 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=759 identity=4 identityLabels="reserved:health" ipv4=10.0.0.235 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.120460655s file-path=/var/run/cilium/state/templates/02c2cef164b7165edbbe1bb864e39b38b67cf2b337d9afd33d880cc77656d311/bpf_lxc.o subsys=datapath-loader level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Rewrote endpoint BPF program" containerID=69a8cbddde datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1035 identity=23710 ipv4=10.0.0.145 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jr87d subsys=endpoint level=info msg="Successful endpoint creation" containerID=69a8cbddde datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1035 identity=23710 ipv4=10.0.0.145 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jr87d subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=759 identity=4 ipv4=10.0.0.235 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c0d1df606d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=736 identity=8801 ipv4=10.0.0.100 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-v6xbm subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0d1df606d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=736 identity=8801 ipv4=10.0.0.100 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-v6xbm subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=69a8cbddde endpointID=1035 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-jr87d subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=3140a17b-6db7-4292-9134-2df89a2b1491 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=3140a17b-6db7-4292-9134-2df89a2b1491 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=69a8cbddde datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1035 identity=23710 ipv4=10.0.0.145 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jr87d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 8c6b31db-70fa-4930-8ddd-82ef85ed3f70 default }" containerID=93e6ebab237221ea7ae0ceb2cb9080c0a4ad82a48cf7cf0a2bfbdd8a7fa8fdae datapathConfiguration="&{false false false false false }" interface=lxc700bfc55aa0b k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-mqz2s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=93e6ebab23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2330 ipv4=10.0.0.29 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-mqz2s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=93e6ebab23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2330 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.29 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-mqz2s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=93e6ebab23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2330 identity=3818 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.29 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-mqz2s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=93e6ebab23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2330 identity=3818 ipv4=10.0.0.29 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-mqz2s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=93e6ebab23 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2330 identity=3818 ipv4=10.0.0.29 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-mqz2s subsys=endpoint level=info msg="Successful endpoint creation" containerID=93e6ebab23 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2330 identity=3818 ipv4=10.0.0.29 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-mqz2s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1282 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01282 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01282 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01282 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01282:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1282 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 a4677d22-e599-4779-aa8e-737998b66eca default }" containerID=5369e5e0d3d9421de2951041d893da8c384186e7c7622efceb2c802a1527f155 datapathConfiguration="&{false false false false false }" interface=lxc6d50f379b00d k8sPodName=kube-system/coredns-67659f764b-h4bm6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5369e5e0d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=33 ipv4=10.0.0.137 ipv6= k8sPodName=kube-system/coredns-67659f764b-h4bm6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5369e5e0d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=33 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.137 ipv6= k8sPodName=kube-system/coredns-67659f764b-h4bm6 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5369e5e0d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=33 identity=8801 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.137 ipv6= k8sPodName=kube-system/coredns-67659f764b-h4bm6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5369e5e0d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=33 identity=8801 ipv4=10.0.0.137 ipv6= k8sPodName=kube-system/coredns-67659f764b-h4bm6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5369e5e0d3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=33 identity=8801 ipv4=10.0.0.137 ipv6= k8sPodName=kube-system/coredns-67659f764b-h4bm6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5369e5e0d3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=33 identity=8801 ipv4=10.0.0.137 ipv6= k8sPodName=kube-system/coredns-67659f764b-h4bm6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.114 478f035d-b8c0-4669-8704-5e07945de1c3 default }" containerID=04cf907903f600c19a29c62eb3d67f21c8935706e12813c8b7571fb5f745e5d1 datapathConfiguration="&{false false false false false }" interface=lxc7693277202b8 k8sPodName=kube-system/coredns-67659f764b-xmvmx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04cf907903 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=209 ipv4=10.0.0.114 ipv6= k8sPodName=kube-system/coredns-67659f764b-xmvmx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04cf907903 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=209 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.114 ipv6= k8sPodName=kube-system/coredns-67659f764b-xmvmx subsys=endpoint level=info msg="Identity of endpoint changed" containerID=04cf907903 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=209 identity=8801 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.114 ipv6= k8sPodName=kube-system/coredns-67659f764b-xmvmx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04cf907903 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=209 identity=8801 ipv4=10.0.0.114 ipv6= k8sPodName=kube-system/coredns-67659f764b-xmvmx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=04cf907903 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=209 identity=8801 ipv4=10.0.0.114 ipv6= k8sPodName=kube-system/coredns-67659f764b-xmvmx subsys=endpoint level=info msg="Successful endpoint creation" containerID=04cf907903 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=209 identity=8801 ipv4=10.0.0.114 ipv6= k8sPodName=kube-system/coredns-67659f764b-xmvmx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.166 8f17a728-d11c-47ce-b8ec-62f39dfb17b5 default }" containerID=6e29356d2b198eba8976627086ea24e06863c0fab18ba21d7ba749995936951e datapathConfiguration="&{false false false false false }" interface=lxc8d93f4c80b17 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lhjlz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e29356d2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=730 ipv4=10.0.0.166 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lhjlz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e29356d2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=730 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.166 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lhjlz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=6e29356d2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=730 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.166 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lhjlz line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6e29356d2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=730 identity=258 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.166 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lhjlz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e29356d2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=730 identity=258 ipv4=10.0.0.166 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lhjlz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e29356d2b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=730 identity=258 ipv4=10.0.0.166 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lhjlz subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e29356d2b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=730 identity=258 ipv4=10.0.0.166 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lhjlz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c0d1df606d endpointID=736 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-v6xbm subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=c0d1df606d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=736 identity=8801 ipv4=10.0.0.100 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-v6xbm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 04701cb9-921a-497b-b937-e1942b646023 default }" containerID=31ed8d013f10e5dab43db76a3c5cf63a99ca56796e7350cb853df361e7fefa1b datapathConfiguration="&{false false false false false }" interface=lxcd4af56ccb0e3 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qvlg9 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.203 937f056c-a41c-45bc-9d96-8c2fc6988352 default }" containerID=3c6ca7a52048959156b20ba4b995b5561fe8ead48789c0e8a6cba123759df76c datapathConfiguration="&{false false false false false }" interface=lxcd5a43bdd7eba k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9k4xb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=31ed8d013f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1412 ipv4=10.0.0.87 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qvlg9 subsys=endpoint level=info msg="New endpoint" containerID=3c6ca7a520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2345 ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9k4xb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 b62ce805-1673-49e4-bf13-88e716b7fbbb default }" containerID=ddc7bc3962982dec7cb8f6e2303337c549d2441a64baaf88e2db4248195234f6 datapathConfiguration="&{false false false false false }" interface=lxc4e94864a6cf6 k8sPodName=cert-manager/cert-manager-75c4c745bc-cq558 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ddc7bc3962 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 ipv4=10.0.0.162 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-cq558 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=31ed8d013f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1412 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.87 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qvlg9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=ddc7bc3962 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.162 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-cq558 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c6ca7a520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2345 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9k4xb subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ddc7bc3962 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.162 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-cq558 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=31ed8d013f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1412 identity=14927 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.87 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qvlg9 oldIdentity="no identity" subsys=endpoint level=info msg="Invalid state transition skipped" containerID=3c6ca7a520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2345 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9k4xb line=611 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=31ed8d013f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1412 identity=14927 ipv4=10.0.0.87 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qvlg9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=ddc7bc3962 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 identity=7569 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.162 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-cq558 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ddc7bc3962 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 identity=7569 ipv4=10.0.0.162 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-cq558 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c6ca7a520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2345 identity=20750 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9k4xb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c6ca7a520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2345 identity=20750 ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9k4xb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=31ed8d013f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1412 identity=14927 ipv4=10.0.0.87 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qvlg9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=31ed8d013f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1412 identity=14927 ipv4=10.0.0.87 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qvlg9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ddc7bc3962 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=23 identity=7569 ipv4=10.0.0.162 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-cq558 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ddc7bc3962 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=23 identity=7569 ipv4=10.0.0.162 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-cq558 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3c6ca7a520 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2345 identity=20750 ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9k4xb subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c6ca7a520 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2345 identity=20750 ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9k4xb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.106 d4af97ce-1441-4aab-9cdb-b80f4d352038 default }" containerID=28e7fe56b2582ce0b2541163cde322ac48aad43529c92aab4b4aeb5b7bade490 datapathConfiguration="&{false false false false false }" interface=lxcdd21113b135a k8sPodName=cert-manager/cert-manager-startupapicheck-p6kc8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=28e7fe56b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3094 ipv4=10.0.0.106 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-p6kc8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=28e7fe56b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3094 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=91c7a650-76a3-4038-b330-e02e6f626a81,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=91c7a650-76a3-4038-b330-e02e6f626a81,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.106 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-p6kc8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=91c7a650-76a3-4038-b330-e02e6f626a81;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=91c7a650-76a3-4038-b330-e02e6f626a81;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=28e7fe56b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3094 identity=9315 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=91c7a650-76a3-4038-b330-e02e6f626a81,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=91c7a650-76a3-4038-b330-e02e6f626a81,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.106 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-p6kc8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=28e7fe56b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3094 identity=9315 ipv4=10.0.0.106 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-p6kc8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=28e7fe56b2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3094 identity=9315 ipv4=10.0.0.106 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-p6kc8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=28e7fe56b2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3094 identity=9315 ipv4=10.0.0.106 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-p6kc8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=28e7fe56b2 endpointID=3094 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-p6kc8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=91c7a650-76a3-4038-b330-e02e6f626a81 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=91c7a650-76a3-4038-b330-e02e6f626a81 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=28e7fe56b2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3094 identity=9315 ipv4=10.0.0.106 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-p6kc8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 f066db95-94c9-40da-9f0f-a71c258de1c7 default }" containerID=1b44a175032c7274cfb5117688ad0ecaf1469d923fbeb56d79fac7f75fd00b6d datapathConfiguration="&{false false false false false }" interface=lxcbd98add38e99 k8sPodName=ingress-nginx/ingress-nginx-admission-create-5shcr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b44a17503 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=858 ipv4=10.0.0.43 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5shcr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b44a17503 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=858 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=83e7cc53-06f9-4fad-80a7-1e5fdc75b2f5,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=83e7cc53-06f9-4fad-80a7-1e5fdc75b2f5,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.43 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5shcr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1b44a17503 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=858 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.43 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5shcr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=83e7cc53-06f9-4fad-80a7-1e5fdc75b2f5;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=83e7cc53-06f9-4fad-80a7-1e5fdc75b2f5;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1b44a17503 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=858 identity=53688 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=83e7cc53-06f9-4fad-80a7-1e5fdc75b2f5,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=83e7cc53-06f9-4fad-80a7-1e5fdc75b2f5,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.43 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5shcr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b44a17503 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=858 identity=53688 ipv4=10.0.0.43 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5shcr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1b44a17503 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=858 identity=53688 ipv4=10.0.0.43 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5shcr subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b44a17503 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=858 identity=53688 ipv4=10.0.0.43 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5shcr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1b44a17503 endpointID=858 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-5shcr subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=83e7cc53-06f9-4fad-80a7-1e5fdc75b2f5 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=83e7cc53-06f9-4fad-80a7-1e5fdc75b2f5 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=1b44a17503 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=858 identity=53688 ipv4=10.0.0.43 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5shcr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.222 77f9a120-653c-40f9-ae51-df289ae5f8b1 default }" containerID=8b2b0ce87bdc9da0f57c3575b94a5e8eb334df7697452e1265e65026418eb236 datapathConfiguration="&{false false false false false }" interface=lxc7c37d21782a5 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-42d7g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b2b0ce87b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2632 ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-42d7g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b2b0ce87b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2632 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-42d7g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8b2b0ce87b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2632 identity=11351 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-42d7g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b2b0ce87b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2632 identity=11351 ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-42d7g subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8b2b0ce87b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2632 identity=11351 ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-42d7g subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b2b0ce87b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2632 identity=11351 ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-42d7g subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.144 7482ebfa-aaef-4f41-a899-99b877d3a661 default }" containerID=367cdd6da6f5b4098cb7c90e94e8b33aa80e958fa6908c8689058bc9dc16f36e datapathConfiguration="&{false false false false false }" interface=lxcdd644f911eec k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8gnr2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=367cdd6da6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 ipv4=10.0.0.144 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8gnr2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=367cdd6da6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=05e348e5-19ac-4007-9e3d-9cf0f93eb0d0,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=05e348e5-19ac-4007-9e3d-9cf0f93eb0d0,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.144 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8gnr2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=05e348e5-19ac-4007-9e3d-9cf0f93eb0d0;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=05e348e5-19ac-4007-9e3d-9cf0f93eb0d0;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=367cdd6da6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 identity=26124 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=05e348e5-19ac-4007-9e3d-9cf0f93eb0d0,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=05e348e5-19ac-4007-9e3d-9cf0f93eb0d0,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.144 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8gnr2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=367cdd6da6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 identity=26124 ipv4=10.0.0.144 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8gnr2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=367cdd6da6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1103 identity=26124 ipv4=10.0.0.144 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8gnr2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=367cdd6da6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1103 identity=26124 ipv4=10.0.0.144 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8gnr2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=367cdd6da6 endpointID=1103 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-8gnr2 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=05e348e5-19ac-4007-9e3d-9cf0f93eb0d0 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=05e348e5-19ac-4007-9e3d-9cf0f93eb0d0 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=367cdd6da6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1103 identity=26124 ipv4=10.0.0.144 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8gnr2 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=6ade7ba0-ee53-4c88-ae5e-a34a5c4fc2c0] Description:}]" policyAddRequest=7607d973-8f16-49bb-a90a-494d7c0fbee2 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=7607d973-8f16-49bb-a90a-494d7c0fbee2 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=a6ad4959-b535-4668-8c63-c389ff83632e] Description:}]" policyAddRequest=c1fd93d9-51f0-4a30-911c-457ddcda2a5e subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=c1fd93d9-51f0-4a30-911c-457ddcda2a5e policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.191 92089b61-90b2-4332-a02e-225b85b099fd default }" containerID=6a40664c3bf45f3752ea5d9701a90335b8f034a05a39ab9bad3a5cc129998789 datapathConfiguration="&{false false false false false }" interface=lxc2ae5ce2dd19b k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bxqjz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a40664c3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=881 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bxqjz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a40664c3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=881 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bxqjz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a40664c3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=881 identity=9264 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bxqjz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6a40664c3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=881 identity=9264 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bxqjz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6a40664c3b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=881 identity=9264 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bxqjz subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a40664c3b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=881 identity=9264 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bxqjz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.160 ebcc4fe4-0efe-4f09-be17-6b42a03ff67d default }" containerID=7707e6b1955c49e2bf8b7dac2bbc4c0e0203e7a71ba3b57556de7e7cb824b59c datapathConfiguration="&{false false false false false }" interface=lxcf2420a6b26bb k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-bttld labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7707e6b195 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1093 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-bttld subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7707e6b195 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1093 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-bttld subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7707e6b195 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1093 identity=5646 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-bttld oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7707e6b195 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1093 identity=5646 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-bttld subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7707e6b195 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1093 identity=5646 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-bttld subsys=endpoint level=info msg="Successful endpoint creation" containerID=7707e6b195 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1093 identity=5646 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-bttld subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.175 3b360acb-9772-428f-8b55-99b7756fc3ed default }" containerID=e34e138f80e290ac47f80189ac2e9738ee15d0bee12b3f169e7f3f38aba6aab6 datapathConfiguration="&{false false false false false }" interface=lxcb62698805d2a k8sPodName=openstack/pxc-operator-69cb5bbdb9-zndtn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e34e138f80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4013 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-zndtn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e34e138f80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4013 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-zndtn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e34e138f80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4013 identity=30110 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-zndtn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e34e138f80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4013 identity=30110 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-zndtn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e34e138f80 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=4013 identity=30110 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-zndtn subsys=endpoint level=info msg="Successful endpoint creation" containerID=e34e138f80 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=4013 identity=30110 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-zndtn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.187 f4e67db6-952e-47a3-9b77-97a3500b9278 default }" containerID=d44e8b4784f6e280feeaab2f9f1316655adf6b49d2e7e18891f3a9f25005552b datapathConfiguration="&{false false false false false }" interface=lxca4e6bc7d6ab5 k8sPodName=local-path-storage/helper-pod-create-pvc-5c13d07b-8b5e-4ca5-8641-0754e04e6e94 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d44e8b4784 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3720 ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5c13d07b-8b5e-4ca5-8641-0754e04e6e94 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d44e8b4784 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3720 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5c13d07b-8b5e-4ca5-8641-0754e04e6e94 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d44e8b4784 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3720 identity=53098 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5c13d07b-8b5e-4ca5-8641-0754e04e6e94 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d44e8b4784 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3720 identity=53098 ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5c13d07b-8b5e-4ca5-8641-0754e04e6e94 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d44e8b4784 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3720 identity=53098 ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5c13d07b-8b5e-4ca5-8641-0754e04e6e94 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d44e8b4784 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3720 identity=53098 ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5c13d07b-8b5e-4ca5-8641-0754e04e6e94 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.6 7b2035f7-b94d-4eec-b3ef-9feecfd991a0 default }" containerID=5b5eba96e3952df70477963f9a7c891a827974b549370ec1aa6fbc52dc6423b9 datapathConfiguration="&{false false false false false }" interface=lxcafa769baa971 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5b5eba96e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3417 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5b5eba96e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3417 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5b5eba96e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3417 identity=17473 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5b5eba96e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3417 identity=17473 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5b5eba96e3 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3417 identity=17473 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5b5eba96e3 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3417 identity=17473 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d44e8b4784 endpointID=3720 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5c13d07b-8b5e-4ca5-8641-0754e04e6e94 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d44e8b4784 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3720 identity=53098 ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5c13d07b-8b5e-4ca5-8641-0754e04e6e94 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 b27eaa27-8fac-4aeb-83c5-839909cfb1dd default }" containerID=4a4216ab49e5e4da5d002320c458d99d650f61fbde2ca1abb1de9d81d0014afa datapathConfiguration="&{false false false false false }" interface=lxc295237341377 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a4216ab49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a4216ab49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4a4216ab49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.91 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a4216ab49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 identity=5308 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a4216ab49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 identity=5308 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4a4216ab49 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1046 identity=5308 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a4216ab49 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1046 identity=5308 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=e8e8ec75-5d3b-4f79-9d0e-a3b9e3b4dce0] Description:}]" policyAddRequest=ee24a94f-a88e-4e0b-90f1-68c0252ce689 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=ee24a94f-a88e-4e0b-90f1-68c0252ce689 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.65 1f40eb16-4f15-4cc2-a75b-1f58edd88ec7 default }" containerID=ca02e127a05c386f8a9fc1ace3d734a596b5659ae1ae3a834b2364b3fb79d443 datapathConfiguration="&{false false false false false }" interface=lxc3d26629471b0 k8sPodName=local-path-storage/helper-pod-create-pvc-76caa47d-699a-458b-aaa0-ad631576821d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca02e127a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1097 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76caa47d-699a-458b-aaa0-ad631576821d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca02e127a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1097 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76caa47d-699a-458b-aaa0-ad631576821d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ca02e127a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1097 identity=53098 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76caa47d-699a-458b-aaa0-ad631576821d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca02e127a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1097 identity=53098 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76caa47d-699a-458b-aaa0-ad631576821d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ca02e127a0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1097 identity=53098 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76caa47d-699a-458b-aaa0-ad631576821d subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca02e127a0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1097 identity=53098 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76caa47d-699a-458b-aaa0-ad631576821d subsys=daemon level=info msg="Delete endpoint request" containerID=ca02e127a0 endpointID=1097 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-76caa47d-699a-458b-aaa0-ad631576821d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ca02e127a0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1097 identity=53098 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76caa47d-699a-458b-aaa0-ad631576821d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 9ec2aca5-7857-4ab6-b115-b4ed050c1536 default }" containerID=82bdb8f428ee4aaebaca32888bf1d4117a673915d66a590a08a26a9cf9e3b1d6 datapathConfiguration="&{false false false false false }" interface=lxcc05eaf027aa8 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=82bdb8f428 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=385 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=82bdb8f428 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=385 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=82bdb8f428 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=385 identity=62626 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=82bdb8f428 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=385 identity=62626 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=82bdb8f428 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=385 identity=62626 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=82bdb8f428 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=385 identity=62626 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=04371963-ac09-4424-9a19-99f4b4f6e663] Description:}]" policyAddRequest=ce3a246d-8af6-4893-bf38-12b6bd80a1b5 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=ce3a246d-8af6-4893-bf38-12b6bd80a1b5 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.20 7bb9ccbc-fc95-4841-bf20-a16f9015c4e6 default }" containerID=82746ca99e73a428f0ea5542c06426d218b39a2bc697db3f503dda07fbfdc41d datapathConfiguration="&{false false false false false }" interface=lxc2de122943fc5 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=82746ca99e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 ipv4=10.0.0.20 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=82746ca99e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.20 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=82746ca99e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 identity=5827 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.20 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=82746ca99e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 identity=5827 ipv4=10.0.0.20 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=82746ca99e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=740 identity=5827 ipv4=10.0.0.20 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=82746ca99e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=740 identity=5827 ipv4=10.0.0.20 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.00939440258633517 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.68 629e9736-fe1f-458d-b934-4cf01c250a5b default }" containerID=570846b228471d581981882d481b50632d34399d14c64556ddafdd89f73ebf83 datapathConfiguration="&{false false false false false }" interface=lxc29aa231f4ca0 k8sPodName=monitoring/node-feature-discovery-worker-spnw4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=570846b228 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1000 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-spnw4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=570846b228 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1000 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-spnw4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=570846b228 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1000 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-spnw4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=570846b228 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1000 identity=35656 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-spnw4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=570846b228 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1000 identity=35656 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-spnw4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=570846b228 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1000 identity=35656 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-spnw4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=570846b228 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1000 identity=35656 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-spnw4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.231 4197e0a8-6e58-4f1d-a159-dfe604bc1773 default }" containerID=19f100226f45f0937c37dbf2f2a427edafc482ad7d14126cab1f25193db92095 datapathConfiguration="&{false false false false false }" interface=lxccc0f7a409355 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ntkh8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19f100226f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=536 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ntkh8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 2ec6ae96-1213-493e-8385-b2338a76545c default }" containerID=08a50eb1acdf8b9eedfbee3eff8c1f637ee9b5837bae126f9ca264f9033bad13 datapathConfiguration="&{false false false false false }" interface=lxcd85f0f38fbee k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-srrkv labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=19f100226f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=536 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ntkh8 subsys=endpoint level=info msg="New endpoint" containerID=08a50eb1ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3096 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-srrkv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=08a50eb1ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3096 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-srrkv subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19f100226f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=536 identity=4291 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ntkh8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19f100226f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=536 identity=4291 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ntkh8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=08a50eb1ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3096 identity=31155 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-srrkv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=08a50eb1ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3096 identity=31155 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-srrkv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=19f100226f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=536 identity=4291 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ntkh8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=19f100226f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=536 identity=4291 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ntkh8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=08a50eb1ac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3096 identity=31155 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-srrkv subsys=endpoint level=info msg="Successful endpoint creation" containerID=08a50eb1ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3096 identity=31155 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-srrkv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.205 9ba804bf-20f1-4038-bb07-31a194d92b22 default }" containerID=75a5b83966d48760a1f571b88da16acbe643bdd8389097595d0c2f054e069d6b datapathConfiguration="&{false false false false false }" interface=lxc1099d5d7a154 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ghdp6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=75a5b83966 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3542 ipv4=10.0.0.205 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ghdp6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=75a5b83966 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3542 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.205 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ghdp6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=75a5b83966 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3542 identity=7588 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.205 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ghdp6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=75a5b83966 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3542 identity=7588 ipv4=10.0.0.205 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ghdp6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=75a5b83966 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3542 identity=7588 ipv4=10.0.0.205 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ghdp6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=75a5b83966 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3542 identity=7588 ipv4=10.0.0.205 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ghdp6 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1282 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-179-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01282 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01282 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01282 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01282:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1282 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.167 63967a6f-270a-4663-a0ac-0c3d9c421c4f default }" containerID=fdc8a2e25f093e3f8c69ce055491909186f6ed17259293474b0e1fb2a48db7fb datapathConfiguration="&{false false false false false }" interface=lxc592959ecec65 k8sPodName=monitoring/kube-prometheus-stack-admission-create-6jdj2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fdc8a2e25f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6jdj2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fdc8a2e25f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=e1b41da6-969a-4c9e-a094-f6a120bfabb1,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=e1b41da6-969a-4c9e-a094-f6a120bfabb1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6jdj2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=e1b41da6-969a-4c9e-a094-f6a120bfabb1;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=e1b41da6-969a-4c9e-a094-f6a120bfabb1;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fdc8a2e25f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 identity=22577 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=e1b41da6-969a-4c9e-a094-f6a120bfabb1,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=e1b41da6-969a-4c9e-a094-f6a120bfabb1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6jdj2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fdc8a2e25f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 identity=22577 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6jdj2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fdc8a2e25f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1559 identity=22577 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6jdj2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fdc8a2e25f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1559 identity=22577 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6jdj2 subsys=daemon level=info msg="Delete endpoint request" containerID=fdc8a2e25f endpointID=1559 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-6jdj2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=e1b41da6-969a-4c9e-a094-f6a120bfabb1 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=e1b41da6-969a-4c9e-a094-f6a120bfabb1 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=fdc8a2e25f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1559 identity=22577 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6jdj2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.38 3e256c1d-7e64-48b4-9ad5-b8bfa8818a8c default }" containerID=601908c2fee098d4579b5e3f6f8961f785629947a48d8962b3df30e673ccfc8e datapathConfiguration="&{false false false false false }" interface=lxcdc5e6628a358 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fddfh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=601908c2fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fddfh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=601908c2fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fddfh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=601908c2fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fddfh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=601908c2fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 identity=38377 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fddfh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=601908c2fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 identity=38377 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fddfh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=601908c2fe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=144 identity=38377 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fddfh subsys=endpoint level=info msg="Successful endpoint creation" containerID=601908c2fe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=144 identity=38377 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fddfh subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.182 91d45da4-2bef-4a82-a000-55bef27eb5c9 default }" containerID=04002246f081804215344dc0034da5958f4173783d172eb32c68a282c086db69 datapathConfiguration="&{false false false false false }" interface=lxc1a734527d55c k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-9pjpp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04002246f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3368 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-9pjpp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 f675738b-89b6-4005-ad3b-d19285473dca default }" containerID=b415fc0f85876f0609d02725154dab4582cd85f52e38edc41a7ee264ad563631 datapathConfiguration="&{false false false false false }" interface=lxcdcd1bfe712a7 k8sPodName=monitoring/kube-prometheus-stack-grafana-f7d7fffd7-mvw75 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b415fc0f85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=305 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-f7d7fffd7-mvw75 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04002246f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3368 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-9pjpp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=b415fc0f85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=305 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-f7d7fffd7-mvw75 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=04002246f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3368 identity=34509 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-9pjpp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04002246f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3368 identity=34509 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-9pjpp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b415fc0f85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=305 identity=2309 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-f7d7fffd7-mvw75 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b415fc0f85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=305 identity=2309 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-f7d7fffd7-mvw75 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=04002246f0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3368 identity=34509 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-9pjpp subsys=endpoint level=info msg="Successful endpoint creation" containerID=04002246f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3368 identity=34509 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-9pjpp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b415fc0f85 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=305 identity=2309 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-f7d7fffd7-mvw75 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b415fc0f85 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=305 identity=2309 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-f7d7fffd7-mvw75 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.110 fe5823a8-829a-48c8-8eb7-ccacd09a6faa default }" containerID=da8d97c9c3be5d4361e400e869fa85779838c7b6028c7567324634250635de87 datapathConfiguration="&{false false false false false }" interface=lxcaef86a4aab04 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-v688k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da8d97c9c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=465 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-v688k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da8d97c9c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=465 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=122a7e0e-742a-4565-b252-51246e3defc2,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=122a7e0e-742a-4565-b252-51246e3defc2,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-v688k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=122a7e0e-742a-4565-b252-51246e3defc2;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=122a7e0e-742a-4565-b252-51246e3defc2;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da8d97c9c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=465 identity=33493 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=122a7e0e-742a-4565-b252-51246e3defc2,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=122a7e0e-742a-4565-b252-51246e3defc2,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-v688k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da8d97c9c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=465 identity=33493 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-v688k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=da8d97c9c3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=465 identity=33493 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-v688k subsys=endpoint level=info msg="Successful endpoint creation" containerID=da8d97c9c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=465 identity=33493 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-v688k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=da8d97c9c3 endpointID=465 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-v688k subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=122a7e0e-742a-4565-b252-51246e3defc2 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=122a7e0e-742a-4565-b252-51246e3defc2 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=da8d97c9c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=465 identity=33493 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-v688k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 da237b10-466c-4bd3-994c-a0813603970b default }" containerID=824a1a349ae0ab7ac9a2b13004ee7c173354620a9b3da8f32f7fd49fe3497d11 datapathConfiguration="&{false false false false false }" interface=lxce0238d824a48 k8sPodName=local-path-storage/helper-pod-create-pvc-a4f50255-e240-4d17-b553-9c8d0f9b93e4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=824a1a349a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=18 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a4f50255-e240-4d17-b553-9c8d0f9b93e4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=824a1a349a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=18 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a4f50255-e240-4d17-b553-9c8d0f9b93e4 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=824a1a349a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=18 identity=53098 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a4f50255-e240-4d17-b553-9c8d0f9b93e4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=824a1a349a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=18 identity=53098 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a4f50255-e240-4d17-b553-9c8d0f9b93e4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=824a1a349a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=18 identity=53098 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a4f50255-e240-4d17-b553-9c8d0f9b93e4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=824a1a349a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=18 identity=53098 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a4f50255-e240-4d17-b553-9c8d0f9b93e4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.232 9282c43d-243a-4935-bcf8-083692e91e81 default }" containerID=2624cde6803c22a6d6d7f8b5dfc77aa804668dadb6a25e4a3aa916fc07c9b5c5 datapathConfiguration="&{false false false false false }" interface=lxcfd53c2565b60 k8sPodName=local-path-storage/helper-pod-create-pvc-2b378415-ace9-4853-824a-6292a09b4c2e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2624cde680 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3026 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b378415-ace9-4853-824a-6292a09b4c2e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2624cde680 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3026 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b378415-ace9-4853-824a-6292a09b4c2e subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2624cde680 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3026 identity=53098 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b378415-ace9-4853-824a-6292a09b4c2e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2624cde680 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3026 identity=53098 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b378415-ace9-4853-824a-6292a09b4c2e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2624cde680 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3026 identity=53098 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b378415-ace9-4853-824a-6292a09b4c2e subsys=endpoint level=info msg="Successful endpoint creation" containerID=2624cde680 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3026 identity=53098 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b378415-ace9-4853-824a-6292a09b4c2e subsys=daemon level=info msg="Delete endpoint request" containerID=824a1a349a endpointID=18 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a4f50255-e240-4d17-b553-9c8d0f9b93e4 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=2624cde680 endpointID=3026 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2b378415-ace9-4853-824a-6292a09b4c2e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=824a1a349a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=18 identity=53098 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a4f50255-e240-4d17-b553-9c8d0f9b93e4 subsys=endpoint level=info msg="Removed endpoint" containerID=2624cde680 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3026 identity=53098 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b378415-ace9-4853-824a-6292a09b4c2e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 dfa4a7e2-3b19-49a4-90f9-551b1e1bfc12 default }" containerID=086178a021a3d8ae91fe2c296163d0d4148a3b3bcd7874dda3a39bc3d1d4b379 datapathConfiguration="&{false false false false false }" interface=lxcc90f0f1b74f3 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=086178a021 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1494 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=086178a021 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1494 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=086178a021 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1494 identity=7322 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=086178a021 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1494 identity=7322 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=086178a021 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1494 identity=7322 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=086178a021 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1494 identity=7322 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.198 674851a6-e538-4c26-96e3-9302b8965f4e default }" containerID=83bb0df80dc37216f92eb18be45a29163349362201df7e1db0d539a91771f7c8 datapathConfiguration="&{false false false false false }" interface=lxc08615170ae02 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=83bb0df80d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1067 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=83bb0df80d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1067 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=83bb0df80d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1067 identity=5775 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=83bb0df80d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1067 identity=5775 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=83bb0df80d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1067 identity=5775 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=83bb0df80d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1067 identity=5775 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.134 30876ea6-14b7-430f-9106-5c47b9129726 default }" containerID=af66578511585c34b91fcace33280b891b1463132c81377c0462c9600a57d01b datapathConfiguration="&{false false false false false }" interface=lxc38dad0a06b55 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af66578511 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3915 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af66578511 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3915 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af66578511 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3915 identity=59942 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af66578511 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3915 identity=59942 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.239 f1a66283-e556-4fbe-bd8a-17556284b6b4 default }" containerID=8d170a8546e25d1e264b9feb9810b17e1cb5349c973ad45d68eda56d974ed7d3 datapathConfiguration="&{false false false false false }" interface=lxce8d9abc06d0e k8sPodName=monitoring/loki-gateway-cf54cb88c-vh4xr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d170a8546 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2080 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vh4xr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d170a8546 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2080 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vh4xr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8d170a8546 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2080 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vh4xr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d170a8546 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2080 identity=48720 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vh4xr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d170a8546 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2080 identity=48720 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vh4xr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 c0f6a0e1-fa6a-4829-a0cb-95a5cd8ebd66 default }" containerID=9c96b43959b7f01317276821bdad99d62ea86dcb52eaa673f79bd863581b2d4f datapathConfiguration="&{false false false false false }" interface=lxc215fcbb4b427 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c96b43959 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1890 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c96b43959 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1890 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c96b43959 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1890 identity=27772 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c96b43959 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1890 identity=27772 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=af66578511 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3915 identity=59942 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=af66578511 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3915 identity=59942 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8d170a8546 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2080 identity=48720 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vh4xr subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d170a8546 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2080 identity=48720 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vh4xr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9c96b43959 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1890 identity=27772 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c96b43959 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1890 identity=27772 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.39 dcfa1df2-ad28-4cd0-9bd7-278fbf4ebf65 default }" containerID=4f2eecfbd44085088d4a1a9e3bc2a23f7cf8f6497b5a4036f4eb6a8ecea5e2d3 datapathConfiguration="&{false false false false false }" interface=lxc6c3881447e00 k8sPodName=local-path-storage/helper-pod-create-pvc-a277fcfa-60db-4336-884f-c7960a261b74 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f2eecfbd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1184 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a277fcfa-60db-4336-884f-c7960a261b74 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f2eecfbd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1184 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a277fcfa-60db-4336-884f-c7960a261b74 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4f2eecfbd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1184 identity=53098 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a277fcfa-60db-4336-884f-c7960a261b74 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4f2eecfbd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1184 identity=53098 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a277fcfa-60db-4336-884f-c7960a261b74 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4f2eecfbd4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1184 identity=53098 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a277fcfa-60db-4336-884f-c7960a261b74 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f2eecfbd4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1184 identity=53098 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a277fcfa-60db-4336-884f-c7960a261b74 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.106 f28f733a-3ae4-4f37-97c1-1e8943d1416b default }" containerID=a0305a01700498f8cfd2cdebb98637b7e3c6f2ebd86446a79149496044230dfd datapathConfiguration="&{false false false false false }" interface=lxc84b7532428ba k8sPodName=monitoring/vector-jg6gc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a0305a0170 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/vector-jg6gc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a0305a0170 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/vector-jg6gc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a0305a0170 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 identity=20878 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/vector-jg6gc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a0305a0170 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 identity=20878 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/vector-jg6gc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a0305a0170 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=101 identity=20878 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/vector-jg6gc subsys=endpoint level=info msg="Successful endpoint creation" containerID=a0305a0170 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=101 identity=20878 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/vector-jg6gc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4f2eecfbd4 endpointID=1184 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a277fcfa-60db-4336-884f-c7960a261b74 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4f2eecfbd4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1184 identity=53098 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a277fcfa-60db-4336-884f-c7960a261b74 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 99419f80-f2aa-4b9c-b75b-e92a2644ff34 default }" containerID=ee1636f8fd0bc306ddf0ec5b6ac99dd6f135617d2bec795d1da7bae66939d97c datapathConfiguration="&{false false false false false }" interface=lxcd4d7235e7798 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee1636f8fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee1636f8fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ee1636f8fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee1636f8fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identity=34423 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee1636f8fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identity=34423 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ee1636f8fd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=51 identity=34423 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee1636f8fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=51 identity=34423 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.227 92137446-e3b1-4b69-b739-7afc7c9b38d0 default }" containerID=da4896b449c85ec8809732d6cc0362fc7db346d8fa0c5e670aa1bf896641d465 datapathConfiguration="&{false false false false false }" interface=lxcced25d2d8a3c k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-876hs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da4896b449 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2015 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-876hs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da4896b449 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2015 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-876hs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=da4896b449 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2015 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-876hs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da4896b449 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2015 identity=54369 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-876hs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da4896b449 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2015 identity=54369 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-876hs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=da4896b449 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2015 identity=54369 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-876hs subsys=endpoint level=info msg="Successful endpoint creation" containerID=da4896b449 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2015 identity=54369 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-876hs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.228 7aa41bb9-ec98-41fe-9f86-4bd371c6a3d0 default }" containerID=5fc55e2818150f0541a9433a63394a4cfad484b65be760a11d066a66fd2b5106 datapathConfiguration="&{false false false false false }" interface=lxcf6d9152957db k8sPodName=openstack/memcached-memcached-6479589586-b8xwm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5fc55e2818 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-b8xwm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5fc55e2818 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-b8xwm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5fc55e2818 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 identity=20526 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-b8xwm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5fc55e2818 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 identity=20526 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-b8xwm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5fc55e2818 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=832 identity=20526 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-b8xwm subsys=endpoint level=info msg="Successful endpoint creation" containerID=5fc55e2818 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=832 identity=20526 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-b8xwm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.60 3b865224-04b4-4496-98f1-158e02e76d5b default }" containerID=a8e5cf850df40d05baa0174ce627227db7a71802217fbb36594741051bacb1b1 datapathConfiguration="&{false false false false false }" interface=lxcb4627db27c48 k8sPodName=local-path-storage/helper-pod-create-pvc-7a864828-9d26-47e1-83e5-c757980f2fd2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a8e5cf850d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1658 ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a864828-9d26-47e1-83e5-c757980f2fd2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a8e5cf850d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1658 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a864828-9d26-47e1-83e5-c757980f2fd2 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a8e5cf850d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1658 identity=53098 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a864828-9d26-47e1-83e5-c757980f2fd2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a8e5cf850d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1658 identity=53098 ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a864828-9d26-47e1-83e5-c757980f2fd2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a8e5cf850d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1658 identity=53098 ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a864828-9d26-47e1-83e5-c757980f2fd2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a8e5cf850d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1658 identity=53098 ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a864828-9d26-47e1-83e5-c757980f2fd2 subsys=daemon level=info msg="Delete endpoint request" containerID=a8e5cf850d endpointID=1658 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-7a864828-9d26-47e1-83e5-c757980f2fd2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a8e5cf850d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1658 identity=53098 ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a864828-9d26-47e1-83e5-c757980f2fd2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 d67d9af5-d938-4551-a8ce-c2cc987e97af default }" containerID=099c4a4265987d1baa6bb12194ce1ac1b5dca6da19f455e811436302e3940b5e datapathConfiguration="&{false false false false false }" interface=lxcdd81d93753e8 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=099c4a4265 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1004 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=099c4a4265 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1004 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=099c4a4265 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1004 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=099c4a4265 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1004 identity=57180 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=099c4a4265 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1004 identity=57180 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=099c4a4265 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1004 identity=57180 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=099c4a4265 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1004 identity=57180 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.82 ee3493db-b226-4ca2-88bc-f5e1894cd322 default }" containerID=50a010929df2331071b8bc8f15abc4d8dd9e2b4d6b7f1dd10e1f00980e11bcaa datapathConfiguration="&{false false false false false }" interface=lxca432ede429e5 k8sPodName=openstack/keystone-credential-setup-sjhws labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=50a010929d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3124 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-credential-setup-sjhws subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=50a010929d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3124 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f86e3ee5-35ed-482d-884a-914463005c4a,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=f86e3ee5-35ed-482d-884a-914463005c4a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-credential-setup-sjhws subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f86e3ee5-35ed-482d-884a-914463005c4a;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=f86e3ee5-35ed-482d-884a-914463005c4a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=50a010929d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3124 identity=20396 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f86e3ee5-35ed-482d-884a-914463005c4a,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=f86e3ee5-35ed-482d-884a-914463005c4a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-credential-setup-sjhws oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=50a010929d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3124 identity=20396 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-credential-setup-sjhws subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=50a010929d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3124 identity=20396 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-credential-setup-sjhws subsys=endpoint level=info msg="Successful endpoint creation" containerID=50a010929d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3124 identity=20396 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-credential-setup-sjhws subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.53 31390670-fd70-495a-82d3-ffde7a343e16 default }" containerID=5fc61821ea5b4a90eae6975815ba29fc3d35aba55a02a08f14cfb5bfa8cbd35e datapathConfiguration="&{false false false false false }" interface=lxc048258d5d927 k8sPodName=openstack/keystone-api-696f57c5f4-88skf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5fc61821ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2862 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-api-696f57c5f4-88skf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5fc61821ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2862 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-api-696f57c5f4-88skf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5fc61821ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2862 identity=60072 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-api-696f57c5f4-88skf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5fc61821ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2862 identity=60072 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-api-696f57c5f4-88skf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5fc61821ea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2862 identity=60072 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-api-696f57c5f4-88skf subsys=endpoint level=info msg="Successful endpoint creation" containerID=5fc61821ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2862 identity=60072 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-api-696f57c5f4-88skf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=50a010929d endpointID=3124 k8sNamespace=openstack k8sPodName=keystone-credential-setup-sjhws subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f86e3ee5-35ed-482d-884a-914463005c4a k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=f86e3ee5-35ed-482d-884a-914463005c4a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=50a010929d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3124 identity=20396 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-credential-setup-sjhws subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 56e6d82c-4907-4d13-893f-a38da82b69ce default }" containerID=fa309483f50b1ac1ac02e542d9063dd919b87d4d43d2a2bbd9f70d9e99ab4418 datapathConfiguration="&{false false false false false }" interface=lxc4d5ff3bdabaa k8sPodName=openstack/keystone-db-init-4wc7h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa309483f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=308 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/keystone-db-init-4wc7h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa309483f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=308 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fb3f162b-859c-4b46-9dd6-4c911c052ebe,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=fb3f162b-859c-4b46-9dd6-4c911c052ebe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/keystone-db-init-4wc7h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=fb3f162b-859c-4b46-9dd6-4c911c052ebe;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=fb3f162b-859c-4b46-9dd6-4c911c052ebe;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa309483f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=308 identity=21524 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fb3f162b-859c-4b46-9dd6-4c911c052ebe,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=fb3f162b-859c-4b46-9dd6-4c911c052ebe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/keystone-db-init-4wc7h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa309483f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=308 identity=21524 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/keystone-db-init-4wc7h subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fa309483f5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=308 identity=21524 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/keystone-db-init-4wc7h subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa309483f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=308 identity=21524 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/keystone-db-init-4wc7h subsys=daemon level=info msg="Delete endpoint request" containerID=fa309483f5 endpointID=308 k8sNamespace=openstack k8sPodName=keystone-db-init-4wc7h subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=fb3f162b-859c-4b46-9dd6-4c911c052ebe k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=fb3f162b-859c-4b46-9dd6-4c911c052ebe k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=fa309483f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=308 identity=21524 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/keystone-db-init-4wc7h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 f08d1f8b-78ed-48a8-b2dd-4475deeb6a73 default }" containerID=b75797957cf5277baa87af8aa2269ff2f48fbca283c0d101105e187a1e083321 datapathConfiguration="&{false false false false false }" interface=lxcf92cd78eded9 k8sPodName=openstack/keystone-fernet-setup-mq8tw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b75797957c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-fernet-setup-mq8tw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b75797957c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4d46f8a8-1b00-4de1-ac90-cfe608f3e029,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=4d46f8a8-1b00-4de1-ac90-cfe608f3e029,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-fernet-setup-mq8tw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4d46f8a8-1b00-4de1-ac90-cfe608f3e029;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=4d46f8a8-1b00-4de1-ac90-cfe608f3e029;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b75797957c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 identity=2833 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4d46f8a8-1b00-4de1-ac90-cfe608f3e029,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=4d46f8a8-1b00-4de1-ac90-cfe608f3e029,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-fernet-setup-mq8tw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b75797957c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 identity=2833 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-fernet-setup-mq8tw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b75797957c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=42 identity=2833 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-fernet-setup-mq8tw subsys=endpoint level=info msg="Successful endpoint creation" containerID=b75797957c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=42 identity=2833 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-fernet-setup-mq8tw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b75797957c endpointID=42 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-mq8tw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4d46f8a8-1b00-4de1-ac90-cfe608f3e029 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=4d46f8a8-1b00-4de1-ac90-cfe608f3e029 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b75797957c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=42 identity=2833 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-fernet-setup-mq8tw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 bbeefc84-1f04-4496-89c6-ccec8cc32869 default }" containerID=714b2ab5a4e06f1232dbbd5e279d6a8c739553339d098b0a836d23405abffb0a datapathConfiguration="&{false false false false false }" interface=lxc5224771ccd94 k8sPodName=openstack/keystone-db-sync-4qhg2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=714b2ab5a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2544 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-db-sync-4qhg2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=714b2ab5a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2544 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2155c992-6708-4326-aa25-21bba58aeea6,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=2155c992-6708-4326-aa25-21bba58aeea6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-db-sync-4qhg2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2155c992-6708-4326-aa25-21bba58aeea6;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=2155c992-6708-4326-aa25-21bba58aeea6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=714b2ab5a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2544 identity=7162 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2155c992-6708-4326-aa25-21bba58aeea6,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=2155c992-6708-4326-aa25-21bba58aeea6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-db-sync-4qhg2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=714b2ab5a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2544 identity=7162 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-db-sync-4qhg2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=714b2ab5a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2544 identity=7162 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-db-sync-4qhg2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=714b2ab5a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2544 identity=7162 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-db-sync-4qhg2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=714b2ab5a4 endpointID=2544 k8sNamespace=openstack k8sPodName=keystone-db-sync-4qhg2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2155c992-6708-4326-aa25-21bba58aeea6 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=2155c992-6708-4326-aa25-21bba58aeea6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=714b2ab5a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2544 identity=7162 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-db-sync-4qhg2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 45fb3985-b71b-4963-9f16-7d8a06f6cf97 default }" containerID=10256dd6688874b552c07e05782be8ab780db62fc96e2ca6671a6bf5aa767988 datapathConfiguration="&{false false false false false }" interface=lxc25707c88c452 k8sPodName=openstack/keystone-rabbit-init-xqqqq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=10256dd668 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=999 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-rabbit-init-xqqqq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=10256dd668 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=999 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f2eb51bc-310e-41ea-a23e-2b150bc89522,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f2eb51bc-310e-41ea-a23e-2b150bc89522,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-rabbit-init-xqqqq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f2eb51bc-310e-41ea-a23e-2b150bc89522;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=f2eb51bc-310e-41ea-a23e-2b150bc89522;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=10256dd668 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=999 identity=28787 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f2eb51bc-310e-41ea-a23e-2b150bc89522,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f2eb51bc-310e-41ea-a23e-2b150bc89522,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-rabbit-init-xqqqq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=10256dd668 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=999 identity=28787 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-rabbit-init-xqqqq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=10256dd668 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=999 identity=28787 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-rabbit-init-xqqqq subsys=endpoint level=info msg="Successful endpoint creation" containerID=10256dd668 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=999 identity=28787 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-rabbit-init-xqqqq subsys=daemon level=info msg="Delete endpoint request" containerID=10256dd668 endpointID=999 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-xqqqq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f2eb51bc-310e-41ea-a23e-2b150bc89522 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=f2eb51bc-310e-41ea-a23e-2b150bc89522 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=10256dd668 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=999 identity=28787 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-rabbit-init-xqqqq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.141 7ef166fc-778c-4444-a8f1-2ada85438c13 default }" containerID=09b5fd274b61689e4aa26bb601291811f52fc38c7223cf8ad067e6c38a3a45ac datapathConfiguration="&{false false false false false }" interface=lxc45035248a225 k8sPodName=openstack/keystone-domain-manage-bg84w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=09b5fd274b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-domain-manage-bg84w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=09b5fd274b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=cbc371d6-c391-4080-b22b-b75020255c41,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=cbc371d6-c391-4080-b22b-b75020255c41,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-domain-manage-bg84w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=09b5fd274b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-domain-manage-bg84w line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=cbc371d6-c391-4080-b22b-b75020255c41;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=cbc371d6-c391-4080-b22b-b75020255c41;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=09b5fd274b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identity=35116 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=cbc371d6-c391-4080-b22b-b75020255c41,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=cbc371d6-c391-4080-b22b-b75020255c41,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-domain-manage-bg84w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=09b5fd274b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identity=35116 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-domain-manage-bg84w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=09b5fd274b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1152 identity=35116 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-domain-manage-bg84w subsys=endpoint level=info msg="Successful endpoint creation" containerID=09b5fd274b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1152 identity=35116 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-domain-manage-bg84w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=09b5fd274b endpointID=1152 k8sNamespace=openstack k8sPodName=keystone-domain-manage-bg84w subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=cbc371d6-c391-4080-b22b-b75020255c41 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=cbc371d6-c391-4080-b22b-b75020255c41 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=09b5fd274b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1152 identity=35116 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-domain-manage-bg84w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.211 dced03b5-5e26-4221-854c-f6f4cdd0c84c default }" containerID=dea41bc2c7c9972731a505c3b66deb6b3fcf3430793b6d80726135f098e99641 datapathConfiguration="&{false false false false false }" interface=lxc92fd23532047 k8sPodName=openstack/keystone-bootstrap-lnfvl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dea41bc2c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-bootstrap-lnfvl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dea41bc2c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4e62ddcb-d5bc-4d4e-b9b1-5c0ca09e6f97,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=4e62ddcb-d5bc-4d4e-b9b1-5c0ca09e6f97,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-bootstrap-lnfvl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4e62ddcb-d5bc-4d4e-b9b1-5c0ca09e6f97;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=4e62ddcb-d5bc-4d4e-b9b1-5c0ca09e6f97;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dea41bc2c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 identity=59414 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4e62ddcb-d5bc-4d4e-b9b1-5c0ca09e6f97,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=4e62ddcb-d5bc-4d4e-b9b1-5c0ca09e6f97,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-bootstrap-lnfvl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dea41bc2c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 identity=59414 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-bootstrap-lnfvl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=dea41bc2c7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=904 identity=59414 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-bootstrap-lnfvl subsys=endpoint level=info msg="Successful endpoint creation" containerID=dea41bc2c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=904 identity=59414 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-bootstrap-lnfvl subsys=daemon level=info msg="Delete endpoint request" containerID=dea41bc2c7 endpointID=904 k8sNamespace=openstack k8sPodName=keystone-bootstrap-lnfvl subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4e62ddcb-d5bc-4d4e-b9b1-5c0ca09e6f97 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=4e62ddcb-d5bc-4d4e-b9b1-5c0ca09e6f97 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=dea41bc2c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=904 identity=59414 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-bootstrap-lnfvl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 5dd87532-8663-44e9-8e43-34681e0639e7 default }" containerID=c91cbd2d01c227a84ec7aa2a088df5a2d4c2375715f0a718c397fafccad5b8d7 datapathConfiguration="&{false false false false false }" interface=lxc101d9ee446af k8sPodName=local-path-storage/helper-pod-create-pvc-8c4aa12e-3609-4271-a2b6-af98bcfc05f4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c91cbd2d01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=149 ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8c4aa12e-3609-4271-a2b6-af98bcfc05f4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c91cbd2d01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=149 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8c4aa12e-3609-4271-a2b6-af98bcfc05f4 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c91cbd2d01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=149 identity=53098 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8c4aa12e-3609-4271-a2b6-af98bcfc05f4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c91cbd2d01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=149 identity=53098 ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8c4aa12e-3609-4271-a2b6-af98bcfc05f4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c91cbd2d01 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=149 identity=53098 ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8c4aa12e-3609-4271-a2b6-af98bcfc05f4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c91cbd2d01 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=149 identity=53098 ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8c4aa12e-3609-4271-a2b6-af98bcfc05f4 subsys=daemon level=info msg="Delete endpoint request" containerID=c91cbd2d01 endpointID=149 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8c4aa12e-3609-4271-a2b6-af98bcfc05f4 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c91cbd2d01 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=149 identity=53098 ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8c4aa12e-3609-4271-a2b6-af98bcfc05f4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 5ab0e565-4a73-453a-8bb7-447b8cdf9288 default }" containerID=437c6577163e03ac9e2728bccb67917562d68bccbf2c70f957b208e4ea25a0cd datapathConfiguration="&{false false false false false }" interface=lxc120e4f6e303d k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=437c657716 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3653 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=437c657716 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3653 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=437c657716 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3653 identity=23273 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=437c657716 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3653 identity=23273 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=437c657716 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3653 identity=23273 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=437c657716 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3653 identity=23273 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.64 75019dcc-fda6-4d1f-8e4d-a7ed84a10cd7 default }" containerID=1ea04c5bc8a1d1c186fe377dd29bffb2b661a04564550a0b994b45eaa612aba7 datapathConfiguration="&{false false false false false }" interface=lxcc8021bbf6468 k8sPodName=openstack/barbican-api-7c6d9f4bf6-n7xrs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ea04c5bc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1852 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/barbican-api-7c6d9f4bf6-n7xrs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ea04c5bc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1852 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/barbican-api-7c6d9f4bf6-n7xrs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ea04c5bc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1852 identity=8339 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/barbican-api-7c6d9f4bf6-n7xrs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ea04c5bc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1852 identity=8339 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/barbican-api-7c6d9f4bf6-n7xrs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 0bed0493-e2cc-4991-9226-10a964b33734 default }" containerID=9c503f503fa4545a41806e2184499f1b8feb41e85c311412a0732929ab396216 datapathConfiguration="&{false false false false false }" interface=lxc2dfc3061bd7f k8sPodName=openstack/barbican-db-init-qfpr9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c503f503f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2014 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-db-init-qfpr9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c503f503f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2014 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c607a4f8-5263-480a-af8e-10ff662cd113,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=c607a4f8-5263-480a-af8e-10ff662cd113,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-db-init-qfpr9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=c607a4f8-5263-480a-af8e-10ff662cd113;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=c607a4f8-5263-480a-af8e-10ff662cd113;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c503f503f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2014 identity=55366 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c607a4f8-5263-480a-af8e-10ff662cd113,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=c607a4f8-5263-480a-af8e-10ff662cd113,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-db-init-qfpr9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c503f503f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2014 identity=55366 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-db-init-qfpr9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1ea04c5bc8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1852 identity=8339 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/barbican-api-7c6d9f4bf6-n7xrs subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ea04c5bc8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1852 identity=8339 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/barbican-api-7c6d9f4bf6-n7xrs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9c503f503f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2014 identity=55366 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-db-init-qfpr9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c503f503f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2014 identity=55366 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-db-init-qfpr9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9c503f503f endpointID=2014 k8sNamespace=openstack k8sPodName=barbican-db-init-qfpr9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=c607a4f8-5263-480a-af8e-10ff662cd113 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=c607a4f8-5263-480a-af8e-10ff662cd113 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=9c503f503f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2014 identity=55366 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-db-init-qfpr9 subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03608289258322399 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.138 dd64e4b7-efe0-4c7e-91cd-d355bfe1c155 default }" containerID=4739c323ea9a957fbb2d7600df53c365f93a534bf46c07dad11d6b33e1911007 datapathConfiguration="&{false false false false false }" interface=lxc3a389eae14c3 k8sPodName=openstack/barbican-db-sync-cdvmw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4739c323ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2118 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-db-sync-cdvmw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4739c323ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2118 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=60c09215-2a4d-4fa3-8aca-54bb82e45a61,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=60c09215-2a4d-4fa3-8aca-54bb82e45a61,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-db-sync-cdvmw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=60c09215-2a4d-4fa3-8aca-54bb82e45a61;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=60c09215-2a4d-4fa3-8aca-54bb82e45a61;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4739c323ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2118 identity=33928 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=60c09215-2a4d-4fa3-8aca-54bb82e45a61,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=60c09215-2a4d-4fa3-8aca-54bb82e45a61,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-db-sync-cdvmw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4739c323ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2118 identity=33928 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-db-sync-cdvmw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4739c323ea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2118 identity=33928 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-db-sync-cdvmw subsys=endpoint level=info msg="Successful endpoint creation" containerID=4739c323ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2118 identity=33928 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-db-sync-cdvmw subsys=daemon level=info msg="Delete endpoint request" containerID=4739c323ea endpointID=2118 k8sNamespace=openstack k8sPodName=barbican-db-sync-cdvmw subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=60c09215-2a4d-4fa3-8aca-54bb82e45a61 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=60c09215-2a4d-4fa3-8aca-54bb82e45a61 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=4739c323ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2118 identity=33928 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-db-sync-cdvmw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.206 8470c365-6620-4d22-b3cf-9699830146fc default }" containerID=ddb36793dbad18fa8e72061c619c8365485dbe314d0edb78a9c6f4c91905d233 datapathConfiguration="&{false false false false false }" interface=lxcf3a225f8ee7b k8sPodName=openstack/barbican-rabbit-init-hx5vj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ddb36793db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1314 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/barbican-rabbit-init-hx5vj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ddb36793db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1314 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4d3812f2-d8a2-4c25-b049-fc822adb13d5,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4d3812f2-d8a2-4c25-b049-fc822adb13d5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/barbican-rabbit-init-hx5vj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=4d3812f2-d8a2-4c25-b049-fc822adb13d5;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=4d3812f2-d8a2-4c25-b049-fc822adb13d5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ddb36793db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1314 identity=12337 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4d3812f2-d8a2-4c25-b049-fc822adb13d5,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4d3812f2-d8a2-4c25-b049-fc822adb13d5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/barbican-rabbit-init-hx5vj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ddb36793db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1314 identity=12337 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/barbican-rabbit-init-hx5vj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ddb36793db datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1314 identity=12337 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/barbican-rabbit-init-hx5vj subsys=endpoint level=info msg="Successful endpoint creation" containerID=ddb36793db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1314 identity=12337 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/barbican-rabbit-init-hx5vj subsys=daemon level=info msg="Delete endpoint request" containerID=ddb36793db endpointID=1314 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-hx5vj subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=4d3812f2-d8a2-4c25-b049-fc822adb13d5 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=4d3812f2-d8a2-4c25-b049-fc822adb13d5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ddb36793db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1314 identity=12337 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/barbican-rabbit-init-hx5vj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 d4f45038-29b6-4e5f-a0f9-727eb2251462 default }" containerID=06d7fb95f5b6e7b088c363fa0a07ec92b220e9a8e310e2a2dc3572547f7a5e5b datapathConfiguration="&{false false false false false }" interface=lxcec8e14bd7278 k8sPodName=openstack/barbican-ks-service-pgsbs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=06d7fb95f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1861 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/barbican-ks-service-pgsbs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=06d7fb95f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1861 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=49b90392-a512-4ed9-9e1b-c5279d721914,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=49b90392-a512-4ed9-9e1b-c5279d721914,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/barbican-ks-service-pgsbs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=49b90392-a512-4ed9-9e1b-c5279d721914;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=49b90392-a512-4ed9-9e1b-c5279d721914;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=06d7fb95f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1861 identity=23130 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=49b90392-a512-4ed9-9e1b-c5279d721914,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=49b90392-a512-4ed9-9e1b-c5279d721914,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/barbican-ks-service-pgsbs oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=06d7fb95f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1861 identity=23130 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/barbican-ks-service-pgsbs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=06d7fb95f5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1861 identity=23130 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/barbican-ks-service-pgsbs subsys=endpoint level=info msg="Successful endpoint creation" containerID=06d7fb95f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1861 identity=23130 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/barbican-ks-service-pgsbs subsys=daemon level=info msg="Delete endpoint request" containerID=06d7fb95f5 endpointID=1861 k8sNamespace=openstack k8sPodName=barbican-ks-service-pgsbs subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=49b90392-a512-4ed9-9e1b-c5279d721914 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=49b90392-a512-4ed9-9e1b-c5279d721914 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=06d7fb95f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1861 identity=23130 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/barbican-ks-service-pgsbs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 7940b6cc-dc1e-4827-9729-d8bf587778d7 default }" containerID=2c0d4e54fa80ca18931ddb32e035eab0af646d8c43b7d9eb8e7d63d63c8be57c datapathConfiguration="&{false false false false false }" interface=lxc5d287692cc96 k8sPodName=openstack/barbican-ks-endpoints-6knvh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c0d4e54fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6knvh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c0d4e54fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7e38d91a-56a1-4c67-987e-261ff4dbcc8a,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7e38d91a-56a1-4c67-987e-261ff4dbcc8a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6knvh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2c0d4e54fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.133 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6knvh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=7e38d91a-56a1-4c67-987e-261ff4dbcc8a;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=7e38d91a-56a1-4c67-987e-261ff4dbcc8a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c0d4e54fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identity=20190 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7e38d91a-56a1-4c67-987e-261ff4dbcc8a,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7e38d91a-56a1-4c67-987e-261ff4dbcc8a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6knvh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c0d4e54fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identity=20190 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6knvh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2c0d4e54fa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=537 identity=20190 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6knvh subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c0d4e54fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=537 identity=20190 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6knvh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2c0d4e54fa endpointID=537 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-6knvh subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=7e38d91a-56a1-4c67-987e-261ff4dbcc8a k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=7e38d91a-56a1-4c67-987e-261ff4dbcc8a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2c0d4e54fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=537 identity=20190 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6knvh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 715ed5d9-6ba1-4e6a-a8ce-ee0c2b1b49d7 default }" containerID=0dca27b8123fc526f293c97b5028ee8bfd9ec0e4f9be78b171be85589836b039 datapathConfiguration="&{false false false false false }" interface=lxcb8ea9a617e32 k8sPodName=openstack/barbican-ks-user-795k7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0dca27b812 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-ks-user-795k7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0dca27b812 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e6457628-03b1-4b1d-a8aa-ff4f24e90a78,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=e6457628-03b1-4b1d-a8aa-ff4f24e90a78,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-ks-user-795k7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0dca27b812 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-ks-user-795k7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e6457628-03b1-4b1d-a8aa-ff4f24e90a78;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=e6457628-03b1-4b1d-a8aa-ff4f24e90a78;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0dca27b812 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 identity=52218 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e6457628-03b1-4b1d-a8aa-ff4f24e90a78,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=e6457628-03b1-4b1d-a8aa-ff4f24e90a78,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-ks-user-795k7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0dca27b812 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 identity=52218 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-ks-user-795k7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0dca27b812 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=193 identity=52218 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-ks-user-795k7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0dca27b812 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=193 identity=52218 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-ks-user-795k7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0dca27b812 endpointID=193 k8sNamespace=openstack k8sPodName=barbican-ks-user-795k7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e6457628-03b1-4b1d-a8aa-ff4f24e90a78 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=e6457628-03b1-4b1d-a8aa-ff4f24e90a78 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=0dca27b812 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=193 identity=52218 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-ks-user-795k7 subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.136 b2778c3f-6fa2-4a41-936c-3b8dca02eb9b default }" containerID=6e8b4cd083677c667b9ff9c1fe4243c58ecc7444c5f609d454663fdf05996d92 datapathConfiguration="&{false false false false false }" interface=lxce9a540cd597c k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-2gmkt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e8b4cd083 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2192 ipv4=10.0.0.136 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-2gmkt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e8b4cd083 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2192 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.136 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-2gmkt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e8b4cd083 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2192 identity=4039 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.136 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-2gmkt oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6e8b4cd083 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2192 identity=4039 ipv4=10.0.0.136 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-2gmkt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e8b4cd083 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2192 identity=4039 ipv4=10.0.0.136 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-2gmkt subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e8b4cd083 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2192 identity=4039 ipv4=10.0.0.136 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-2gmkt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.83 83381fc4-fbd9-41ed-bf47-2df6f57e50a2 default }" containerID=cba112a171051c1fdc6fc0d590a1d6baaeae05ecf60af09a9e799328e63cc663 datapathConfiguration="&{false false false false false }" interface=lxc985a5160d333 k8sPodName=openstack/rook-ceph-detect-version-jv4n9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cba112a171 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=38 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jv4n9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cba112a171 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=38 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=ff887428-9c5b-4437-bdba-796db0d26144,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=ff887428-9c5b-4437-bdba-796db0d26144,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jv4n9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=ff887428-9c5b-4437-bdba-796db0d26144;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=ff887428-9c5b-4437-bdba-796db0d26144;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=cba112a171 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=38 identity=24377 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=ff887428-9c5b-4437-bdba-796db0d26144,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=ff887428-9c5b-4437-bdba-796db0d26144,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jv4n9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cba112a171 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=38 identity=24377 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jv4n9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cba112a171 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=38 identity=24377 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jv4n9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cba112a171 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=38 identity=24377 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jv4n9 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cba112a171 endpointID=38 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-jv4n9 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=ff887428-9c5b-4437-bdba-796db0d26144 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=ff887428-9c5b-4437-bdba-796db0d26144 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=cba112a171 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=38 identity=24377 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jv4n9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 f5365c13-dd9d-4797-8773-ea0f7e6add95 default }" containerID=4e2cc1e181417995e437329c512a4256f3567158f855525fcea112829a167144 datapathConfiguration="&{false false false false false }" interface=lxc9d99cd4fa248 k8sPodName=openstack/ceph-object-controller-detect-version-664gg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e2cc1e181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=918 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-664gg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e2cc1e181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=918 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=fcd50f2a-8651-4576-8df3-2386127d3353,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=fcd50f2a-8651-4576-8df3-2386127d3353,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-664gg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=fcd50f2a-8651-4576-8df3-2386127d3353;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=fcd50f2a-8651-4576-8df3-2386127d3353;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e2cc1e181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=918 identity=6512 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=fcd50f2a-8651-4576-8df3-2386127d3353,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=fcd50f2a-8651-4576-8df3-2386127d3353,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-664gg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e2cc1e181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=918 identity=6512 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-664gg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4e2cc1e181 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=918 identity=6512 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-664gg subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e2cc1e181 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=918 identity=6512 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-664gg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4e2cc1e181 endpointID=918 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-664gg subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=fcd50f2a-8651-4576-8df3-2386127d3353 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=fcd50f2a-8651-4576-8df3-2386127d3353 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=4e2cc1e181 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=918 identity=6512 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-664gg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 1a0e9678-5e98-4e20-b93f-6b45bd57d166 default }" containerID=0b64296b71c13e3dd581033fdc2efeb9731d0d62adf207dbe4c47b79f77241d1 datapathConfiguration="&{false false false false false }" interface=lxcef0fc9ad5e6f k8sPodName=local-path-storage/helper-pod-create-pvc-a690faf6-733a-43ce-a8d8-be81c764a4a1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b64296b71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 ipv4=10.0.0.110 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a690faf6-733a-43ce-a8d8-be81c764a4a1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b64296b71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.110 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a690faf6-733a-43ce-a8d8-be81c764a4a1 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b64296b71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 identity=53098 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.110 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a690faf6-733a-43ce-a8d8-be81c764a4a1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b64296b71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 identity=53098 ipv4=10.0.0.110 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a690faf6-733a-43ce-a8d8-be81c764a4a1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0b64296b71 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=755 identity=53098 ipv4=10.0.0.110 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a690faf6-733a-43ce-a8d8-be81c764a4a1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b64296b71 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=755 identity=53098 ipv4=10.0.0.110 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a690faf6-733a-43ce-a8d8-be81c764a4a1 subsys=daemon level=info msg="Delete endpoint request" containerID=0b64296b71 endpointID=755 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a690faf6-733a-43ce-a8d8-be81c764a4a1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0b64296b71 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=755 identity=53098 ipv4=10.0.0.110 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a690faf6-733a-43ce-a8d8-be81c764a4a1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 80615312-6ecd-4677-bd3c-b5ce0d3acc27 default }" containerID=83b27755497afdaf2625fd7c5838cdb7678795071ce0a65e01854f0bb5b6a104 datapathConfiguration="&{false false false false false }" interface=lxcdb3427c5f093 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=83b2775549 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1301 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=83b2775549 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1301 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=83b2775549 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1301 identity=37283 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=83b2775549 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1301 identity=37283 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=83b2775549 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1301 identity=37283 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=83b2775549 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1301 identity=37283 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.74 c8a1ad44-4bc5-4bbb-af10-b6ca9da72fce default }" containerID=8e6d89585463c62a58fc6a52f318333b49af8a867e185c3fc181b14f3bec3cf6 datapathConfiguration="&{false false false false false }" interface=lxc4d7b8c37037e k8sPodName=openstack/glance-db-init-j8l5j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e6d895854 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1502 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/glance-db-init-j8l5j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e6d895854 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1502 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f1860015-0540-4e5c-8307-e53bd8df43ad,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=f1860015-0540-4e5c-8307-e53bd8df43ad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/glance-db-init-j8l5j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8e6d895854 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1502 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.74 ipv6= k8sPodName=openstack/glance-db-init-j8l5j line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f1860015-0540-4e5c-8307-e53bd8df43ad;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=f1860015-0540-4e5c-8307-e53bd8df43ad;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8e6d895854 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1502 identity=61689 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f1860015-0540-4e5c-8307-e53bd8df43ad,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=f1860015-0540-4e5c-8307-e53bd8df43ad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/glance-db-init-j8l5j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8e6d895854 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1502 identity=61689 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/glance-db-init-j8l5j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8e6d895854 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1502 identity=61689 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/glance-db-init-j8l5j subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e6d895854 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1502 identity=61689 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/glance-db-init-j8l5j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8e6d895854 endpointID=1502 k8sNamespace=openstack k8sPodName=glance-db-init-j8l5j subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f1860015-0540-4e5c-8307-e53bd8df43ad k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=f1860015-0540-4e5c-8307-e53bd8df43ad k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8e6d895854 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1502 identity=61689 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/glance-db-init-j8l5j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 581aff39-0580-4dfd-982d-5382712eb270 default }" containerID=b2eaeb56122a5cf9acfe19acf9c32ef98caf0533249b8b8a33b5a133e0430253 datapathConfiguration="&{false false false false false }" interface=lxc76a7efb7f029 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4245j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b2eaeb5612 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=781 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4245j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b2eaeb5612 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=781 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4245j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b2eaeb5612 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=781 identity=407 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4245j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b2eaeb5612 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=781 identity=407 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4245j subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.42 e94c9525-a101-441e-b35f-a0658b2a6fdc default }" containerID=15ee8ae1b433a5460a4c0499adf5e276bb7a9b7269d59e907cfc051d2f670cd1 datapathConfiguration="&{false false false false false }" interface=lxcd57db77b50e9 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zzkgm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15ee8ae1b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2525 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zzkgm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15ee8ae1b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2525 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zzkgm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15ee8ae1b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2525 identity=17301 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zzkgm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15ee8ae1b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2525 identity=17301 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zzkgm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b2eaeb5612 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=781 identity=407 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4245j subsys=endpoint level=info msg="Successful endpoint creation" containerID=b2eaeb5612 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=781 identity=407 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4245j subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=15ee8ae1b4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2525 identity=17301 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zzkgm subsys=endpoint level=info msg="Successful endpoint creation" containerID=15ee8ae1b4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2525 identity=17301 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zzkgm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.123 779724bb-802c-421c-a074-fe16d1a0fe46 default }" containerID=84e756fc62e3f8ad41e39b64f5e5d877c874b631b67863953fe2fb7b32e20524 datapathConfiguration="&{false false false false false }" interface=lxcf147c77fa20b k8sPodName=openstack/glance-db-sync-b2cth labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=84e756fc62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-db-sync-b2cth subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=84e756fc62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c4790ba2-fa13-4a1a-ba75-2e8a850c5a09,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=c4790ba2-fa13-4a1a-ba75-2e8a850c5a09,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-db-sync-b2cth subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c4790ba2-fa13-4a1a-ba75-2e8a850c5a09;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=c4790ba2-fa13-4a1a-ba75-2e8a850c5a09;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=84e756fc62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identity=2932 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c4790ba2-fa13-4a1a-ba75-2e8a850c5a09,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=c4790ba2-fa13-4a1a-ba75-2e8a850c5a09,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-db-sync-b2cth oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=84e756fc62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identity=2932 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-db-sync-b2cth subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=84e756fc62 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=487 identity=2932 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-db-sync-b2cth subsys=endpoint level=info msg="Successful endpoint creation" containerID=84e756fc62 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=487 identity=2932 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-db-sync-b2cth subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=84e756fc62 endpointID=487 k8sNamespace=openstack k8sPodName=glance-db-sync-b2cth subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c4790ba2-fa13-4a1a-ba75-2e8a850c5a09 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=c4790ba2-fa13-4a1a-ba75-2e8a850c5a09 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=84e756fc62 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=487 identity=2932 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-db-sync-b2cth subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 3304decd-2477-45cb-9934-7e7a43499457 default }" containerID=2b2f3b5beb1fc5a5064db4ddeda7b298eb63faf4caa9dc380b73a2aa31521304 datapathConfiguration="&{false false false false false }" interface=lxca748f0525638 k8sPodName=openstack/glance-rabbit-init-4hbtp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b2f3b5beb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2826 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-rabbit-init-4hbtp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b2f3b5beb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2826 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=55487a59-814d-425d-a7a8-2d9af6a7cc9d,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=55487a59-814d-425d-a7a8-2d9af6a7cc9d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-rabbit-init-4hbtp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=55487a59-814d-425d-a7a8-2d9af6a7cc9d;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=55487a59-814d-425d-a7a8-2d9af6a7cc9d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b2f3b5beb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2826 identity=36442 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=55487a59-814d-425d-a7a8-2d9af6a7cc9d,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=55487a59-814d-425d-a7a8-2d9af6a7cc9d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-rabbit-init-4hbtp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b2f3b5beb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2826 identity=36442 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-rabbit-init-4hbtp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2b2f3b5beb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2826 identity=36442 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-rabbit-init-4hbtp subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b2f3b5beb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2826 identity=36442 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-rabbit-init-4hbtp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2b2f3b5beb endpointID=2826 k8sNamespace=openstack k8sPodName=glance-rabbit-init-4hbtp subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=55487a59-814d-425d-a7a8-2d9af6a7cc9d k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=55487a59-814d-425d-a7a8-2d9af6a7cc9d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2b2f3b5beb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2826 identity=36442 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-rabbit-init-4hbtp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 c3b16b6c-e2c4-4f0f-ad39-86cf10d5759f default }" containerID=52ecda3d26acba6e39fafd03f2d0a0ba9e00dcc52c39c5e488c3f2bcdf34a87e datapathConfiguration="&{false false false false false }" interface=lxc2319296fe3ee k8sPodName=openstack/glance-ks-service-r5wvz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=52ecda3d26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3278 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-ks-service-r5wvz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=52ecda3d26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3278 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=946b2f10-cad3-4908-91c7-e8a3790be623,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=946b2f10-cad3-4908-91c7-e8a3790be623,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-ks-service-r5wvz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=946b2f10-cad3-4908-91c7-e8a3790be623;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=946b2f10-cad3-4908-91c7-e8a3790be623;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=52ecda3d26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3278 identity=9233 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=946b2f10-cad3-4908-91c7-e8a3790be623,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=946b2f10-cad3-4908-91c7-e8a3790be623,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-ks-service-r5wvz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=52ecda3d26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3278 identity=9233 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-ks-service-r5wvz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=52ecda3d26 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3278 identity=9233 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-ks-service-r5wvz subsys=endpoint level=info msg="Successful endpoint creation" containerID=52ecda3d26 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3278 identity=9233 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-ks-service-r5wvz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=52ecda3d26 endpointID=3278 k8sNamespace=openstack k8sPodName=glance-ks-service-r5wvz subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=946b2f10-cad3-4908-91c7-e8a3790be623 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=946b2f10-cad3-4908-91c7-e8a3790be623 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=52ecda3d26 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3278 identity=9233 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-ks-service-r5wvz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 a3c5de29-b0e1-482d-ac7c-00335a0908a0 default }" containerID=042e92c7c8b66b1a9cfb80027de34bcdcb39667396a244f543d9a4a725e1b8e3 datapathConfiguration="&{false false false false false }" interface=lxc20ee68cb53c6 k8sPodName=openstack/glance-ks-endpoints-8b8wm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=042e92c7c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-ks-endpoints-8b8wm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=042e92c7c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5ea8a5bd-49cc-4116-a943-3a3cee8f44e6,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=5ea8a5bd-49cc-4116-a943-3a3cee8f44e6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-ks-endpoints-8b8wm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5ea8a5bd-49cc-4116-a943-3a3cee8f44e6;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=5ea8a5bd-49cc-4116-a943-3a3cee8f44e6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=042e92c7c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 identity=20368 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5ea8a5bd-49cc-4116-a943-3a3cee8f44e6,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=5ea8a5bd-49cc-4116-a943-3a3cee8f44e6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-ks-endpoints-8b8wm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=042e92c7c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 identity=20368 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-ks-endpoints-8b8wm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=042e92c7c8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=393 identity=20368 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-ks-endpoints-8b8wm subsys=endpoint level=info msg="Successful endpoint creation" containerID=042e92c7c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=393 identity=20368 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-ks-endpoints-8b8wm subsys=daemon level=info msg="Delete endpoint request" containerID=042e92c7c8 endpointID=393 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-8b8wm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5ea8a5bd-49cc-4116-a943-3a3cee8f44e6 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=5ea8a5bd-49cc-4116-a943-3a3cee8f44e6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=042e92c7c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=393 identity=20368 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-ks-endpoints-8b8wm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 57cae582-cd8b-4418-817c-7fb98587a217 default }" containerID=caf4334325adf50d8dae133331ce542ebfecbc6a414e7a89755057062a4348bc datapathConfiguration="&{false false false false false }" interface=lxc8f612d1be731 k8sPodName=openstack/glance-ks-user-mjtpj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=caf4334325 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3543 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-user-mjtpj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=caf4334325 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3543 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=02525be2-059e-4098-af2e-ef111db53f1b,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=02525be2-059e-4098-af2e-ef111db53f1b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-user-mjtpj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=02525be2-059e-4098-af2e-ef111db53f1b;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=02525be2-059e-4098-af2e-ef111db53f1b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=caf4334325 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3543 identity=58917 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=02525be2-059e-4098-af2e-ef111db53f1b,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=02525be2-059e-4098-af2e-ef111db53f1b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-user-mjtpj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=caf4334325 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3543 identity=58917 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-user-mjtpj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=caf4334325 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3543 identity=58917 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-user-mjtpj subsys=endpoint level=info msg="Successful endpoint creation" containerID=caf4334325 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3543 identity=58917 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-user-mjtpj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=caf4334325 endpointID=3543 k8sNamespace=openstack k8sPodName=glance-ks-user-mjtpj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=02525be2-059e-4098-af2e-ef111db53f1b k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=02525be2-059e-4098-af2e-ef111db53f1b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=caf4334325 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3543 identity=58917 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-user-mjtpj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 654fc277-8054-4061-8a21-d6446d2c9d48 default }" containerID=491e3889068d5ebda11ce04d29af523b0ee8539b2f48ea94409fe24274886970 datapathConfiguration="&{false false false false false }" interface=lxc361d266a7416 k8sPodName=openstack/glance-metadefs-load-znsxq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=491e388906 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-metadefs-load-znsxq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=491e388906 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d70a5a11-1285-4c18-bcf2-c786d8fa4abf,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=d70a5a11-1285-4c18-bcf2-c786d8fa4abf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-metadefs-load-znsxq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d70a5a11-1285-4c18-bcf2-c786d8fa4abf;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=d70a5a11-1285-4c18-bcf2-c786d8fa4abf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=491e388906 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 identity=53598 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d70a5a11-1285-4c18-bcf2-c786d8fa4abf,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=d70a5a11-1285-4c18-bcf2-c786d8fa4abf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-metadefs-load-znsxq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=491e388906 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 identity=53598 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-metadefs-load-znsxq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=491e388906 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=122 identity=53598 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-metadefs-load-znsxq subsys=endpoint level=info msg="Successful endpoint creation" containerID=491e388906 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=122 identity=53598 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-metadefs-load-znsxq subsys=daemon level=info msg="Delete endpoint request" containerID=491e388906 endpointID=122 k8sNamespace=openstack k8sPodName=glance-metadefs-load-znsxq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d70a5a11-1285-4c18-bcf2-c786d8fa4abf k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=d70a5a11-1285-4c18-bcf2-c786d8fa4abf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=491e388906 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=122 identity=53598 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-metadefs-load-znsxq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.248 842aa53f-5bef-4272-b806-813ea6c74cb2 default }" containerID=6a110633d88e82c5ba3a1023599b9875f36e2f7cf39b1e893b05eff398497ea7 datapathConfiguration="&{false false false false false }" interface=lxc252c01bb7586 k8sPodName=openstack/glance-storage-init-7jpdk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a110633d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1129 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-storage-init-7jpdk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a110633d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1129 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=467c1aed-a4ea-4d34-bb24-fe98389c9c19,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=467c1aed-a4ea-4d34-bb24-fe98389c9c19,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-storage-init-7jpdk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6a110633d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1129 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-storage-init-7jpdk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=467c1aed-a4ea-4d34-bb24-fe98389c9c19;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=467c1aed-a4ea-4d34-bb24-fe98389c9c19;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a110633d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1129 identity=7099 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=467c1aed-a4ea-4d34-bb24-fe98389c9c19,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=467c1aed-a4ea-4d34-bb24-fe98389c9c19,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-storage-init-7jpdk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a110633d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1129 identity=7099 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-storage-init-7jpdk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6a110633d8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1129 identity=7099 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-storage-init-7jpdk subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a110633d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1129 identity=7099 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-storage-init-7jpdk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6a110633d8 endpointID=1129 k8sNamespace=openstack k8sPodName=glance-storage-init-7jpdk subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=467c1aed-a4ea-4d34-bb24-fe98389c9c19 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=467c1aed-a4ea-4d34-bb24-fe98389c9c19 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6a110633d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1129 identity=7099 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-storage-init-7jpdk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 85d7e401-546c-4728-9ef3-0b9b1fc6cc06 default }" containerID=c4f14a0235cb620f9010765dcdd69e857d3c217c0579e20babae124040de6720 datapathConfiguration="&{false false false false false }" interface=lxc240748dc10ad k8sPodName=openstack/glance-api-6594f6cd84-qppht labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c4f14a0235 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=146 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-api-6594f6cd84-qppht subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c4f14a0235 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=146 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-api-6594f6cd84-qppht subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c4f14a0235 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=146 identity=12625 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-api-6594f6cd84-qppht oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c4f14a0235 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=146 identity=12625 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-api-6594f6cd84-qppht subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c4f14a0235 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=146 identity=12625 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-api-6594f6cd84-qppht subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4f14a0235 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=146 identity=12625 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-api-6594f6cd84-qppht subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.138 03b52ba8-de11-406f-9a0a-cb89b4153633 default }" containerID=df1bb4768425abc025407058e9546505f9b826e3459566f24a4349ad09d24063 datapathConfiguration="&{false false false false false }" interface=lxc45477d1cab3d k8sPodName=openstack/staffeln-api-8646fcdfc5-rj92z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df1bb47684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3741 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/staffeln-api-8646fcdfc5-rj92z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df1bb47684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3741 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/staffeln-api-8646fcdfc5-rj92z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df1bb47684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3741 identity=33673 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/staffeln-api-8646fcdfc5-rj92z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df1bb47684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3741 identity=33673 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/staffeln-api-8646fcdfc5-rj92z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 eef8f48c-431b-480c-ac5c-6d02d392f450 default }" containerID=eec6e6c7d8aceda47a730ce90d496291882f89da203bc90e76e6a91bc39af17b datapathConfiguration="&{false false false false false }" interface=lxc47a68398e0c2 k8sPodName=openstack/staffeln-db-init-7vlvs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eec6e6c7d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3855 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/staffeln-db-init-7vlvs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eec6e6c7d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3855 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=5c740810-d325-4bf2-875f-25b5e98875a5,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=5c740810-d325-4bf2-875f-25b5e98875a5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/staffeln-db-init-7vlvs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.141 569e1107-2946-4171-96ef-fbb5cd9949c9 default }" containerID=3689d0954dd75b47fcb1f31c393470bfbeec2971dca26d737b0c3a7fc44b9e43 datapathConfiguration="&{false false false false false }" interface=lxc4569c3e0fb41 k8sPodName=openstack/staffeln-conductor-59f6bd4cb-7kw67 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3689d0954d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1755 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/staffeln-conductor-59f6bd4cb-7kw67 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3689d0954d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1755 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/staffeln-conductor-59f6bd4cb-7kw67 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=5c740810-d325-4bf2-875f-25b5e98875a5;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=5c740810-d325-4bf2-875f-25b5e98875a5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=eec6e6c7d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3855 identity=1132 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=5c740810-d325-4bf2-875f-25b5e98875a5,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=5c740810-d325-4bf2-875f-25b5e98875a5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/staffeln-db-init-7vlvs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eec6e6c7d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3855 identity=1132 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/staffeln-db-init-7vlvs subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3689d0954d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1755 identity=5580 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/staffeln-conductor-59f6bd4cb-7kw67 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3689d0954d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1755 identity=5580 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/staffeln-conductor-59f6bd4cb-7kw67 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df1bb47684 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3741 identity=33673 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/staffeln-api-8646fcdfc5-rj92z subsys=endpoint level=info msg="Successful endpoint creation" containerID=df1bb47684 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3741 identity=33673 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/staffeln-api-8646fcdfc5-rj92z subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=eec6e6c7d8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3855 identity=1132 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/staffeln-db-init-7vlvs subsys=endpoint level=info msg="Successful endpoint creation" containerID=eec6e6c7d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3855 identity=1132 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/staffeln-db-init-7vlvs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3689d0954d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1755 identity=5580 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/staffeln-conductor-59f6bd4cb-7kw67 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3689d0954d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1755 identity=5580 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/staffeln-conductor-59f6bd4cb-7kw67 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eec6e6c7d8 endpointID=3855 k8sNamespace=openstack k8sPodName=staffeln-db-init-7vlvs subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=5c740810-d325-4bf2-875f-25b5e98875a5 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=5c740810-d325-4bf2-875f-25b5e98875a5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=eec6e6c7d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3855 identity=1132 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/staffeln-db-init-7vlvs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 9d5ccdc2-fc67-4d56-9a93-c566249612a8 default }" containerID=4b360bcb5706b6f00e61e61adc2f8221d810f2a2ca90f52105816b990a7bf5cb datapathConfiguration="&{false false false false false }" interface=lxc62e6c5839434 k8sPodName=openstack/staffeln-db-sync-t8vf4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b360bcb57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=848 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-db-sync-t8vf4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4b360bcb57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=848 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=af80f985-2b72-41a4-9732-7439483f74e8,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=af80f985-2b72-41a4-9732-7439483f74e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-db-sync-t8vf4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=af80f985-2b72-41a4-9732-7439483f74e8;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=af80f985-2b72-41a4-9732-7439483f74e8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4b360bcb57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=848 identity=57703 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=af80f985-2b72-41a4-9732-7439483f74e8,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=af80f985-2b72-41a4-9732-7439483f74e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-db-sync-t8vf4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4b360bcb57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=848 identity=57703 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-db-sync-t8vf4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4b360bcb57 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=848 identity=57703 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-db-sync-t8vf4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b360bcb57 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=848 identity=57703 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-db-sync-t8vf4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4b360bcb57 endpointID=848 k8sNamespace=openstack k8sPodName=staffeln-db-sync-t8vf4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=af80f985-2b72-41a4-9732-7439483f74e8 k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=af80f985-2b72-41a4-9732-7439483f74e8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=4b360bcb57 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=848 identity=57703 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-db-sync-t8vf4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 d7e83b56-7478-43f7-ae4a-e02608cdc4a4 default }" containerID=8c70d95a7f8408fc2869b2958f7f9f9a38e2ed2de4e24011916570c61a817420 datapathConfiguration="&{false false false false false }" interface=lxc6effd6dff303 k8sPodName=local-path-storage/helper-pod-create-pvc-80626644-d028-4809-a620-2e3382558baa labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c70d95a7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 ipv4=10.0.0.170 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-80626644-d028-4809-a620-2e3382558baa subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c70d95a7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.170 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-80626644-d028-4809-a620-2e3382558baa subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8c70d95a7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 identity=53098 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.170 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-80626644-d028-4809-a620-2e3382558baa oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8c70d95a7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 identity=53098 ipv4=10.0.0.170 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-80626644-d028-4809-a620-2e3382558baa subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8c70d95a7f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1460 identity=53098 ipv4=10.0.0.170 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-80626644-d028-4809-a620-2e3382558baa subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c70d95a7f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1460 identity=53098 ipv4=10.0.0.170 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-80626644-d028-4809-a620-2e3382558baa subsys=daemon level=info msg="Delete endpoint request" containerID=8c70d95a7f endpointID=1460 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-80626644-d028-4809-a620-2e3382558baa subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8c70d95a7f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1460 identity=53098 ipv4=10.0.0.170 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-80626644-d028-4809-a620-2e3382558baa subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.224 2676a1d1-a094-433b-ab1b-46c9e453997a default }" containerID=937e2cae385abfbb34cd274f3108b48907611c10760b361149188f8550e6b461 datapathConfiguration="&{false false false false false }" interface=lxc5acfa6447046 k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=937e2cae38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=937e2cae38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=937e2cae38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 identity=25042 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=937e2cae38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 identity=25042 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=937e2cae38 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1070 identity=25042 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=937e2cae38 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1070 identity=25042 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.252 cd6e8203-c9ef-4778-98b2-00ef6e431723 default }" containerID=f7589df174fce64a441f4fc9d4e99dd6ed32f213dfa0124c26640217d8437eff datapathConfiguration="&{false false false false false }" interface=lxc5493bb4f8a9a k8sPodName=openstack/cinder-db-init-wqwth labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7589df174 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1742 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/cinder-db-init-wqwth subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7589df174 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1742 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=7ebe4e36-fc28-4e31-8375-015e8906b8d4,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=7ebe4e36-fc28-4e31-8375-015e8906b8d4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/cinder-db-init-wqwth subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=7ebe4e36-fc28-4e31-8375-015e8906b8d4;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=7ebe4e36-fc28-4e31-8375-015e8906b8d4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f7589df174 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1742 identity=5973 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=7ebe4e36-fc28-4e31-8375-015e8906b8d4,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=7ebe4e36-fc28-4e31-8375-015e8906b8d4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/cinder-db-init-wqwth oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7589df174 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1742 identity=5973 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/cinder-db-init-wqwth subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f7589df174 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1742 identity=5973 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/cinder-db-init-wqwth subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7589df174 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1742 identity=5973 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/cinder-db-init-wqwth subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.118 147fbb3a-d9e0-4702-9809-87a3cde17427 default }" containerID=1acae81261fdddc49b088b2f9a97378248991608906ae4f74b034d912c5cb6b0 datapathConfiguration="&{false false false false false }" interface=lxc4df3f5261d39 k8sPodName=openstack/cinder-scheduler-b67dd9446-chfdg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1acae81261 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1252 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/cinder-scheduler-b67dd9446-chfdg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1acae81261 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1252 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/cinder-scheduler-b67dd9446-chfdg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.204 a11d0680-31c9-4a6e-93b2-147eeca996ae default }" containerID=f327b48f58e888068f97e4d38485936a9dca72e44ef58f63bdf64c8adca9a3ea datapathConfiguration="&{false false false false false }" interface=lxc1f30848029c5 k8sPodName=openstack/cinder-api-8f5c5768b-xc65b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f327b48f58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3395 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/cinder-api-8f5c5768b-xc65b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f327b48f58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3395 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/cinder-api-8f5c5768b-xc65b subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1acae81261 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1252 identity=20960 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/cinder-scheduler-b67dd9446-chfdg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1acae81261 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1252 identity=20960 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/cinder-scheduler-b67dd9446-chfdg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f327b48f58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3395 identity=813 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/cinder-api-8f5c5768b-xc65b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f327b48f58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3395 identity=813 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/cinder-api-8f5c5768b-xc65b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f327b48f58 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3395 identity=813 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/cinder-api-8f5c5768b-xc65b subsys=endpoint level=info msg="Successful endpoint creation" containerID=f327b48f58 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3395 identity=813 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/cinder-api-8f5c5768b-xc65b subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1acae81261 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1252 identity=20960 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/cinder-scheduler-b67dd9446-chfdg subsys=endpoint level=info msg="Successful endpoint creation" containerID=1acae81261 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1252 identity=20960 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/cinder-scheduler-b67dd9446-chfdg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f7589df174 endpointID=1742 k8sNamespace=openstack k8sPodName=cinder-db-init-wqwth subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=7ebe4e36-fc28-4e31-8375-015e8906b8d4 k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=7ebe4e36-fc28-4e31-8375-015e8906b8d4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=f7589df174 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1742 identity=5973 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/cinder-db-init-wqwth subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.140 b04f7b3f-8eb4-4895-86bd-c3d4fe28c630 default }" containerID=8cb869479ebf040203d658a8413aac4044eb98589d4f012c0f3fab4836572b04 datapathConfiguration="&{false false false false false }" interface=lxc9f01ad0ec454 k8sPodName=openstack/cinder-db-sync-wzxtv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8cb869479e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=960 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/cinder-db-sync-wzxtv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8cb869479e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=960 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=edab69ec-c6c1-4758-86da-6134c932795e,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=edab69ec-c6c1-4758-86da-6134c932795e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/cinder-db-sync-wzxtv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8cb869479e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=960 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.140 ipv6= k8sPodName=openstack/cinder-db-sync-wzxtv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=edab69ec-c6c1-4758-86da-6134c932795e;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=edab69ec-c6c1-4758-86da-6134c932795e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8cb869479e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=960 identity=63080 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=edab69ec-c6c1-4758-86da-6134c932795e,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=edab69ec-c6c1-4758-86da-6134c932795e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/cinder-db-sync-wzxtv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8cb869479e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=960 identity=63080 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/cinder-db-sync-wzxtv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8cb869479e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=960 identity=63080 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/cinder-db-sync-wzxtv subsys=endpoint level=info msg="Successful endpoint creation" containerID=8cb869479e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=960 identity=63080 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/cinder-db-sync-wzxtv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8cb869479e endpointID=960 k8sNamespace=openstack k8sPodName=cinder-db-sync-wzxtv subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=edab69ec-c6c1-4758-86da-6134c932795e k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=edab69ec-c6c1-4758-86da-6134c932795e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=8cb869479e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=960 identity=63080 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/cinder-db-sync-wzxtv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 0c2fe68b-11f1-440e-9b89-3645a1603018 default }" containerID=9579909e21e724205edc4d53b0a5301adf10bcaea3cde220f02dc7f441461523 datapathConfiguration="&{false false false false false }" interface=lxc81848b91612b k8sPodName=openstack/cinder-rabbit-init-2nbq5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9579909e21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-rabbit-init-2nbq5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9579909e21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=8cb0f786-3ed6-4805-9a2e-93cf2ba6e818,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8cb0f786-3ed6-4805-9a2e-93cf2ba6e818,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-rabbit-init-2nbq5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=8cb0f786-3ed6-4805-9a2e-93cf2ba6e818;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=8cb0f786-3ed6-4805-9a2e-93cf2ba6e818;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9579909e21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 identity=23957 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=8cb0f786-3ed6-4805-9a2e-93cf2ba6e818,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8cb0f786-3ed6-4805-9a2e-93cf2ba6e818,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-rabbit-init-2nbq5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9579909e21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 identity=23957 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-rabbit-init-2nbq5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9579909e21 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=393 identity=23957 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-rabbit-init-2nbq5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9579909e21 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=393 identity=23957 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-rabbit-init-2nbq5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9579909e21 endpointID=393 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-2nbq5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=8cb0f786-3ed6-4805-9a2e-93cf2ba6e818 k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=8cb0f786-3ed6-4805-9a2e-93cf2ba6e818 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=9579909e21 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=393 identity=23957 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-rabbit-init-2nbq5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.167 c7bfdffc-bf8d-4a60-bf09-160db5f99e20 default }" containerID=3a1fc544446acf878b05f50eb0cd008460c7f1d9cf868e2df1d615925950e536 datapathConfiguration="&{false false false false false }" interface=lxcf3bdaf5f223d k8sPodName=openstack/cinder-ks-service-22dcb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3a1fc54444 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/cinder-ks-service-22dcb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a1fc54444 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=7a27da1c-7cd0-4ef7-b352-bbe8694b0d0e,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=7a27da1c-7cd0-4ef7-b352-bbe8694b0d0e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/cinder-ks-service-22dcb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=7a27da1c-7cd0-4ef7-b352-bbe8694b0d0e;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=7a27da1c-7cd0-4ef7-b352-bbe8694b0d0e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a1fc54444 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 identity=3517 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=7a27da1c-7cd0-4ef7-b352-bbe8694b0d0e,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=7a27da1c-7cd0-4ef7-b352-bbe8694b0d0e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/cinder-ks-service-22dcb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a1fc54444 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 identity=3517 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/cinder-ks-service-22dcb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3a1fc54444 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=818 identity=3517 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/cinder-ks-service-22dcb subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a1fc54444 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=818 identity=3517 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/cinder-ks-service-22dcb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3a1fc54444 endpointID=818 k8sNamespace=openstack k8sPodName=cinder-ks-service-22dcb subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=7a27da1c-7cd0-4ef7-b352-bbe8694b0d0e k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=7a27da1c-7cd0-4ef7-b352-bbe8694b0d0e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=3a1fc54444 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=818 identity=3517 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/cinder-ks-service-22dcb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 0b6ca4d1-a927-4507-9441-784b16f70b78 default }" containerID=28052feda006d9190698de2e905629edc5c78f679ac0911937f7eafe64923287 datapathConfiguration="&{false false false false false }" interface=lxcfb812da03c7e k8sPodName=openstack/cinder-ks-endpoints-mhn9s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=28052feda0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3882 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/cinder-ks-endpoints-mhn9s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=28052feda0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3882 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=3239b23a-fa58-4df2-917a-9f9d9f1cf3b7,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3239b23a-fa58-4df2-917a-9f9d9f1cf3b7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/cinder-ks-endpoints-mhn9s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=3239b23a-fa58-4df2-917a-9f9d9f1cf3b7;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=3239b23a-fa58-4df2-917a-9f9d9f1cf3b7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=28052feda0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3882 identity=814 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=3239b23a-fa58-4df2-917a-9f9d9f1cf3b7,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3239b23a-fa58-4df2-917a-9f9d9f1cf3b7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/cinder-ks-endpoints-mhn9s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=28052feda0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3882 identity=814 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/cinder-ks-endpoints-mhn9s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=28052feda0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3882 identity=814 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/cinder-ks-endpoints-mhn9s subsys=endpoint level=info msg="Successful endpoint creation" containerID=28052feda0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3882 identity=814 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/cinder-ks-endpoints-mhn9s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=28052feda0 endpointID=3882 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-mhn9s subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=3239b23a-fa58-4df2-917a-9f9d9f1cf3b7 k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=3239b23a-fa58-4df2-917a-9f9d9f1cf3b7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=28052feda0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3882 identity=814 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/cinder-ks-endpoints-mhn9s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 4f9507ab-6c93-4d37-9f7a-9f3dd9b1ad6a default }" containerID=b77d35525e3e4b9ad087562afcf0595f89073d3ef48bbe5f5ba77d3a9fdf0e1a datapathConfiguration="&{false false false false false }" interface=lxc1c1a6466282b k8sPodName=openstack/cinder-ks-user-bs528 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b77d35525e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=802 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/cinder-ks-user-bs528 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b77d35525e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=802 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=04c29fd2-3e7d-4c95-818e-96d10322f4e9,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=04c29fd2-3e7d-4c95-818e-96d10322f4e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/cinder-ks-user-bs528 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=04c29fd2-3e7d-4c95-818e-96d10322f4e9;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=04c29fd2-3e7d-4c95-818e-96d10322f4e9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b77d35525e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=802 identity=8258 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=04c29fd2-3e7d-4c95-818e-96d10322f4e9,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=04c29fd2-3e7d-4c95-818e-96d10322f4e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/cinder-ks-user-bs528 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b77d35525e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=802 identity=8258 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/cinder-ks-user-bs528 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b77d35525e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=802 identity=8258 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/cinder-ks-user-bs528 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b77d35525e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=802 identity=8258 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/cinder-ks-user-bs528 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b77d35525e endpointID=802 k8sNamespace=openstack k8sPodName=cinder-ks-user-bs528 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=04c29fd2-3e7d-4c95-818e-96d10322f4e9 k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=04c29fd2-3e7d-4c95-818e-96d10322f4e9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=b77d35525e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=802 identity=8258 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/cinder-ks-user-bs528 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 3620c4f6-77e2-494e-96f9-4a80cb2faba6 default }" containerID=dcc1e686e8e7ac687d5dfeb9eb34af6b96bf771e9d89a4e1c258895a1e87d49a datapathConfiguration="&{false false false false false }" interface=lxc260024a3bef2 k8sPodName=openstack/cinder-backup-storage-init-vqwlh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dcc1e686e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/cinder-backup-storage-init-vqwlh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dcc1e686e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=582292ae-f686-4c28-bc16-6f7826b795ea,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=582292ae-f686-4c28-bc16-6f7826b795ea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/cinder-backup-storage-init-vqwlh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dcc1e686e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.3 ipv6= k8sPodName=openstack/cinder-backup-storage-init-vqwlh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=582292ae-f686-4c28-bc16-6f7826b795ea;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=582292ae-f686-4c28-bc16-6f7826b795ea;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dcc1e686e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 identity=56327 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=582292ae-f686-4c28-bc16-6f7826b795ea,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=582292ae-f686-4c28-bc16-6f7826b795ea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/cinder-backup-storage-init-vqwlh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dcc1e686e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 identity=56327 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/cinder-backup-storage-init-vqwlh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dcc1e686e8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=658 identity=56327 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/cinder-backup-storage-init-vqwlh subsys=endpoint level=info msg="Successful endpoint creation" containerID=dcc1e686e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=658 identity=56327 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/cinder-backup-storage-init-vqwlh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dcc1e686e8 endpointID=658 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-vqwlh subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=582292ae-f686-4c28-bc16-6f7826b795ea k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=582292ae-f686-4c28-bc16-6f7826b795ea k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=dcc1e686e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=658 identity=56327 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/cinder-backup-storage-init-vqwlh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 1276ce3b-f6fb-4aeb-8c36-6536bc8d3674 default }" containerID=5523cd089fb11b299993558df862b0340a7abf613514a503126df6734e746adc datapathConfiguration="&{false false false false false }" interface=lxca9648a9c9161 k8sPodName=openstack/cinder-create-internal-tenant-c25tz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5523cd089f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=460 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-c25tz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5523cd089f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=460 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=700dfe73-ac54-41e2-82f7-7156e6dfaf3b,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=700dfe73-ac54-41e2-82f7-7156e6dfaf3b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-c25tz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5523cd089f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=460 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.192 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-c25tz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=700dfe73-ac54-41e2-82f7-7156e6dfaf3b;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=700dfe73-ac54-41e2-82f7-7156e6dfaf3b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5523cd089f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=460 identity=59491 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=700dfe73-ac54-41e2-82f7-7156e6dfaf3b,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=700dfe73-ac54-41e2-82f7-7156e6dfaf3b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-c25tz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5523cd089f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=460 identity=59491 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-c25tz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5523cd089f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=460 identity=59491 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-c25tz subsys=endpoint level=info msg="Successful endpoint creation" containerID=5523cd089f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=460 identity=59491 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-c25tz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5523cd089f endpointID=460 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-c25tz subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=700dfe73-ac54-41e2-82f7-7156e6dfaf3b k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=700dfe73-ac54-41e2-82f7-7156e6dfaf3b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=5523cd089f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=460 identity=59491 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-c25tz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 d00c6188-259b-4e3f-8788-71d8b34f83cb default }" containerID=fcf07b115140b56b6f3028f6f29d909bc9b7234b00604a0ed89aea69195fed74 datapathConfiguration="&{false false false false false }" interface=lxc4454fd643128 k8sPodName=openstack/cinder-storage-init-rv6nd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fcf07b1151 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2990 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-storage-init-rv6nd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fcf07b1151 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2990 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a58144b2-db6d-4c03-ba73-fa42b9bc8cca,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=a58144b2-db6d-4c03-ba73-fa42b9bc8cca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-storage-init-rv6nd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=a58144b2-db6d-4c03-ba73-fa42b9bc8cca;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=a58144b2-db6d-4c03-ba73-fa42b9bc8cca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=fcf07b1151 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2990 identity=46544 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a58144b2-db6d-4c03-ba73-fa42b9bc8cca,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=a58144b2-db6d-4c03-ba73-fa42b9bc8cca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-storage-init-rv6nd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fcf07b1151 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2990 identity=46544 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-storage-init-rv6nd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fcf07b1151 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2990 identity=46544 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-storage-init-rv6nd subsys=endpoint level=info msg="Successful endpoint creation" containerID=fcf07b1151 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2990 identity=46544 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-storage-init-rv6nd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fcf07b1151 endpointID=2990 k8sNamespace=openstack k8sPodName=cinder-storage-init-rv6nd subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=a58144b2-db6d-4c03-ba73-fa42b9bc8cca k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=a58144b2-db6d-4c03-ba73-fa42b9bc8cca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=fcf07b1151 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2990 identity=46544 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-storage-init-rv6nd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 0af28d7e-da89-412b-8aed-1b76d1a3f2ce default }" containerID=0778d433a8aa51d02fe28e78e18b972b6ab09797f3584a0e6eaf3eb3ab2a1da3 datapathConfiguration="&{false false false false false }" interface=lxcc1f09f528e94 k8sPodName=openstack/cinder-bootstrap-mjdbj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0778d433a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/cinder-bootstrap-mjdbj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0778d433a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=55376e46-238c-49c1-8b33-f369f6c875af,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=55376e46-238c-49c1-8b33-f369f6c875af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/cinder-bootstrap-mjdbj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=55376e46-238c-49c1-8b33-f369f6c875af;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=55376e46-238c-49c1-8b33-f369f6c875af;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0778d433a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 identity=55213 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=55376e46-238c-49c1-8b33-f369f6c875af,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=55376e46-238c-49c1-8b33-f369f6c875af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/cinder-bootstrap-mjdbj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0778d433a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 identity=55213 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/cinder-bootstrap-mjdbj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0778d433a8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1830 identity=55213 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/cinder-bootstrap-mjdbj subsys=endpoint level=info msg="Successful endpoint creation" containerID=0778d433a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1830 identity=55213 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/cinder-bootstrap-mjdbj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.147 d834848b-e8ea-4ba3-9c3c-a27737bcbd1d default }" containerID=bd755fc8b2fb461df8a04cd89988b9eeec2d1113dbd0c6d4760e955f8a31ae94 datapathConfiguration="&{false false false false false }" interface=lxca9221ab268af k8sPodName=openstack/cinder-volume-d5486df5c-vwbwd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd755fc8b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/cinder-volume-d5486df5c-vwbwd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd755fc8b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/cinder-volume-d5486df5c-vwbwd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=bd755fc8b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.147 ipv6= k8sPodName=openstack/cinder-volume-d5486df5c-vwbwd line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=bd755fc8b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 identity=11110 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/cinder-volume-d5486df5c-vwbwd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd755fc8b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 identity=11110 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/cinder-volume-d5486df5c-vwbwd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 80c5485f-f191-46a5-9519-f49550f3bada default }" containerID=ff61081d69e437eff3b79c6a39e136b6d8b2c3b78362788869e4329538021296 datapathConfiguration="&{false false false false false }" interface=lxc923bfdef3af1 k8sPodName=openstack/cinder-backup-769ccc78fd-z6bdc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff61081d69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2543 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/cinder-backup-769ccc78fd-z6bdc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff61081d69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2543 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/cinder-backup-769ccc78fd-z6bdc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff61081d69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2543 identity=12461 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/cinder-backup-769ccc78fd-z6bdc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ff61081d69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2543 identity=12461 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/cinder-backup-769ccc78fd-z6bdc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bd755fc8b2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=720 identity=11110 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/cinder-volume-d5486df5c-vwbwd subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd755fc8b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=720 identity=11110 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/cinder-volume-d5486df5c-vwbwd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ff61081d69 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2543 identity=12461 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/cinder-backup-769ccc78fd-z6bdc subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff61081d69 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2543 identity=12461 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/cinder-backup-769ccc78fd-z6bdc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0778d433a8 endpointID=1830 k8sNamespace=openstack k8sPodName=cinder-bootstrap-mjdbj subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=55376e46-238c-49c1-8b33-f369f6c875af k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=55376e46-238c-49c1-8b33-f369f6c875af k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=0778d433a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1830 identity=55213 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/cinder-bootstrap-mjdbj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.161 51b1b211-1f5f-4151-98a0-7da4c0c6d31b default }" containerID=cf9c75be11ce7c9c8d0d7ac05692e46839df70037e3c6b0730ab216d871240a8 datapathConfiguration="&{false false false false false }" interface=lxcc080293cf53e k8sPodName=openstack/placement-api-74b6567f99-rwq5z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf9c75be11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=706 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/placement-api-74b6567f99-rwq5z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf9c75be11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=706 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/placement-api-74b6567f99-rwq5z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cf9c75be11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=706 identity=28855 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/placement-api-74b6567f99-rwq5z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cf9c75be11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=706 identity=28855 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/placement-api-74b6567f99-rwq5z subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.59 f43abb4e-3111-44fa-b06e-b05a212b2416 default }" containerID=797f109caa8fa71aaeb0a3bcd23781ac03053f3a120ba60a3099320d2438b5cc datapathConfiguration="&{false false false false false }" interface=lxc7fbf1009a183 k8sPodName=openstack/placement-db-init-f7bn4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=797f109caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2629 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/placement-db-init-f7bn4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=797f109caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2629 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=7dd7c418-e83a-450a-bf15-bc8e2a43d543,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=7dd7c418-e83a-450a-bf15-bc8e2a43d543,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/placement-db-init-f7bn4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=7dd7c418-e83a-450a-bf15-bc8e2a43d543;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=7dd7c418-e83a-450a-bf15-bc8e2a43d543;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=797f109caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2629 identity=58035 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=7dd7c418-e83a-450a-bf15-bc8e2a43d543,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=7dd7c418-e83a-450a-bf15-bc8e2a43d543,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/placement-db-init-f7bn4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=797f109caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2629 identity=58035 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/placement-db-init-f7bn4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cf9c75be11 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=706 identity=28855 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/placement-api-74b6567f99-rwq5z subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf9c75be11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=706 identity=28855 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/placement-api-74b6567f99-rwq5z subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=797f109caa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2629 identity=58035 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/placement-db-init-f7bn4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=797f109caa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2629 identity=58035 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/placement-db-init-f7bn4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=797f109caa endpointID=2629 k8sNamespace=openstack k8sPodName=placement-db-init-f7bn4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=7dd7c418-e83a-450a-bf15-bc8e2a43d543 k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=7dd7c418-e83a-450a-bf15-bc8e2a43d543 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=797f109caa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2629 identity=58035 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/placement-db-init-f7bn4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 8d030f35-fce2-4981-919e-0305e706e174 default }" containerID=69c3b120cd06941881f0e02f161fbcb8661c23eef358e6e8fab2e99810beecfe datapathConfiguration="&{false false false false false }" interface=lxc835960cb4972 k8sPodName=openstack/placement-db-sync-p6l2q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=69c3b120cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/placement-db-sync-p6l2q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=69c3b120cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=a060d9b2-355b-4b22-96d0-86d84ef9909c,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=a060d9b2-355b-4b22-96d0-86d84ef9909c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/placement-db-sync-p6l2q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=69c3b120cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.242 ipv6= k8sPodName=openstack/placement-db-sync-p6l2q line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=a060d9b2-355b-4b22-96d0-86d84ef9909c;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=a060d9b2-355b-4b22-96d0-86d84ef9909c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=69c3b120cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 identity=31637 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=a060d9b2-355b-4b22-96d0-86d84ef9909c,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=a060d9b2-355b-4b22-96d0-86d84ef9909c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/placement-db-sync-p6l2q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=69c3b120cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 identity=31637 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/placement-db-sync-p6l2q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=69c3b120cd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=66 identity=31637 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/placement-db-sync-p6l2q subsys=endpoint level=info msg="Successful endpoint creation" containerID=69c3b120cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=66 identity=31637 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/placement-db-sync-p6l2q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=69c3b120cd endpointID=66 k8sNamespace=openstack k8sPodName=placement-db-sync-p6l2q subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=a060d9b2-355b-4b22-96d0-86d84ef9909c k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=a060d9b2-355b-4b22-96d0-86d84ef9909c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=69c3b120cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=66 identity=31637 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/placement-db-sync-p6l2q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 8003b86c-6713-47b5-a5ee-3486ae67b23a default }" containerID=d8fafaab8ce61118b2542d0d2fc0bc8778e639ecbd6a2829dea54a6413e7f2f5 datapathConfiguration="&{false false false false false }" interface=lxcbd4170379bc7 k8sPodName=openstack/placement-ks-service-5zrrt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d8fafaab8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3485 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/placement-ks-service-5zrrt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d8fafaab8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3485 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=30f42da0-fc69-428a-8eea-29c9d8d5a26f,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=30f42da0-fc69-428a-8eea-29c9d8d5a26f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/placement-ks-service-5zrrt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=30f42da0-fc69-428a-8eea-29c9d8d5a26f;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=30f42da0-fc69-428a-8eea-29c9d8d5a26f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d8fafaab8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3485 identity=21033 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=30f42da0-fc69-428a-8eea-29c9d8d5a26f,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=30f42da0-fc69-428a-8eea-29c9d8d5a26f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/placement-ks-service-5zrrt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d8fafaab8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3485 identity=21033 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/placement-ks-service-5zrrt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d8fafaab8c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3485 identity=21033 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/placement-ks-service-5zrrt subsys=endpoint level=info msg="Successful endpoint creation" containerID=d8fafaab8c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3485 identity=21033 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/placement-ks-service-5zrrt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d8fafaab8c endpointID=3485 k8sNamespace=openstack k8sPodName=placement-ks-service-5zrrt subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=30f42da0-fc69-428a-8eea-29c9d8d5a26f k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=30f42da0-fc69-428a-8eea-29c9d8d5a26f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=d8fafaab8c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3485 identity=21033 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/placement-ks-service-5zrrt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 6c4e8454-78d4-497f-b573-d197d8b091bb default }" containerID=46d7e1989ad4c6c0a28beb1ea745875bab655c49fd6fe164bbc35d570d2ab39b datapathConfiguration="&{false false false false false }" interface=lxc21f0e73c1371 k8sPodName=openstack/placement-ks-user-whp9p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=46d7e1989a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=109 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/placement-ks-user-whp9p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=46d7e1989a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=109 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=d27c9e22-7981-4461-8689-b77b543b0518,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=d27c9e22-7981-4461-8689-b77b543b0518,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/placement-ks-user-whp9p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=46d7e1989a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=109 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.192 ipv6= k8sPodName=openstack/placement-ks-user-whp9p line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=d27c9e22-7981-4461-8689-b77b543b0518;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=d27c9e22-7981-4461-8689-b77b543b0518;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=46d7e1989a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=109 identity=19910 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=d27c9e22-7981-4461-8689-b77b543b0518,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=d27c9e22-7981-4461-8689-b77b543b0518,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/placement-ks-user-whp9p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=46d7e1989a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=109 identity=19910 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/placement-ks-user-whp9p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=46d7e1989a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=109 identity=19910 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/placement-ks-user-whp9p subsys=endpoint level=info msg="Successful endpoint creation" containerID=46d7e1989a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=109 identity=19910 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/placement-ks-user-whp9p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=46d7e1989a endpointID=109 k8sNamespace=openstack k8sPodName=placement-ks-user-whp9p subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=d27c9e22-7981-4461-8689-b77b543b0518 k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=d27c9e22-7981-4461-8689-b77b543b0518 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=46d7e1989a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=109 identity=19910 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/placement-ks-user-whp9p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 3cf23bfb-d629-4be3-a411-8b8874a3452a default }" containerID=6c730567d6e99195e65eaa84bbde8b9f6497caa60a8a49c9fd5fe8f73a776375 datapathConfiguration="&{false false false false false }" interface=lxcb5bfa6f3ba19 k8sPodName=openstack/placement-ks-endpoints-b927d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c730567d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/placement-ks-endpoints-b927d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c730567d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=f35a4ac5-61d0-4295-b2ca-3f0394366408,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f35a4ac5-61d0-4295-b2ca-3f0394366408,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/placement-ks-endpoints-b927d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=f35a4ac5-61d0-4295-b2ca-3f0394366408;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=f35a4ac5-61d0-4295-b2ca-3f0394366408;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6c730567d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 identity=50403 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=f35a4ac5-61d0-4295-b2ca-3f0394366408,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f35a4ac5-61d0-4295-b2ca-3f0394366408,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/placement-ks-endpoints-b927d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6c730567d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 identity=50403 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/placement-ks-endpoints-b927d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6c730567d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=804 identity=50403 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/placement-ks-endpoints-b927d subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c730567d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=804 identity=50403 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/placement-ks-endpoints-b927d subsys=daemon level=info msg="Delete endpoint request" containerID=6c730567d6 endpointID=804 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-b927d subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=f35a4ac5-61d0-4295-b2ca-3f0394366408 k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=f35a4ac5-61d0-4295-b2ca-3f0394366408 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=6c730567d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=804 identity=50403 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/placement-ks-endpoints-b927d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.211 18995862-99a8-4b7a-a3d6-e364876740a8 default }" containerID=b5ba62a51562f4c621594cbc9ec6c5c79f82251ec902f9c78b4bb9fa785967ce datapathConfiguration="&{false false false false false }" interface=lxc0451300120fa k8sPodName=openstack/neutron-coredns-7dd4958666-krb6v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b5ba62a515 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-krb6v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b5ba62a515 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-krb6v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=neutron-coredns;k8s:app.kubernetes.io/name=coredns;k8s:application=neutron;k8s:component=coredns;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b5ba62a515 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 identity=2714 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-krb6v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b5ba62a515 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 identity=2714 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-krb6v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b5ba62a515 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1584 identity=2714 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-krb6v subsys=endpoint level=info msg="Successful endpoint creation" containerID=b5ba62a515 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1584 identity=2714 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-krb6v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.54 c4242d9f-3a47-4fb6-857f-c87f22727f26 default }" containerID=bf2a580324958f7acac600f14dd6b711e2d6d39b074136cb68b230c20a6c1ed7 datapathConfiguration="&{false false false false false }" interface=lxc5d9f519644fe k8sPodName=local-path-storage/helper-pod-create-pvc-d42020ef-bd98-403a-b610-4ba2f47c3b29 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf2a580324 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1851 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d42020ef-bd98-403a-b610-4ba2f47c3b29 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf2a580324 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1851 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d42020ef-bd98-403a-b610-4ba2f47c3b29 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf2a580324 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1851 identity=53098 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d42020ef-bd98-403a-b610-4ba2f47c3b29 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf2a580324 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1851 identity=53098 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d42020ef-bd98-403a-b610-4ba2f47c3b29 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bf2a580324 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1851 identity=53098 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d42020ef-bd98-403a-b610-4ba2f47c3b29 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf2a580324 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1851 identity=53098 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d42020ef-bd98-403a-b610-4ba2f47c3b29 subsys=daemon level=info msg="Delete endpoint request" containerID=bf2a580324 endpointID=1851 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d42020ef-bd98-403a-b610-4ba2f47c3b29 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=bf2a580324 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1851 identity=53098 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d42020ef-bd98-403a-b610-4ba2f47c3b29 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 5534d140-dd29-4a2c-a196-f1a76d5f4047 default }" containerID=c0e5e04f5daf45cf366c9025b5c2e2424de71367151a2c9d27c56e2d273c8002 datapathConfiguration="&{false false false false false }" interface=lxc9eb8a75ad22a k8sPodName=openstack/rabbitmq-nova-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0e5e04f5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2205 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0e5e04f5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2205 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c0e5e04f5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2205 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.254 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-nova;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c0e5e04f5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2205 identity=58058 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c0e5e04f5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2205 identity=58058 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c0e5e04f5d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2205 identity=58058 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0e5e04f5d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2205 identity=58058 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.110 23b77bb0-192d-45df-8491-6e4a8c6b641e default }" containerID=34566b17302f14d516ad4c2ea9518fd157c404b234ccf6fe54453af3533b14ca datapathConfiguration="&{false false false false false }" interface=lxc1e95b1995cbe k8sPodName=openstack/nova-scheduler-8687c4cd74-djb8l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34566b1730 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=744 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/nova-scheduler-8687c4cd74-djb8l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34566b1730 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=744 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/nova-scheduler-8687c4cd74-djb8l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34566b1730 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=744 identity=8350 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/nova-scheduler-8687c4cd74-djb8l oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=34566b1730 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=744 identity=8350 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/nova-scheduler-8687c4cd74-djb8l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 183424de-3b68-4fbd-a378-202875cd0e47 default }" containerID=6f9f311835d2a159678b605209b16d6c216ed018c5c56ee5e346664ea81e91b2 datapathConfiguration="&{false false false false false }" interface=lxc4d70b298d90a k8sPodName=openstack/nova-api-osapi-d77696c8b-7zn77 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f9f311835 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3430 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/nova-api-osapi-d77696c8b-7zn77 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f9f311835 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3430 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/nova-api-osapi-d77696c8b-7zn77 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=os-api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f9f311835 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3430 identity=2206 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/nova-api-osapi-d77696c8b-7zn77 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f9f311835 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3430 identity=2206 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/nova-api-osapi-d77696c8b-7zn77 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 a8b9ac24-ff1d-46da-baf0-1431afec8dcb default }" containerID=3565c02233be4fbac3da636194d5e327a2bf19acbaba827ff86265a09f687b7d datapathConfiguration="&{false false false false false }" interface=lxc23407d0093c9 k8sPodName=openstack/nova-bootstrap-k6sfb labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.177 92521f9f-3945-4b9d-9372-859d3e82bf1b default }" containerID=cec43359c0132066c116689c16a943eccd9fcf2ddc82afa8906395f397ffa8de datapathConfiguration="&{false false false false false }" interface=lxc5c2505e0faba k8sPodName=openstack/nova-conductor-77894f9898-z4mkr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3565c02233 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3821 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-bootstrap-k6sfb subsys=endpoint level=info msg="New endpoint" containerID=cec43359c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=499 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/nova-conductor-77894f9898-z4mkr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3565c02233 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3821 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=c9eb8610-1942-487b-8a7f-527e0dc611cc,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=c9eb8610-1942-487b-8a7f-527e0dc611cc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-bootstrap-k6sfb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=cec43359c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=499 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/nova-conductor-77894f9898-z4mkr subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=c9eb8610-1942-487b-8a7f-527e0dc611cc;k8s:batch.kubernetes.io/job-name=nova-bootstrap;k8s:component=bootstrap;k8s:controller-uid=c9eb8610-1942-487b-8a7f-527e0dc611cc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-bootstrap;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3565c02233 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3821 identity=31032 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=c9eb8610-1942-487b-8a7f-527e0dc611cc,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=c9eb8610-1942-487b-8a7f-527e0dc611cc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-bootstrap-k6sfb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3565c02233 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3821 identity=31032 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-bootstrap-k6sfb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cec43359c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=499 identity=9270 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/nova-conductor-77894f9898-z4mkr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cec43359c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=499 identity=9270 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/nova-conductor-77894f9898-z4mkr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.135 991ba5be-338e-4566-b67d-c4c5ddcc6aaa default }" containerID=cdc771461083736bce22e1a7a04bf75547dbd95b583d0f38f71c150043308f48 datapathConfiguration="&{false false false false false }" interface=lxc31a26fb53d42 k8sPodName=openstack/nova-cell-setup-ssh74 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cdc7714610 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1629 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/nova-cell-setup-ssh74 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cdc7714610 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1629 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=322fed95-37a0-4f6f-a372-0083fe4a77e8,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=322fed95-37a0-4f6f-a372-0083fe4a77e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/nova-cell-setup-ssh74 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=34566b1730 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=744 identity=8350 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/nova-scheduler-8687c4cd74-djb8l subsys=endpoint level=info msg="Successful endpoint creation" containerID=34566b1730 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=744 identity=8350 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/nova-scheduler-8687c4cd74-djb8l subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.225 fcf7ccb5-25f0-4e7e-80ff-a322803cacae default }" containerID=509823fc8acd4be00241b6567e006697bb7f33091ae0eefc5d4b436b6be763e4 datapathConfiguration="&{false false false false false }" interface=lxcad7f18b6af11 k8sPodName=openstack/nova-api-metadata-88d4988c8-fttcq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=509823fc8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=592 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/nova-api-metadata-88d4988c8-fttcq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=509823fc8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=592 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/nova-api-metadata-88d4988c8-fttcq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3565c02233 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3821 identity=31032 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-bootstrap-k6sfb subsys=endpoint level=info msg="Successful endpoint creation" containerID=3565c02233 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3821 identity=31032 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-bootstrap-k6sfb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6f9f311835 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3430 identity=2206 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/nova-api-osapi-d77696c8b-7zn77 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f9f311835 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3430 identity=2206 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/nova-api-osapi-d77696c8b-7zn77 subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=322fed95-37a0-4f6f-a372-0083fe4a77e8;k8s:batch.kubernetes.io/job-name=nova-cell-setup;k8s:component=cell-setup;k8s:controller-uid=322fed95-37a0-4f6f-a372-0083fe4a77e8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cdc7714610 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1629 identity=12395 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=322fed95-37a0-4f6f-a372-0083fe4a77e8,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=322fed95-37a0-4f6f-a372-0083fe4a77e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/nova-cell-setup-ssh74 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cdc7714610 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1629 identity=12395 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/nova-cell-setup-ssh74 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=cec43359c0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=499 identity=9270 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/nova-conductor-77894f9898-z4mkr subsys=endpoint level=info msg="Successful endpoint creation" containerID=cec43359c0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=499 identity=9270 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/nova-conductor-77894f9898-z4mkr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.139 d10292c5-0b6c-447a-b975-d9a11fa5f4b1 default }" containerID=4375a51b9b676143a16ed9b97ece9613151d0856ebcc36b1ccd211f0520a88e5 datapathConfiguration="&{false false false false false }" interface=lxca0c2216f362a k8sPodName=openstack/nova-db-init-7xpmg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4375a51b9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1348 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/nova-db-init-7xpmg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4375a51b9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1348 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=db63ae93-2b10-479e-99ac-a2fadad2a501,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=db63ae93-2b10-479e-99ac-a2fadad2a501,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/nova-db-init-7xpmg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cdc7714610 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1629 identity=12395 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/nova-cell-setup-ssh74 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cdc7714610 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1629 identity=12395 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/nova-cell-setup-ssh74 subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=metadata;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=509823fc8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=592 identity=17792 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/nova-api-metadata-88d4988c8-fttcq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=509823fc8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=592 identity=17792 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/nova-api-metadata-88d4988c8-fttcq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=509823fc8a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=592 identity=17792 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/nova-api-metadata-88d4988c8-fttcq subsys=endpoint level=info msg="Successful endpoint creation" containerID=509823fc8a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=592 identity=17792 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/nova-api-metadata-88d4988c8-fttcq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4375a51b9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1348 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.139 ipv6= k8sPodName=openstack/nova-db-init-7xpmg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=db63ae93-2b10-479e-99ac-a2fadad2a501;k8s:batch.kubernetes.io/job-name=nova-db-init;k8s:component=db-init;k8s:controller-uid=db63ae93-2b10-479e-99ac-a2fadad2a501;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4375a51b9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1348 identity=30804 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=db63ae93-2b10-479e-99ac-a2fadad2a501,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=db63ae93-2b10-479e-99ac-a2fadad2a501,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/nova-db-init-7xpmg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4375a51b9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1348 identity=30804 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/nova-db-init-7xpmg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4375a51b9b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1348 identity=30804 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/nova-db-init-7xpmg subsys=endpoint level=info msg="Successful endpoint creation" containerID=4375a51b9b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1348 identity=30804 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/nova-db-init-7xpmg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.197 9cfed6ab-0bbd-4cfc-8704-b9373ad7101e default }" containerID=49c184fc74828c99e7c3033f889b282ac1e4695dbd8089e2e3f05d05429cf130 datapathConfiguration="&{false false false false false }" interface=lxcf17afc0a1e67 k8sPodName=openstack/nova-novncproxy-dbd9b9645-swlfs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=49c184fc74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/nova-novncproxy-dbd9b9645-swlfs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=49c184fc74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/nova-novncproxy-dbd9b9645-swlfs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=novnc-proxy;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=49c184fc74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 identity=29974 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/nova-novncproxy-dbd9b9645-swlfs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=49c184fc74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 identity=29974 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/nova-novncproxy-dbd9b9645-swlfs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=49c184fc74 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1559 identity=29974 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/nova-novncproxy-dbd9b9645-swlfs subsys=endpoint level=info msg="Successful endpoint creation" containerID=49c184fc74 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1559 identity=29974 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/nova-novncproxy-dbd9b9645-swlfs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4375a51b9b endpointID=1348 k8sNamespace=openstack k8sPodName=nova-db-init-7xpmg subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=db63ae93-2b10-479e-99ac-a2fadad2a501 k8s:batch.kubernetes.io/job-name=nova-db-init k8s:component=db-init k8s:controller-uid=db63ae93-2b10-479e-99ac-a2fadad2a501 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=4375a51b9b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1348 identity=30804 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/nova-db-init-7xpmg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 7e10ba5a-4752-4ac2-9a4b-24008faf9bf9 default }" containerID=014b9dfc7b31de20b66010fa40bad133d3dc6e7482ebd2d031a3388e51e7480b datapathConfiguration="&{false false false false false }" interface=lxcbede3b283fd9 k8sPodName=openstack/nova-db-sync-944mt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=014b9dfc7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1024 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/nova-db-sync-944mt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=014b9dfc7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1024 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=1318a8d1-b5ad-4bb2-9433-806df2a348f9,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=1318a8d1-b5ad-4bb2-9433-806df2a348f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/nova-db-sync-944mt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=1318a8d1-b5ad-4bb2-9433-806df2a348f9;k8s:batch.kubernetes.io/job-name=nova-db-sync;k8s:component=db-sync;k8s:controller-uid=1318a8d1-b5ad-4bb2-9433-806df2a348f9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-sync;k8s:release_group=nova;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=014b9dfc7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1024 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.143 ipv6= k8sPodName=openstack/nova-db-sync-944mt line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=014b9dfc7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1024 identity=43215 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=1318a8d1-b5ad-4bb2-9433-806df2a348f9,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=1318a8d1-b5ad-4bb2-9433-806df2a348f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/nova-db-sync-944mt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=014b9dfc7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1024 identity=43215 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/nova-db-sync-944mt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=014b9dfc7b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1024 identity=43215 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/nova-db-sync-944mt subsys=endpoint level=info msg="Successful endpoint creation" containerID=014b9dfc7b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1024 identity=43215 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/nova-db-sync-944mt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=014b9dfc7b endpointID=1024 k8sNamespace=openstack k8sPodName=nova-db-sync-944mt subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=1318a8d1-b5ad-4bb2-9433-806df2a348f9 k8s:batch.kubernetes.io/job-name=nova-db-sync k8s:component=db-sync k8s:controller-uid=1318a8d1-b5ad-4bb2-9433-806df2a348f9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-sync k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=014b9dfc7b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1024 identity=43215 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/nova-db-sync-944mt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 89b3265d-534f-41ed-badb-dfb76ecf94d4 default }" containerID=7e849be6388a6c8b6220d8c61e2f564342d6a0fe18a024aef360accd08d3530f datapathConfiguration="&{false false false false false }" interface=lxc020ed6317054 k8sPodName=openstack/nova-rabbit-init-lf9th labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e849be638 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3607 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/nova-rabbit-init-lf9th subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e849be638 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3607 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=6a67c82d-5fbc-4437-acff-436a04ba68fa,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=6a67c82d-5fbc-4437-acff-436a04ba68fa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/nova-rabbit-init-lf9th subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7e849be638 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3607 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.120 ipv6= k8sPodName=openstack/nova-rabbit-init-lf9th line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=6a67c82d-5fbc-4437-acff-436a04ba68fa;k8s:batch.kubernetes.io/job-name=nova-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=6a67c82d-5fbc-4437-acff-436a04ba68fa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-rabbit-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7e849be638 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3607 identity=34343 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=6a67c82d-5fbc-4437-acff-436a04ba68fa,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=6a67c82d-5fbc-4437-acff-436a04ba68fa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/nova-rabbit-init-lf9th oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7e849be638 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3607 identity=34343 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/nova-rabbit-init-lf9th subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7e849be638 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3607 identity=34343 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/nova-rabbit-init-lf9th subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e849be638 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3607 identity=34343 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/nova-rabbit-init-lf9th subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7e849be638 endpointID=3607 k8sNamespace=openstack k8sPodName=nova-rabbit-init-lf9th subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=6a67c82d-5fbc-4437-acff-436a04ba68fa k8s:batch.kubernetes.io/job-name=nova-rabbit-init k8s:component=rabbit-init k8s:controller-uid=6a67c82d-5fbc-4437-acff-436a04ba68fa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-rabbit-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=7e849be638 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3607 identity=34343 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/nova-rabbit-init-lf9th subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 19f180fc-c79b-484e-a909-6c4f65b73fe6 default }" containerID=009c481128fda538a6d4b5fb6b42767e9c7928693b2939d2885591bf33a0b291 datapathConfiguration="&{false false false false false }" interface=lxcf622f96c9f2e k8sPodName=openstack/nova-ks-service-f4hvc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=009c481128 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/nova-ks-service-f4hvc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=009c481128 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=27488fe2-66f6-43db-a06b-6edd5bfa0636,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=27488fe2-66f6-43db-a06b-6edd5bfa0636,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/nova-ks-service-f4hvc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=27488fe2-66f6-43db-a06b-6edd5bfa0636;k8s:batch.kubernetes.io/job-name=nova-ks-service;k8s:component=ks-service;k8s:controller-uid=27488fe2-66f6-43db-a06b-6edd5bfa0636;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-service;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=009c481128 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 identity=25683 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=27488fe2-66f6-43db-a06b-6edd5bfa0636,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=27488fe2-66f6-43db-a06b-6edd5bfa0636,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/nova-ks-service-f4hvc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=009c481128 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 identity=25683 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/nova-ks-service-f4hvc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=009c481128 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=104 identity=25683 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/nova-ks-service-f4hvc subsys=endpoint level=info msg="Successful endpoint creation" containerID=009c481128 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=104 identity=25683 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/nova-ks-service-f4hvc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=009c481128 endpointID=104 k8sNamespace=openstack k8sPodName=nova-ks-service-f4hvc subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=27488fe2-66f6-43db-a06b-6edd5bfa0636 k8s:batch.kubernetes.io/job-name=nova-ks-service k8s:component=ks-service k8s:controller-uid=27488fe2-66f6-43db-a06b-6edd5bfa0636 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-service k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=009c481128 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=104 identity=25683 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/nova-ks-service-f4hvc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 a66e06fe-e33b-4c5e-8558-54f12b35b88a default }" containerID=34e977db711c168c3b52624c4e361c77b1b092a5ad09e532a90cc5a3016ed874 datapathConfiguration="&{false false false false false }" interface=lxcb6bb5839bf16 k8sPodName=openstack/nova-ks-endpoints-vn5f8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34e977db71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=255 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/nova-ks-endpoints-vn5f8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34e977db71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=255 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=f906cad5-6b34-4a56-b974-24fe16363fb6,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f906cad5-6b34-4a56-b974-24fe16363fb6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/nova-ks-endpoints-vn5f8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=34e977db71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=255 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.111 ipv6= k8sPodName=openstack/nova-ks-endpoints-vn5f8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=f906cad5-6b34-4a56-b974-24fe16363fb6;k8s:batch.kubernetes.io/job-name=nova-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=f906cad5-6b34-4a56-b974-24fe16363fb6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-endpoints;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34e977db71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=255 identity=48708 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=f906cad5-6b34-4a56-b974-24fe16363fb6,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f906cad5-6b34-4a56-b974-24fe16363fb6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/nova-ks-endpoints-vn5f8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34e977db71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=255 identity=48708 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/nova-ks-endpoints-vn5f8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=34e977db71 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=255 identity=48708 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/nova-ks-endpoints-vn5f8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=34e977db71 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=255 identity=48708 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/nova-ks-endpoints-vn5f8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=34e977db71 endpointID=255 k8sNamespace=openstack k8sPodName=nova-ks-endpoints-vn5f8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=f906cad5-6b34-4a56-b974-24fe16363fb6 k8s:batch.kubernetes.io/job-name=nova-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=f906cad5-6b34-4a56-b974-24fe16363fb6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-endpoints k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=34e977db71 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=255 identity=48708 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/nova-ks-endpoints-vn5f8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.86 832fcb6e-fa1c-4d98-a592-b84b7f687da8 default }" containerID=a13701a27ab9e7c57c2d2d5950d70b0c8bf19f0f87f10a5fe27dc8859eef22e7 datapathConfiguration="&{false false false false false }" interface=lxc0530e4b416ae k8sPodName=openstack/nova-ks-user-6q8fx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a13701a27a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1821 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/nova-ks-user-6q8fx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a13701a27a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1821 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=cd141397-e87b-45d8-a0a5-d4fa3f448e02,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=cd141397-e87b-45d8-a0a5-d4fa3f448e02,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/nova-ks-user-6q8fx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=cd141397-e87b-45d8-a0a5-d4fa3f448e02;k8s:batch.kubernetes.io/job-name=nova-ks-user;k8s:component=ks-user;k8s:controller-uid=cd141397-e87b-45d8-a0a5-d4fa3f448e02;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-user;k8s:release_group=nova;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a13701a27a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1821 identity=28120 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=cd141397-e87b-45d8-a0a5-d4fa3f448e02,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=cd141397-e87b-45d8-a0a5-d4fa3f448e02,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/nova-ks-user-6q8fx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a13701a27a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1821 identity=28120 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/nova-ks-user-6q8fx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a13701a27a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1821 identity=28120 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/nova-ks-user-6q8fx subsys=endpoint level=info msg="Successful endpoint creation" containerID=a13701a27a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1821 identity=28120 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/nova-ks-user-6q8fx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a13701a27a endpointID=1821 k8sNamespace=openstack k8sPodName=nova-ks-user-6q8fx subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=cd141397-e87b-45d8-a0a5-d4fa3f448e02 k8s:batch.kubernetes.io/job-name=nova-ks-user k8s:component=ks-user k8s:controller-uid=cd141397-e87b-45d8-a0a5-d4fa3f448e02 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-user k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=a13701a27a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1821 identity=28120 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/nova-ks-user-6q8fx subsys=endpoint level=info msg="Delete endpoint request" containerID=3565c02233 endpointID=3821 k8sNamespace=openstack k8sPodName=nova-bootstrap-k6sfb subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=c9eb8610-1942-487b-8a7f-527e0dc611cc k8s:batch.kubernetes.io/job-name=nova-bootstrap k8s:component=bootstrap k8s:controller-uid=c9eb8610-1942-487b-8a7f-527e0dc611cc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-bootstrap k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=3565c02233 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3821 identity=31032 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-bootstrap-k6sfb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.140 ad7b17f3-cebd-4712-89dc-b937280f063d default }" containerID=51fd97feadb321e98d674df5b6443cfc3b981bae4ba809ccf485fe6df13b671e datapathConfiguration="&{false false false false false }" interface=lxc1d84de65eb0c k8sPodName=local-path-storage/helper-pod-create-pvc-c403b86f-4b1d-4b89-94fb-debd70ed3a4b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51fd97fead datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=979 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c403b86f-4b1d-4b89-94fb-debd70ed3a4b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51fd97fead datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=979 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c403b86f-4b1d-4b89-94fb-debd70ed3a4b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=51fd97fead datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=979 identity=53098 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c403b86f-4b1d-4b89-94fb-debd70ed3a4b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51fd97fead datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=979 identity=53098 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c403b86f-4b1d-4b89-94fb-debd70ed3a4b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=51fd97fead datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=979 identity=53098 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c403b86f-4b1d-4b89-94fb-debd70ed3a4b subsys=endpoint level=info msg="Successful endpoint creation" containerID=51fd97fead datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=979 identity=53098 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c403b86f-4b1d-4b89-94fb-debd70ed3a4b subsys=daemon level=info msg="Delete endpoint request" containerID=51fd97fead endpointID=979 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c403b86f-4b1d-4b89-94fb-debd70ed3a4b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=51fd97fead datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=979 identity=53098 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c403b86f-4b1d-4b89-94fb-debd70ed3a4b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.199 d37507ff-dbf1-4d91-9444-f30c15024adc default }" containerID=7af0d2d55dbcfbfb92a2824433920d11c83e22ed879e07db5e0066e6e46bc088 datapathConfiguration="&{false false false false false }" interface=lxcf49c58696fbb k8sPodName=openstack/rabbitmq-neutron-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7af0d2d55d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=415 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7af0d2d55d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=415 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7af0d2d55d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=415 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-neutron;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7af0d2d55d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=415 identity=1800 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7af0d2d55d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=415 identity=1800 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7af0d2d55d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=415 identity=1800 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7af0d2d55d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=415 identity=1800 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.143 05fecd43-d3cd-4a0f-8c9c-eff998ae3131 default }" containerID=f7ef290b2f6f9ac5c622b321725a8f5cb66370a491d8fe64d8f93d1deb4080f3 datapathConfiguration="&{false false false false false }" interface=lxc3b2cb2a92559 k8sPodName=openstack/neutron-rpc-server-56546cf474-288mj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7ef290b2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/neutron-rpc-server-56546cf474-288mj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7ef290b2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/neutron-rpc-server-56546cf474-288mj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=rpc_server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f7ef290b2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 identity=24163 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/neutron-rpc-server-56546cf474-288mj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7ef290b2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 identity=24163 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/neutron-rpc-server-56546cf474-288mj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 79988561-ca08-42b8-83b8-b413a9f91a99 default }" containerID=2cf7f2419f7576cfdc1c360f6b565c68b89be4edcc86ce48b41bd903ed227379 datapathConfiguration="&{false false false false false }" interface=lxc7b80aee798ca k8sPodName=openstack/neutron-server-79956d7fc4-6j7sc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2cf7f2419f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=83 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/neutron-server-79956d7fc4-6j7sc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2cf7f2419f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=83 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/neutron-server-79956d7fc4-6j7sc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2cf7f2419f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=83 identity=55749 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/neutron-server-79956d7fc4-6j7sc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2cf7f2419f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=83 identity=55749 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/neutron-server-79956d7fc4-6j7sc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.249 4ea12ed4-57ab-409e-930e-ba6f573cb577 default }" containerID=2683d9da1a508491b37ed350e9f7a858edf5f43e81f2fd4323241f754c05aa5a datapathConfiguration="&{false false false false false }" interface=lxc90189e40fee5 k8sPodName=openstack/neutron-db-init-d4spd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2683d9da1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=217 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/neutron-db-init-d4spd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2683d9da1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=217 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=871dd306-2fe0-4f33-9e36-3784f64c56d9,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=871dd306-2fe0-4f33-9e36-3784f64c56d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/neutron-db-init-d4spd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=871dd306-2fe0-4f33-9e36-3784f64c56d9;k8s:batch.kubernetes.io/job-name=neutron-db-init;k8s:component=db-init;k8s:controller-uid=871dd306-2fe0-4f33-9e36-3784f64c56d9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2683d9da1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=217 identity=35883 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=871dd306-2fe0-4f33-9e36-3784f64c56d9,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=871dd306-2fe0-4f33-9e36-3784f64c56d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/neutron-db-init-d4spd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2683d9da1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=217 identity=35883 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/neutron-db-init-d4spd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f7ef290b2f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=6 identity=24163 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/neutron-rpc-server-56546cf474-288mj subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7ef290b2f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=6 identity=24163 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/neutron-rpc-server-56546cf474-288mj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2cf7f2419f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=83 identity=55749 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/neutron-server-79956d7fc4-6j7sc subsys=endpoint level=info msg="Successful endpoint creation" containerID=2cf7f2419f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=83 identity=55749 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/neutron-server-79956d7fc4-6j7sc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2683d9da1a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=217 identity=35883 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/neutron-db-init-d4spd subsys=endpoint level=info msg="Successful endpoint creation" containerID=2683d9da1a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=217 identity=35883 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/neutron-db-init-d4spd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2683d9da1a endpointID=217 k8sNamespace=openstack k8sPodName=neutron-db-init-d4spd subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=871dd306-2fe0-4f33-9e36-3784f64c56d9 k8s:batch.kubernetes.io/job-name=neutron-db-init k8s:component=db-init k8s:controller-uid=871dd306-2fe0-4f33-9e36-3784f64c56d9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=2683d9da1a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=217 identity=35883 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/neutron-db-init-d4spd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.63 2318e921-d629-400a-9a2e-e89e600d6be9 default }" containerID=559f161f27a825cdd48407418289a915f32248ca39d1d884e9103933e5c3642c datapathConfiguration="&{false false false false false }" interface=lxceb3d388581f2 k8sPodName=openstack/neutron-db-sync-9c49m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=559f161f27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1799 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/neutron-db-sync-9c49m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=559f161f27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1799 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=33b62e77-7254-47fb-89d1-01143007ded9,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=33b62e77-7254-47fb-89d1-01143007ded9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/neutron-db-sync-9c49m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=33b62e77-7254-47fb-89d1-01143007ded9;k8s:batch.kubernetes.io/job-name=neutron-db-sync;k8s:component=db-sync;k8s:controller-uid=33b62e77-7254-47fb-89d1-01143007ded9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-sync;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=559f161f27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1799 identity=2521 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=33b62e77-7254-47fb-89d1-01143007ded9,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=33b62e77-7254-47fb-89d1-01143007ded9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/neutron-db-sync-9c49m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=559f161f27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1799 identity=2521 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/neutron-db-sync-9c49m subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=559f161f27 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1799 identity=2521 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/neutron-db-sync-9c49m subsys=endpoint level=info msg="Successful endpoint creation" containerID=559f161f27 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1799 identity=2521 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/neutron-db-sync-9c49m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=559f161f27 endpointID=1799 k8sNamespace=openstack k8sPodName=neutron-db-sync-9c49m subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=33b62e77-7254-47fb-89d1-01143007ded9 k8s:batch.kubernetes.io/job-name=neutron-db-sync k8s:component=db-sync k8s:controller-uid=33b62e77-7254-47fb-89d1-01143007ded9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-sync k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=559f161f27 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1799 identity=2521 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/neutron-db-sync-9c49m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 6065da84-15d4-4982-8c49-8062f1d7a36d default }" containerID=a9edb78bcf1522aa9ac4369aa9a9015c35f3c2a14341e9fe1255da4cc984bb22 datapathConfiguration="&{false false false false false }" interface=lxc47e52b931908 k8sPodName=openstack/neutron-rabbit-init-h2phr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a9edb78bcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=701 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/neutron-rabbit-init-h2phr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a9edb78bcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=701 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=acd283aa-e69c-40f4-9cf4-b8a0c492e590,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=acd283aa-e69c-40f4-9cf4-b8a0c492e590,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/neutron-rabbit-init-h2phr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=acd283aa-e69c-40f4-9cf4-b8a0c492e590;k8s:batch.kubernetes.io/job-name=neutron-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=acd283aa-e69c-40f4-9cf4-b8a0c492e590;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-rabbit-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=a9edb78bcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=701 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.217 ipv6= k8sPodName=openstack/neutron-rabbit-init-h2phr line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a9edb78bcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=701 identity=4500 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=acd283aa-e69c-40f4-9cf4-b8a0c492e590,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=acd283aa-e69c-40f4-9cf4-b8a0c492e590,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/neutron-rabbit-init-h2phr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a9edb78bcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=701 identity=4500 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/neutron-rabbit-init-h2phr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a9edb78bcf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=701 identity=4500 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/neutron-rabbit-init-h2phr subsys=endpoint level=info msg="Successful endpoint creation" containerID=a9edb78bcf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=701 identity=4500 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/neutron-rabbit-init-h2phr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a9edb78bcf endpointID=701 k8sNamespace=openstack k8sPodName=neutron-rabbit-init-h2phr subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=acd283aa-e69c-40f4-9cf4-b8a0c492e590 k8s:batch.kubernetes.io/job-name=neutron-rabbit-init k8s:component=rabbit-init k8s:controller-uid=acd283aa-e69c-40f4-9cf4-b8a0c492e590 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-rabbit-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=a9edb78bcf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=701 identity=4500 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/neutron-rabbit-init-h2phr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 f2d5adf6-e206-46c2-a7d2-2deb5ec1f2dc default }" containerID=abcc07bc467376b01dd8b755c34cc2967401b079a728abcbd7545f4885e7c632 datapathConfiguration="&{false false false false false }" interface=lxc13d72b83e333 k8sPodName=openstack/neutron-ks-service-h2fkb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=abcc07bc46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1724 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/neutron-ks-service-h2fkb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=abcc07bc46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1724 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=313be56d-f395-4948-804d-8be76770fa14,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=313be56d-f395-4948-804d-8be76770fa14,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/neutron-ks-service-h2fkb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=313be56d-f395-4948-804d-8be76770fa14;k8s:batch.kubernetes.io/job-name=neutron-ks-service;k8s:component=ks-service;k8s:controller-uid=313be56d-f395-4948-804d-8be76770fa14;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-service;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=abcc07bc46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1724 identity=23631 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=313be56d-f395-4948-804d-8be76770fa14,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=313be56d-f395-4948-804d-8be76770fa14,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/neutron-ks-service-h2fkb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=abcc07bc46 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1724 identity=23631 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/neutron-ks-service-h2fkb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=abcc07bc46 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1724 identity=23631 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/neutron-ks-service-h2fkb subsys=endpoint level=info msg="Successful endpoint creation" containerID=abcc07bc46 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1724 identity=23631 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/neutron-ks-service-h2fkb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=abcc07bc46 endpointID=1724 k8sNamespace=openstack k8sPodName=neutron-ks-service-h2fkb subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=313be56d-f395-4948-804d-8be76770fa14 k8s:batch.kubernetes.io/job-name=neutron-ks-service k8s:component=ks-service k8s:controller-uid=313be56d-f395-4948-804d-8be76770fa14 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-service k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=abcc07bc46 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1724 identity=23631 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/neutron-ks-service-h2fkb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 4b70a350-77b6-4e64-ac91-0b00f4131a6f default }" containerID=39d9e8f2ccca84ef30798790559a49d782ff046585384c337a3ba15c75c2a833 datapathConfiguration="&{false false false false false }" interface=lxc2b73905e5e58 k8sPodName=openstack/neutron-ks-endpoints-j977p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39d9e8f2cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3014 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/neutron-ks-endpoints-j977p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39d9e8f2cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3014 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=1737ba7f-7922-417d-9113-e20e875f6356,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=1737ba7f-7922-417d-9113-e20e875f6356,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/neutron-ks-endpoints-j977p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=1737ba7f-7922-417d-9113-e20e875f6356;k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=1737ba7f-7922-417d-9113-e20e875f6356;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-endpoints;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=39d9e8f2cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3014 identity=64056 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=1737ba7f-7922-417d-9113-e20e875f6356,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=1737ba7f-7922-417d-9113-e20e875f6356,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/neutron-ks-endpoints-j977p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=39d9e8f2cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3014 identity=64056 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/neutron-ks-endpoints-j977p subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=39d9e8f2cc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3014 identity=64056 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/neutron-ks-endpoints-j977p subsys=endpoint level=info msg="Successful endpoint creation" containerID=39d9e8f2cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3014 identity=64056 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/neutron-ks-endpoints-j977p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=39d9e8f2cc endpointID=3014 k8sNamespace=openstack k8sPodName=neutron-ks-endpoints-j977p subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=1737ba7f-7922-417d-9113-e20e875f6356 k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=1737ba7f-7922-417d-9113-e20e875f6356 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-endpoints k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=39d9e8f2cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3014 identity=64056 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/neutron-ks-endpoints-j977p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.19 3725b0e5-1e75-41c8-8886-03ffac7f5f5e default }" containerID=ab76f8f360e5adf64b7e31f0e7fe7031846a0999b7ec8ce25e602604e9944b3c datapathConfiguration="&{false false false false false }" interface=lxc78d560bab806 k8sPodName=openstack/neutron-ks-user-cnfc4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ab76f8f360 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3347 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/neutron-ks-user-cnfc4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab76f8f360 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3347 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=2659eedb-1fff-4eca-b29a-f9b0ed8c5ddb,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=2659eedb-1fff-4eca-b29a-f9b0ed8c5ddb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/neutron-ks-user-cnfc4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=2659eedb-1fff-4eca-b29a-f9b0ed8c5ddb;k8s:batch.kubernetes.io/job-name=neutron-ks-user;k8s:component=ks-user;k8s:controller-uid=2659eedb-1fff-4eca-b29a-f9b0ed8c5ddb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-user;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ab76f8f360 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3347 identity=55270 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=2659eedb-1fff-4eca-b29a-f9b0ed8c5ddb,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=2659eedb-1fff-4eca-b29a-f9b0ed8c5ddb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/neutron-ks-user-cnfc4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ab76f8f360 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3347 identity=55270 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/neutron-ks-user-cnfc4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ab76f8f360 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3347 identity=55270 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/neutron-ks-user-cnfc4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab76f8f360 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3347 identity=55270 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/neutron-ks-user-cnfc4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ab76f8f360 endpointID=3347 k8sNamespace=openstack k8sPodName=neutron-ks-user-cnfc4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=2659eedb-1fff-4eca-b29a-f9b0ed8c5ddb k8s:batch.kubernetes.io/job-name=neutron-ks-user k8s:component=ks-user k8s:controller-uid=2659eedb-1fff-4eca-b29a-f9b0ed8c5ddb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-user k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=ab76f8f360 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3347 identity=55270 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/neutron-ks-user-cnfc4 subsys=endpoint