level=info msg="Memory available for map entries (0.003% of 67421626368B): 168554065B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="993.48µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="55.451µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.066372ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="5.48µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=93.642386ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="13.17µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="18.261µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="68.251µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="68.861µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="80.192µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="443.729µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="4.28µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=9.598626ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.912012ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="38.762µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="92.451µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="267.835µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="173.923µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="173.543µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=55.712674ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="85.882µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="12.03µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.39µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.163.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.412145ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="3.141µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.409264ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="2.58µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.945526ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="15.94µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="4.15µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="4.91µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.4µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.38µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="28.731µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="15.301µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="65.711µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="307.316µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.311µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.65µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="237.014µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="742.315µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.287026ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.65µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="20.68µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.163 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.163 ipAddr.ipv6="" k8sNodeIP=199.19.213.163 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.163" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.241" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.163" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.163} {CiliumInternalIP 10.0.0.241}] 10.0.0.0/24 [] [] 10.0.0.200 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:40529" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.437582329s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="13.381µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="8.13µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="69.901µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="7.94µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3087 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3087 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3087 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.369392187s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=296.516285ms file-path=/var/run/cilium/state/templates/33ee2509e6b8e8bfa2df0cc249987e621c3a4c29afb5e3e6dc45bf7b8aac7919/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3087 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=940 ipv4=10.0.0.200 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=940 identityLabels="reserved:health" ipv4=10.0.0.200 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=940 identity=4 identityLabels="reserved:health" ipv4=10.0.0.200 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Create endpoint request" addressing="&{10.0.0.145 d050426c-8d21-4bf1-9947-9c37c9b9278f default }" containerID=567768b8e380e3eca6ac63876f701378693f4646118043b87e50f09cd279c1d0 datapathConfiguration="&{false false false false false }" interface=lxc6a7cdead9d54 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-g4457 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=567768b8e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3158 ipv4=10.0.0.145 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-g4457 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 6f780b47-c369-494c-bc07-f65a2d532f02 default }" containerID=93b42851e5a7fb2375abfe627192dba3a3bcbf754bd9a9b2a74e5ff2a093ac5f datapathConfiguration="&{false false false false false }" interface=lxc95860bcd4db5 k8sPodName=kube-system/coredns-7c96b6546b-fv8gp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=93b42851e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2458 ipv4=10.0.0.33 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fv8gp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=567768b8e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3158 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=418d7eb0-7a4f-485f-b2fb-3247b7062996,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=418d7eb0-7a4f-485f-b2fb-3247b7062996,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.145 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-g4457 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=93b42851e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2458 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.33 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fv8gp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=93b42851e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2458 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.33 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fv8gp line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=567768b8e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3158 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.145 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-g4457 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=418d7eb0-7a4f-485f-b2fb-3247b7062996;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=418d7eb0-7a4f-485f-b2fb-3247b7062996;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=567768b8e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3158 identity=47617 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=418d7eb0-7a4f-485f-b2fb-3247b7062996,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=418d7eb0-7a4f-485f-b2fb-3247b7062996,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.145 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-g4457 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=567768b8e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3158 identity=47617 ipv4=10.0.0.145 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-g4457 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=93b42851e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2458 identity=21325 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.33 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fv8gp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=93b42851e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2458 identity=21325 ipv4=10.0.0.33 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fv8gp subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=1.071441031s file-path=/var/run/cilium/state/templates/1cf7b08df909ae062bd58d5f229775985259273a79a35a449b288506b362966b/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=567768b8e3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3158 identity=47617 ipv4=10.0.0.145 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-g4457 subsys=endpoint level=info msg="Successful endpoint creation" containerID=567768b8e3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3158 identity=47617 ipv4=10.0.0.145 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-g4457 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=940 identity=4 ipv4=10.0.0.200 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=93b42851e5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2458 identity=21325 ipv4=10.0.0.33 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fv8gp subsys=endpoint level=info msg="Successful endpoint creation" containerID=93b42851e5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2458 identity=21325 ipv4=10.0.0.33 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fv8gp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=567768b8e3 endpointID=3158 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-g4457 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=418d7eb0-7a4f-485f-b2fb-3247b7062996 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=418d7eb0-7a4f-485f-b2fb-3247b7062996 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=567768b8e3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3158 identity=47617 ipv4=10.0.0.145 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-g4457 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 347c006f-5112-4b13-9e86-0d09a7c46d02 default }" containerID=6ef5c9d1c4896dd180830ac22773fd6084bce29f348fa063ac7e2375cce84286 datapathConfiguration="&{false false false false false }" interface=lxce3c5743b372c k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gwc6r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ef5c9d1c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2085 ipv4=10.0.0.228 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gwc6r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ef5c9d1c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2085 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.228 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gwc6r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6ef5c9d1c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2085 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.228 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gwc6r line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ef5c9d1c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2085 identity=15166 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.228 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gwc6r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ef5c9d1c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2085 identity=15166 ipv4=10.0.0.228 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gwc6r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6ef5c9d1c4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2085 identity=15166 ipv4=10.0.0.228 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gwc6r subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ef5c9d1c4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2085 identity=15166 ipv4=10.0.0.228 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gwc6r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3087 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03087 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03087 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03087 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03087:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3087 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 fa7bcda5-f5f2-4d7e-9641-62cabd59dc17 default }" containerID=3ace1e74387ea9569945ecd115629cd61a1f094cf4d34ee4ca8ce8874f72d830 datapathConfiguration="&{false false false false false }" interface=lxcf0d9dccae4bb k8sPodName=kube-system/coredns-67659f764b-86cw4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ace1e7438 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2123 ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-67659f764b-86cw4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ace1e7438 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2123 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-67659f764b-86cw4 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3ace1e7438 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2123 identity=21325 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-67659f764b-86cw4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ace1e7438 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2123 identity=21325 ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-67659f764b-86cw4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.104 9bb767e1-4bac-4ed0-94c4-4305e449921f default }" containerID=09ad6c2a97f7b11dc2ec6065fe6753ff222d88c27c8df01266a54fb273c71bc0 datapathConfiguration="&{false false false false false }" interface=lxc4bb7909be0fa k8sPodName=kube-system/coredns-67659f764b-n66sl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=09ad6c2a97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1164 ipv4=10.0.0.104 ipv6= k8sPodName=kube-system/coredns-67659f764b-n66sl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=09ad6c2a97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1164 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.104 ipv6= k8sPodName=kube-system/coredns-67659f764b-n66sl subsys=endpoint level=info msg="Identity of endpoint changed" containerID=09ad6c2a97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1164 identity=21325 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.104 ipv6= k8sPodName=kube-system/coredns-67659f764b-n66sl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=09ad6c2a97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1164 identity=21325 ipv4=10.0.0.104 ipv6= k8sPodName=kube-system/coredns-67659f764b-n66sl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3ace1e7438 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2123 identity=21325 ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-67659f764b-86cw4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ace1e7438 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2123 identity=21325 ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-67659f764b-86cw4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=09ad6c2a97 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1164 identity=21325 ipv4=10.0.0.104 ipv6= k8sPodName=kube-system/coredns-67659f764b-n66sl subsys=endpoint level=info msg="Successful endpoint creation" containerID=09ad6c2a97 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1164 identity=21325 ipv4=10.0.0.104 ipv6= k8sPodName=kube-system/coredns-67659f764b-n66sl subsys=daemon level=info msg="Delete endpoint request" containerID=93b42851e5 endpointID=2458 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-fv8gp subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=93b42851e5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2458 identity=21325 ipv4=10.0.0.33 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fv8gp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 bceddf88-4517-45ef-a9aa-2f0a5d84bb8f default }" containerID=7390d34d219085b89c23c1c1427e9e7e4c991c81b804b5cb4b6f1b1ddd258aaa datapathConfiguration="&{false false false false false }" interface=lxcb03ccd3b33c2 k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-4v2kt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7390d34d21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1746 ipv4=10.0.0.39 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-4v2kt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7390d34d21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1746 identityLabels="k8s:app=ceph-csi-rbd,k8s:chart=ceph-csi-rbd-3.11.0,k8s:component=provisioner,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ceph-csi-rbd-provisioner,k8s:io.kubernetes.pod.namespace=kube-system,k8s:release=ceph-csi-rbd" ipv4=10.0.0.39 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-4v2kt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-csi-rbd;k8s:chart=ceph-csi-rbd-3.11.0;k8s:component=provisioner;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ceph-csi-rbd-provisioner;k8s:io.kubernetes.pod.namespace=kube-system;k8s:release=ceph-csi-rbd;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7390d34d21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1746 identity=4255 identityLabels="k8s:app=ceph-csi-rbd,k8s:chart=ceph-csi-rbd-3.11.0,k8s:component=provisioner,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ceph-csi-rbd-provisioner,k8s:io.kubernetes.pod.namespace=kube-system,k8s:release=ceph-csi-rbd" ipv4=10.0.0.39 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-4v2kt oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7390d34d21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1746 identity=4255 ipv4=10.0.0.39 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-4v2kt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7390d34d21 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1746 identity=4255 ipv4=10.0.0.39 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-4v2kt subsys=endpoint level=info msg="Successful endpoint creation" containerID=7390d34d21 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1746 identity=4255 ipv4=10.0.0.39 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-4v2kt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.142 819935bb-df2f-4b82-85a1-e2e8b2c1fd7f default }" containerID=0d881cb44c7f53ed6f3a400c4d21b748fd0ed99c14a1bcf519303a36f21a2795 datapathConfiguration="&{false false false false false }" interface=lxccd64b07f7c48 k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-q27xt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d881cb44c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1735 ipv4=10.0.0.142 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-q27xt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d881cb44c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1735 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.142 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-q27xt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.90 d02e4e4e-6968-4449-a082-b64a659a615a default }" containerID=9a25f643454ce4e4bac7e1c3ee0f994420981a5c5972d6680482a5146165ffcf datapathConfiguration="&{false false false false false }" interface=lxc794f7f199b18 k8sPodName=cert-manager/cert-manager-79c48d47db-dnfdc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a25f64345 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2006 ipv4=10.0.0.90 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-dnfdc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a25f64345 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2006 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.90 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-dnfdc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 6d990397-22f5-4bea-8ad7-c0402a2f747a default }" containerID=ac7e8c10a59601eb490e06f303755cebaf9fe43e2d4fbb37ae632ee4383b8ae2 datapathConfiguration="&{false false false false false }" interface=lxcac05bffd00ca k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-qbpgn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ac7e8c10a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1418 ipv4=10.0.0.176 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-qbpgn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0d881cb44c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1735 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.142 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-q27xt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d881cb44c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1735 identity=21688 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.142 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-q27xt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d881cb44c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1735 identity=21688 ipv4=10.0.0.142 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-q27xt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ac7e8c10a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1418 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.176 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-qbpgn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=9a25f64345 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2006 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.90 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-dnfdc line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=ac7e8c10a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1418 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.176 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-qbpgn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=ac7e8c10a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1418 identity=13458 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.176 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-qbpgn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ac7e8c10a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1418 identity=13458 ipv4=10.0.0.176 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-qbpgn subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a25f64345 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2006 identity=20109 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.90 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-dnfdc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a25f64345 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2006 identity=20109 ipv4=10.0.0.90 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-dnfdc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0d881cb44c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1735 identity=21688 ipv4=10.0.0.142 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-q27xt subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d881cb44c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1735 identity=21688 ipv4=10.0.0.142 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-q27xt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ac7e8c10a5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1418 identity=13458 ipv4=10.0.0.176 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-qbpgn subsys=endpoint level=info msg="Successful endpoint creation" containerID=ac7e8c10a5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1418 identity=13458 ipv4=10.0.0.176 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-qbpgn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9a25f64345 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2006 identity=20109 ipv4=10.0.0.90 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-dnfdc subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a25f64345 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2006 identity=20109 ipv4=10.0.0.90 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-dnfdc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.49 6e847f6c-877f-4bc5-a662-f4f107b5f406 default }" containerID=f910754d393f267db4087cf39db0c5daa7e2ae3db907d8050df83d3909892eea datapathConfiguration="&{false false false false false }" interface=lxc2acd8481f284 k8sPodName=cert-manager/cert-manager-startupapicheck-rfzpt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f910754d39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 ipv4=10.0.0.49 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rfzpt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f910754d39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=aedabb4a-318a-4166-950f-bacb0b857186,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=aedabb4a-318a-4166-950f-bacb0b857186,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.49 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rfzpt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.15.5;k8s:batch.kubernetes.io/controller-uid=aedabb4a-318a-4166-950f-bacb0b857186;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=aedabb4a-318a-4166-950f-bacb0b857186;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f910754d39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identity=58917 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=aedabb4a-318a-4166-950f-bacb0b857186,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=aedabb4a-318a-4166-950f-bacb0b857186,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.49 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rfzpt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f910754d39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identity=58917 ipv4=10.0.0.49 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rfzpt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f910754d39 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=228 identity=58917 ipv4=10.0.0.49 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rfzpt subsys=endpoint level=info msg="Successful endpoint creation" containerID=f910754d39 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=228 identity=58917 ipv4=10.0.0.49 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rfzpt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f910754d39 endpointID=228 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-rfzpt subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.15.5 k8s:batch.kubernetes.io/controller-uid=aedabb4a-318a-4166-950f-bacb0b857186 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=aedabb4a-318a-4166-950f-bacb0b857186 k8s:helm.sh/chart=cert-manager-v1.15.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=f910754d39 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=228 identity=58917 ipv4=10.0.0.49 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rfzpt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 279e2beb-6344-4c0b-b906-6350b0c3f2cb default }" containerID=ea8004a271fa0e6aba8690ecf387971330e4999b85850e346dbc8d96e27fcef6 datapathConfiguration="&{false false false false false }" interface=lxccd884ac7bd9b k8sPodName=ingress-nginx/ingress-nginx-admission-create-st8p4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea8004a271 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=744 ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-st8p4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea8004a271 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=744 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=6b67bc47-50f5-4eb4-9427-7493d4603a6f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=6b67bc47-50f5-4eb4-9427-7493d4603a6f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-st8p4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ea8004a271 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=744 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-st8p4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=6b67bc47-50f5-4eb4-9427-7493d4603a6f;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=6b67bc47-50f5-4eb4-9427-7493d4603a6f;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea8004a271 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=744 identity=34311 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=6b67bc47-50f5-4eb4-9427-7493d4603a6f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=6b67bc47-50f5-4eb4-9427-7493d4603a6f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-st8p4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea8004a271 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=744 identity=34311 ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-st8p4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea8004a271 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=744 identity=34311 ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-st8p4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea8004a271 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=744 identity=34311 ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-st8p4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ea8004a271 endpointID=744 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-st8p4 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=6b67bc47-50f5-4eb4-9427-7493d4603a6f k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=6b67bc47-50f5-4eb4-9427-7493d4603a6f k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=ea8004a271 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=744 identity=34311 ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-st8p4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.177 36d50c52-dc52-49c4-85d1-e1a94f3f4513 default }" containerID=90b528fe34c155add026f126fa8f562e5ba8a79403b40fd61bebc7d488fc03d2 datapathConfiguration="&{false false false false false }" interface=lxcbeb2557880e7 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fx5l7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=90b528fe34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 ipv4=10.0.0.177 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fx5l7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=90b528fe34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.177 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fx5l7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=90b528fe34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 identity=51230 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.177 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fx5l7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=90b528fe34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 identity=51230 ipv4=10.0.0.177 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fx5l7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=90b528fe34 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=500 identity=51230 ipv4=10.0.0.177 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fx5l7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=90b528fe34 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=500 identity=51230 ipv4=10.0.0.177 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fx5l7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.73 efa92437-3006-4579-b769-54409883d532 default }" containerID=f724e61370cfcfc6d1d0eed375b3b615d1de3084ffa519c2a926ce2434d32ebc datapathConfiguration="&{false false false false false }" interface=lxc9576c054d8be k8sPodName=ingress-nginx/ingress-nginx-admission-patch-np9wl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f724e61370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=584 ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-np9wl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f724e61370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=584 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=397dad84-1117-4a3d-ba27-9f89fdfaa04f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=397dad84-1117-4a3d-ba27-9f89fdfaa04f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-np9wl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=397dad84-1117-4a3d-ba27-9f89fdfaa04f;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=397dad84-1117-4a3d-ba27-9f89fdfaa04f;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f724e61370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=584 identity=43120 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=397dad84-1117-4a3d-ba27-9f89fdfaa04f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=397dad84-1117-4a3d-ba27-9f89fdfaa04f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-np9wl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f724e61370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=584 identity=43120 ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-np9wl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f724e61370 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=584 identity=43120 ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-np9wl subsys=endpoint level=info msg="Successful endpoint creation" containerID=f724e61370 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=584 identity=43120 ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-np9wl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f724e61370 endpointID=584 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-np9wl subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=397dad84-1117-4a3d-ba27-9f89fdfaa04f k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=397dad84-1117-4a3d-ba27-9f89fdfaa04f k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=f724e61370 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=584 identity=43120 ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-np9wl subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=9cff7b6e-563b-47bc-a4d6-7c12ca9abc3e] Description:}]" policyAddRequest=f4d50cfb-75f9-4a2b-ac92-418326361e63 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=f4d50cfb-75f9-4a2b-ac92-418326361e63 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=2d2c56dd-88f2-452a-bdd6-9616b99e9bdb] Description:}]" policyAddRequest=6c42c75a-b581-4a69-89dc-04bb9e04df45 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=6c42c75a-b581-4a69-89dc-04bb9e04df45 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.248 e943d672-2bac-4658-bf37-515e3135a443 default }" containerID=b7bb073e1a6ff9b0af6998c2a5f09e3bd9889ad75552438fb4cd4d32f809ce1f datapathConfiguration="&{false false false false false }" interface=lxcab63a5a16c7f k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-dl8n5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7bb073e1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-dl8n5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7bb073e1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-dl8n5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b7bb073e1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identity=44831 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-dl8n5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7bb073e1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identity=44831 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-dl8n5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.36 9ac60568-eae4-499b-9061-36c711790d8e default }" containerID=f1b54c154705f7c3ad24ac562c72a31ed107711c85d4806e75d91463fcb5c795 datapathConfiguration="&{false false false false false }" interface=lxc0d3b4be90880 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-pdnzd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f1b54c1547 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3520 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-pdnzd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f1b54c1547 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3520 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-pdnzd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f1b54c1547 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3520 identity=27012 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-pdnzd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f1b54c1547 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3520 identity=27012 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-pdnzd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b7bb073e1a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=336 identity=44831 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-dl8n5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7bb073e1a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=336 identity=44831 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-dl8n5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f1b54c1547 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3520 identity=27012 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-pdnzd subsys=endpoint level=info msg="Successful endpoint creation" containerID=f1b54c1547 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3520 identity=27012 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-pdnzd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.245 df094bf4-ab16-4e12-9058-91a9fb4cf09e default }" containerID=a645828075abe781b6f1bbeaab995c7943e4cc0421257d1e5a3468425eacf13a datapathConfiguration="&{false false false false false }" interface=lxcbaccbb7b5f74 k8sPodName=openstack/pxc-operator-69cb5bbdb9-nqxcz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a645828075 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-nqxcz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a645828075 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-nqxcz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a645828075 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identity=13914 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-nqxcz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a645828075 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identity=13914 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-nqxcz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a645828075 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=14 identity=13914 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-nqxcz subsys=endpoint level=info msg="Successful endpoint creation" containerID=a645828075 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=14 identity=13914 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-nqxcz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.134 28492e6a-9727-4b89-84bb-932141b2621e default }" containerID=de9d3d9aa323ea8d3afd5b0d2a884bce3cea24055c994dab48e70d414803dd70 datapathConfiguration="&{false false false false false }" interface=lxc3d92d88fe431 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de9d3d9aa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=422 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de9d3d9aa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=422 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=de9d3d9aa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=422 identity=19780 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de9d3d9aa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=422 identity=19780 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=de9d3d9aa3 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=422 identity=19780 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=de9d3d9aa3 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=422 identity=19780 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.183 ce933e07-8f03-4330-aea0-92bfb9f51118 default }" containerID=34468e1da015067f1790d14be63ef6fd33a5f1ad8980f20dbee0d6aa5d750954 datapathConfiguration="&{false false false false false }" interface=lxc10a300a143d8 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34468e1da0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=745 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34468e1da0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=745 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=34468e1da0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=745 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.183 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=34468e1da0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=745 identity=25515 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34468e1da0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=745 identity=25515 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=34468e1da0 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=745 identity=25515 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=34468e1da0 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=745 identity=25515 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=39469704-ae27-40e0-8eb4-544ad7009258] Description:}]" policyAddRequest=6d61117a-0811-43bd-97dd-74fd2394da18 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=6d61117a-0811-43bd-97dd-74fd2394da18 policyRevision=4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.71 d4b1f28a-a3b5-48c9-b376-cb7e0721c520 default }" containerID=ec2cee401abc94cd454653fce6ef17954debe6fd5a68ac04910ec8cd5a18fd1d datapathConfiguration="&{false false false false false }" interface=lxc6d99fb3b8b87 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec2cee401a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2338 ipv4=10.0.0.71 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec2cee401a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2338 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.71 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=ec2cee401a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2338 identity=2237 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.71 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec2cee401a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2338 identity=2237 ipv4=10.0.0.71 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ec2cee401a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2338 identity=2237 ipv4=10.0.0.71 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec2cee401a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2338 identity=2237 ipv4=10.0.0.71 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.007392427665129114 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.164 4c3391de-c03a-49f0-86f0-f96a1eff3cac default }" containerID=eceb6f09930975cc72122b46539a4eb7f0a3127559a4ded911917858edd6af30 datapathConfiguration="&{false false false false false }" interface=lxc5000c94c146d k8sPodName=openstack/memcached-memcached-cf56b6468-b525r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eceb6f0993 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-b525r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eceb6f0993 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-b525r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eceb6f0993 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 identity=14477 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-b525r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eceb6f0993 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 identity=14477 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-b525r subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=eceb6f0993 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=229 identity=14477 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-b525r subsys=endpoint level=info msg="Successful endpoint creation" containerID=eceb6f0993 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=229 identity=14477 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-b525r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.92 403d1e94-ad49-47e6-8604-15e2e2e55ff9 default }" containerID=eea9c64842c557cdb10246f377094214cd82544622e9aad9024977d348b0c8dc datapathConfiguration="&{false false false false false }" interface=lxc45e76beb2e31 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eea9c64842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2934 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eea9c64842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2934 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=eea9c64842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2934 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eea9c64842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2934 identity=1538 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eea9c64842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2934 identity=1538 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eea9c64842 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2934 identity=1538 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eea9c64842 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2934 identity=1538 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03147361586429857 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.112 0cfe57df-b97a-4844-892d-0362b30c9503 default }" containerID=b0ce3b157f32701e8b4796d224d309cba1b09480d7808a6d405ed461e9fff33a datapathConfiguration="&{false false false false false }" interface=lxc465dc26f1de9 k8sPodName=openstack/keystone-api-59695f47ff-9tt6k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0ce3b157f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1841 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-api-59695f47ff-9tt6k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0ce3b157f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1841 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-api-59695f47ff-9tt6k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b0ce3b157f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1841 identity=27776 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-api-59695f47ff-9tt6k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b0ce3b157f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1841 identity=27776 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-api-59695f47ff-9tt6k subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.103 99d0abd3-e64f-44ee-9fa6-874c27314746 default }" containerID=66f7d7befd384ce1a1fb9bd7273ff049fbd26aa4c916da7b3115c48f561c964f datapathConfiguration="&{false false false false false }" interface=lxc343881e6f721 k8sPodName=openstack/keystone-credential-setup-rl4r9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=66f7d7befd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-credential-setup-rl4r9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=66f7d7befd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=58dfe92e-7116-4e25-a7b7-94fa8f4c4954,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=58dfe92e-7116-4e25-a7b7-94fa8f4c4954,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-credential-setup-rl4r9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=58dfe92e-7116-4e25-a7b7-94fa8f4c4954;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=58dfe92e-7116-4e25-a7b7-94fa8f4c4954;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=66f7d7befd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 identity=4706 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=58dfe92e-7116-4e25-a7b7-94fa8f4c4954,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=58dfe92e-7116-4e25-a7b7-94fa8f4c4954,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-credential-setup-rl4r9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=66f7d7befd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 identity=4706 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-credential-setup-rl4r9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b0ce3b157f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1841 identity=27776 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-api-59695f47ff-9tt6k subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0ce3b157f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1841 identity=27776 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-api-59695f47ff-9tt6k subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=66f7d7befd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=923 identity=4706 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-credential-setup-rl4r9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=66f7d7befd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=923 identity=4706 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-credential-setup-rl4r9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=66f7d7befd endpointID=923 k8sNamespace=openstack k8sPodName=keystone-credential-setup-rl4r9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=58dfe92e-7116-4e25-a7b7-94fa8f4c4954 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=58dfe92e-7116-4e25-a7b7-94fa8f4c4954 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=66f7d7befd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=923 identity=4706 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-credential-setup-rl4r9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 707a49e6-9054-4940-ac58-8cb7d328cd5f default }" containerID=ee40f53d146d3c3c439c81b8e58c023b3b596252140dc2a985217527b8648ed9 datapathConfiguration="&{false false false false false }" interface=lxc8222ca01d15f k8sPodName=openstack/keystone-db-init-zsv96 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee40f53d14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1230 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-db-init-zsv96 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee40f53d14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1230 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3a2938ae-0a6d-40c5-89df-397d1223d92e,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=3a2938ae-0a6d-40c5-89df-397d1223d92e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-db-init-zsv96 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3a2938ae-0a6d-40c5-89df-397d1223d92e;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=3a2938ae-0a6d-40c5-89df-397d1223d92e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee40f53d14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1230 identity=49513 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3a2938ae-0a6d-40c5-89df-397d1223d92e,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=3a2938ae-0a6d-40c5-89df-397d1223d92e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-db-init-zsv96 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee40f53d14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1230 identity=49513 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-db-init-zsv96 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ee40f53d14 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1230 identity=49513 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-db-init-zsv96 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee40f53d14 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1230 identity=49513 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-db-init-zsv96 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ee40f53d14 endpointID=1230 k8sNamespace=openstack k8sPodName=keystone-db-init-zsv96 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3a2938ae-0a6d-40c5-89df-397d1223d92e k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=3a2938ae-0a6d-40c5-89df-397d1223d92e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ee40f53d14 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1230 identity=49513 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-db-init-zsv96 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 73ff66b4-414c-4e70-9d78-5e2200df3587 default }" containerID=b378ff42dd86fd5188e34e3261203667648aae215ad575e2cb67bd87cd3fab69 datapathConfiguration="&{false false false false false }" interface=lxc85cd6ba50ac2 k8sPodName=openstack/keystone-fernet-setup-gzm4c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b378ff42dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1757 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-fernet-setup-gzm4c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b378ff42dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1757 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=be58bc2f-335b-40bc-b646-eeb83fc9c697,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=be58bc2f-335b-40bc-b646-eeb83fc9c697,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-fernet-setup-gzm4c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=be58bc2f-335b-40bc-b646-eeb83fc9c697;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=be58bc2f-335b-40bc-b646-eeb83fc9c697;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b378ff42dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1757 identity=62710 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=be58bc2f-335b-40bc-b646-eeb83fc9c697,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=be58bc2f-335b-40bc-b646-eeb83fc9c697,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-fernet-setup-gzm4c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b378ff42dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1757 identity=62710 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-fernet-setup-gzm4c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b378ff42dd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1757 identity=62710 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-fernet-setup-gzm4c subsys=endpoint level=info msg="Successful endpoint creation" containerID=b378ff42dd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1757 identity=62710 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-fernet-setup-gzm4c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b378ff42dd endpointID=1757 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-gzm4c subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=be58bc2f-335b-40bc-b646-eeb83fc9c697 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=be58bc2f-335b-40bc-b646-eeb83fc9c697 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b378ff42dd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1757 identity=62710 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-fernet-setup-gzm4c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 396555d4-fabb-403a-bed3-f9b52891e721 default }" containerID=ad550ccf12307bb70babf1489a774bc7d0970922a5986d601a70604da95f0421 datapathConfiguration="&{false false false false false }" interface=lxc1798eeaf1784 k8sPodName=openstack/keystone-db-sync-hwq6n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad550ccf12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1464 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-db-sync-hwq6n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad550ccf12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1464 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d8cc8390-15e0-4c90-a783-55e89df52854,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=d8cc8390-15e0-4c90-a783-55e89df52854,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-db-sync-hwq6n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ad550ccf12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1464 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-db-sync-hwq6n line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d8cc8390-15e0-4c90-a783-55e89df52854;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=d8cc8390-15e0-4c90-a783-55e89df52854;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad550ccf12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1464 identity=32009 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d8cc8390-15e0-4c90-a783-55e89df52854,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=d8cc8390-15e0-4c90-a783-55e89df52854,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-db-sync-hwq6n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad550ccf12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1464 identity=32009 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-db-sync-hwq6n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ad550ccf12 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1464 identity=32009 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-db-sync-hwq6n subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad550ccf12 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1464 identity=32009 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-db-sync-hwq6n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ad550ccf12 endpointID=1464 k8sNamespace=openstack k8sPodName=keystone-db-sync-hwq6n subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d8cc8390-15e0-4c90-a783-55e89df52854 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=d8cc8390-15e0-4c90-a783-55e89df52854 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ad550ccf12 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1464 identity=32009 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-db-sync-hwq6n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.199 8146383f-b7e5-4b5c-b06f-c8c28ec64c3c default }" containerID=501e0ceb0a237e4391cca22690d2d3b7ed8ff61f3e1d7fb051bbd50bd331fdcc datapathConfiguration="&{false false false false false }" interface=lxc7c1b034ecdc6 k8sPodName=openstack/keystone-rabbit-init-9jsbb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=501e0ceb0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-rabbit-init-9jsbb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=501e0ceb0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6cbac66b-cfce-472b-93e3-359a3e808685,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=6cbac66b-cfce-472b-93e3-359a3e808685,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-rabbit-init-9jsbb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6cbac66b-cfce-472b-93e3-359a3e808685;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=6cbac66b-cfce-472b-93e3-359a3e808685;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=501e0ceb0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 identity=3213 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6cbac66b-cfce-472b-93e3-359a3e808685,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=6cbac66b-cfce-472b-93e3-359a3e808685,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-rabbit-init-9jsbb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=501e0ceb0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 identity=3213 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-rabbit-init-9jsbb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=501e0ceb0a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1350 identity=3213 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-rabbit-init-9jsbb subsys=endpoint level=info msg="Successful endpoint creation" containerID=501e0ceb0a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1350 identity=3213 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-rabbit-init-9jsbb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=501e0ceb0a endpointID=1350 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-9jsbb subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6cbac66b-cfce-472b-93e3-359a3e808685 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=6cbac66b-cfce-472b-93e3-359a3e808685 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=501e0ceb0a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1350 identity=3213 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-rabbit-init-9jsbb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 ba702fdf-c15e-45ad-bc8c-f8d1cc4bbea7 default }" containerID=9291bb800b1221716ce07b9b461cf21c95d6ef823eb1358f114ebccb07ce16d7 datapathConfiguration="&{false false false false false }" interface=lxc4c5ade378c59 k8sPodName=openstack/keystone-domain-manage-svwxf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9291bb800b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3478 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-domain-manage-svwxf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9291bb800b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3478 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=18e8b0f0-fac5-4617-a9ce-0e2ac2a9341a,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=18e8b0f0-fac5-4617-a9ce-0e2ac2a9341a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-domain-manage-svwxf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=18e8b0f0-fac5-4617-a9ce-0e2ac2a9341a;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=18e8b0f0-fac5-4617-a9ce-0e2ac2a9341a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9291bb800b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3478 identity=2343 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=18e8b0f0-fac5-4617-a9ce-0e2ac2a9341a,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=18e8b0f0-fac5-4617-a9ce-0e2ac2a9341a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-domain-manage-svwxf oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9291bb800b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3478 identity=2343 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-domain-manage-svwxf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9291bb800b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3478 identity=2343 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-domain-manage-svwxf subsys=endpoint level=info msg="Successful endpoint creation" containerID=9291bb800b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3478 identity=2343 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-domain-manage-svwxf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9291bb800b endpointID=3478 k8sNamespace=openstack k8sPodName=keystone-domain-manage-svwxf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=18e8b0f0-fac5-4617-a9ce-0e2ac2a9341a k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=18e8b0f0-fac5-4617-a9ce-0e2ac2a9341a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9291bb800b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3478 identity=2343 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-domain-manage-svwxf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 2be09a5f-aa42-467d-8632-1df00cf3ef00 default }" containerID=a2ee5affeb3dd450a160114d898b3a8a3da84e1731a79b3d3ce03c9624f96d12 datapathConfiguration="&{false false false false false }" interface=lxc09d1895deb7d k8sPodName=openstack/keystone-bootstrap-ns94d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2ee5affeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2001 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-bootstrap-ns94d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2ee5affeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2001 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f70b975b-78b9-447a-9f49-940fea9ab627,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=f70b975b-78b9-447a-9f49-940fea9ab627,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-bootstrap-ns94d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f70b975b-78b9-447a-9f49-940fea9ab627;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=f70b975b-78b9-447a-9f49-940fea9ab627;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=a2ee5affeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2001 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-bootstrap-ns94d line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a2ee5affeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2001 identity=51050 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f70b975b-78b9-447a-9f49-940fea9ab627,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=f70b975b-78b9-447a-9f49-940fea9ab627,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-bootstrap-ns94d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a2ee5affeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2001 identity=51050 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-bootstrap-ns94d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a2ee5affeb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2001 identity=51050 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-bootstrap-ns94d subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2ee5affeb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2001 identity=51050 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-bootstrap-ns94d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a2ee5affeb endpointID=2001 k8sNamespace=openstack k8sPodName=keystone-bootstrap-ns94d subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f70b975b-78b9-447a-9f49-940fea9ab627 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=f70b975b-78b9-447a-9f49-940fea9ab627 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a2ee5affeb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2001 identity=51050 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-bootstrap-ns94d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 0c0a6488-05b1-4374-a97c-4a8b1481c41c default }" containerID=3ca178b5b9d4fe25bda09ae86cee29794ff235587ba8ad76e3c8ca01ee8a0d84 datapathConfiguration="&{false false false false false }" interface=lxc36c62fe6a4f4 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ca178b5b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2537 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ca178b5b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2537 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=3ca178b5b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2537 identity=36544 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ca178b5b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2537 identity=36544 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3ca178b5b9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2537 identity=36544 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ca178b5b9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2537 identity=36544 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.209 dd597e4f-9938-43c9-a662-69c5c0ce534c default }" containerID=e53bfefb909870a4fd0c8d32c73915ff9e48be2dfc7771ed7d87a36c82422e30 datapathConfiguration="&{false false false false false }" interface=lxc06cbdaf0b7bd k8sPodName=openstack/glance-db-init-7rwzx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e53bfefb90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2883 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-db-init-7rwzx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e53bfefb90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2883 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e7cd975e-9e0c-4286-b277-b9a1dedcf88a,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=e7cd975e-9e0c-4286-b277-b9a1dedcf88a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-db-init-7rwzx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e7cd975e-9e0c-4286-b277-b9a1dedcf88a;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=e7cd975e-9e0c-4286-b277-b9a1dedcf88a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e53bfefb90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2883 identity=10330 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e7cd975e-9e0c-4286-b277-b9a1dedcf88a,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=e7cd975e-9e0c-4286-b277-b9a1dedcf88a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-db-init-7rwzx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e53bfefb90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2883 identity=10330 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-db-init-7rwzx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e53bfefb90 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2883 identity=10330 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-db-init-7rwzx subsys=endpoint level=info msg="Successful endpoint creation" containerID=e53bfefb90 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2883 identity=10330 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-db-init-7rwzx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e53bfefb90 endpointID=2883 k8sNamespace=openstack k8sPodName=glance-db-init-7rwzx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e7cd975e-9e0c-4286-b277-b9a1dedcf88a k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=e7cd975e-9e0c-4286-b277-b9a1dedcf88a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e53bfefb90 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2883 identity=10330 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-db-init-7rwzx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 bb3447a5-0a54-4850-9ef1-1afbc92f4ffe default }" containerID=0ad7685bb978e27a01e1af33ba55c8d0887f82baad1d4ee0d89cbe2c03cb1c1d datapathConfiguration="&{false false false false false }" interface=lxc856ea899c805 k8sPodName=openstack/glance-db-sync-76jwt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ad7685bb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-db-sync-76jwt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ad7685bb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d9967636-cb71-4b8d-927b-0ad467a0bfc7,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=d9967636-cb71-4b8d-927b-0ad467a0bfc7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-db-sync-76jwt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0ad7685bb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-db-sync-76jwt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d9967636-cb71-4b8d-927b-0ad467a0bfc7;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=d9967636-cb71-4b8d-927b-0ad467a0bfc7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0ad7685bb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 identity=21557 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d9967636-cb71-4b8d-927b-0ad467a0bfc7,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=d9967636-cb71-4b8d-927b-0ad467a0bfc7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-db-sync-76jwt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ad7685bb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 identity=21557 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-db-sync-76jwt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0ad7685bb9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=866 identity=21557 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-db-sync-76jwt subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ad7685bb9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=866 identity=21557 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-db-sync-76jwt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0ad7685bb9 endpointID=866 k8sNamespace=openstack k8sPodName=glance-db-sync-76jwt subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d9967636-cb71-4b8d-927b-0ad467a0bfc7 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=d9967636-cb71-4b8d-927b-0ad467a0bfc7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0ad7685bb9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=866 identity=21557 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-db-sync-76jwt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 0b3a75e8-3675-4d72-9f3d-f8774b9c8f1b default }" containerID=c13d01493db1db9c13f92cbd16e2fd3fc2ceeb9ba4d9e3ebaef387fe4a5418d9 datapathConfiguration="&{false false false false false }" interface=lxcd771cf49ccf9 k8sPodName=openstack/glance-rabbit-init-zjjl6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c13d01493d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-rabbit-init-zjjl6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c13d01493d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9406b3a2-daf6-4451-9f35-be23ae170f7f,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=9406b3a2-daf6-4451-9f35-be23ae170f7f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-rabbit-init-zjjl6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9406b3a2-daf6-4451-9f35-be23ae170f7f;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=9406b3a2-daf6-4451-9f35-be23ae170f7f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c13d01493d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identity=34357 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9406b3a2-daf6-4451-9f35-be23ae170f7f,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=9406b3a2-daf6-4451-9f35-be23ae170f7f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-rabbit-init-zjjl6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c13d01493d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identity=34357 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-rabbit-init-zjjl6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c13d01493d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=537 identity=34357 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-rabbit-init-zjjl6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c13d01493d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=537 identity=34357 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-rabbit-init-zjjl6 subsys=daemon level=info msg="Delete endpoint request" containerID=c13d01493d endpointID=537 k8sNamespace=openstack k8sPodName=glance-rabbit-init-zjjl6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9406b3a2-daf6-4451-9f35-be23ae170f7f k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=9406b3a2-daf6-4451-9f35-be23ae170f7f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c13d01493d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=537 identity=34357 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-rabbit-init-zjjl6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.28 5ccd4f0d-2f01-4c3b-982d-858813509a72 default }" containerID=e701f970f2ecc2281b6548b66c33429461708c2208bad83e1711d282b0b68637 datapathConfiguration="&{false false false false false }" interface=lxccadf80d33dac k8sPodName=openstack/glance-ks-service-rx8zc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e701f970f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2723 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-ks-service-rx8zc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e701f970f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2723 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3505709c-74a5-45c0-b39f-587212d41abd,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=3505709c-74a5-45c0-b39f-587212d41abd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-ks-service-rx8zc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e701f970f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2723 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-ks-service-rx8zc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3505709c-74a5-45c0-b39f-587212d41abd;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=3505709c-74a5-45c0-b39f-587212d41abd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e701f970f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2723 identity=5613 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3505709c-74a5-45c0-b39f-587212d41abd,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=3505709c-74a5-45c0-b39f-587212d41abd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-ks-service-rx8zc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e701f970f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2723 identity=5613 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-ks-service-rx8zc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e701f970f2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2723 identity=5613 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-ks-service-rx8zc subsys=endpoint level=info msg="Successful endpoint creation" containerID=e701f970f2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2723 identity=5613 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-ks-service-rx8zc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e701f970f2 endpointID=2723 k8sNamespace=openstack k8sPodName=glance-ks-service-rx8zc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3505709c-74a5-45c0-b39f-587212d41abd k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=3505709c-74a5-45c0-b39f-587212d41abd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e701f970f2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2723 identity=5613 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-ks-service-rx8zc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.135 3cff6f0a-095b-4804-a255-ab4f80c020d6 default }" containerID=985cb94e8ac9bfc46f8ecab422bb1cda4382163786df68a28cb4f643a5c74321 datapathConfiguration="&{false false false false false }" interface=lxcc26389f9bca3 k8sPodName=openstack/glance-ks-endpoints-kjmll labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=985cb94e8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1107 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-ks-endpoints-kjmll subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=985cb94e8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1107 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2c360e3b-5438-4d9e-b926-0890f4754616,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=2c360e3b-5438-4d9e-b926-0890f4754616,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-ks-endpoints-kjmll subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=985cb94e8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1107 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-ks-endpoints-kjmll line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=2c360e3b-5438-4d9e-b926-0890f4754616;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=2c360e3b-5438-4d9e-b926-0890f4754616;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=985cb94e8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1107 identity=61584 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2c360e3b-5438-4d9e-b926-0890f4754616,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=2c360e3b-5438-4d9e-b926-0890f4754616,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-ks-endpoints-kjmll oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=985cb94e8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1107 identity=61584 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-ks-endpoints-kjmll subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=985cb94e8a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1107 identity=61584 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-ks-endpoints-kjmll subsys=endpoint level=info msg="Successful endpoint creation" containerID=985cb94e8a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1107 identity=61584 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-ks-endpoints-kjmll subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=985cb94e8a endpointID=1107 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-kjmll subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=2c360e3b-5438-4d9e-b926-0890f4754616 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=2c360e3b-5438-4d9e-b926-0890f4754616 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=985cb94e8a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1107 identity=61584 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-ks-endpoints-kjmll subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 6d76869e-6d71-4c17-bd08-74b8d498630f default }" containerID=fdcb18a75dc088f949c716812e5b954652fbf443d1befb9f263f7cc50fb91f93 datapathConfiguration="&{false false false false false }" interface=lxcfeb83a0c43af k8sPodName=openstack/glance-ks-user-gdglr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fdcb18a75d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1246 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-user-gdglr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fdcb18a75d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1246 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8f3cdcff-470b-4d55-ba3d-3ff75cf3d83a,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=8f3cdcff-470b-4d55-ba3d-3ff75cf3d83a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-user-gdglr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8f3cdcff-470b-4d55-ba3d-3ff75cf3d83a;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=8f3cdcff-470b-4d55-ba3d-3ff75cf3d83a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fdcb18a75d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1246 identity=13759 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8f3cdcff-470b-4d55-ba3d-3ff75cf3d83a,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=8f3cdcff-470b-4d55-ba3d-3ff75cf3d83a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-user-gdglr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fdcb18a75d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1246 identity=13759 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-user-gdglr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fdcb18a75d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1246 identity=13759 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-user-gdglr subsys=endpoint level=info msg="Successful endpoint creation" containerID=fdcb18a75d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1246 identity=13759 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-user-gdglr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fdcb18a75d endpointID=1246 k8sNamespace=openstack k8sPodName=glance-ks-user-gdglr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8f3cdcff-470b-4d55-ba3d-3ff75cf3d83a k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=8f3cdcff-470b-4d55-ba3d-3ff75cf3d83a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=fdcb18a75d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1246 identity=13759 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-user-gdglr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 0dadedfe-06e6-4437-b00c-70e068bc2e82 default }" containerID=8827788827b9711693574dda6c61ed45a156c760ee0c133c288a06b79c20cf02 datapathConfiguration="&{false false false false false }" interface=lxc9f25f5d0c4b9 k8sPodName=openstack/glance-metadefs-load-mhv6b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8827788827 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/glance-metadefs-load-mhv6b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8827788827 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=09a15452-3b23-49ca-9181-a16a946d5644,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=09a15452-3b23-49ca-9181-a16a946d5644,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/glance-metadefs-load-mhv6b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8827788827 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.175 ipv6= k8sPodName=openstack/glance-metadefs-load-mhv6b line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=09a15452-3b23-49ca-9181-a16a946d5644;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=09a15452-3b23-49ca-9181-a16a946d5644;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8827788827 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identity=54786 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=09a15452-3b23-49ca-9181-a16a946d5644,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=09a15452-3b23-49ca-9181-a16a946d5644,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/glance-metadefs-load-mhv6b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8827788827 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identity=54786 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/glance-metadefs-load-mhv6b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8827788827 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=502 identity=54786 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/glance-metadefs-load-mhv6b subsys=endpoint level=info msg="Successful endpoint creation" containerID=8827788827 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=502 identity=54786 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/glance-metadefs-load-mhv6b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8827788827 endpointID=502 k8sNamespace=openstack k8sPodName=glance-metadefs-load-mhv6b subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=09a15452-3b23-49ca-9181-a16a946d5644 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=09a15452-3b23-49ca-9181-a16a946d5644 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8827788827 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=502 identity=54786 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/glance-metadefs-load-mhv6b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 45b2ea88-c27f-449f-b092-d5e57ba9b604 default }" containerID=309e118ffe61b04025e407f77fc5a639842516713d8643bf29b6319bc7140e20 datapathConfiguration="&{false false false false false }" interface=lxc2334dfd0c98f k8sPodName=openstack/glance-storage-init-p55t8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=309e118ffe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-storage-init-p55t8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=309e118ffe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=04cb4f81-d718-42f5-b53c-b3394e6b7494,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=04cb4f81-d718-42f5-b53c-b3394e6b7494,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-storage-init-p55t8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=04cb4f81-d718-42f5-b53c-b3394e6b7494;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=04cb4f81-d718-42f5-b53c-b3394e6b7494;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=309e118ffe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identity=6013 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=04cb4f81-d718-42f5-b53c-b3394e6b7494,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=04cb4f81-d718-42f5-b53c-b3394e6b7494,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-storage-init-p55t8 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=309e118ffe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identity=6013 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-storage-init-p55t8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=309e118ffe datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=535 identity=6013 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-storage-init-p55t8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=309e118ffe datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=535 identity=6013 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-storage-init-p55t8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=309e118ffe endpointID=535 k8sNamespace=openstack k8sPodName=glance-storage-init-p55t8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=04cb4f81-d718-42f5-b53c-b3394e6b7494 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=04cb4f81-d718-42f5-b53c-b3394e6b7494 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=309e118ffe datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=535 identity=6013 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-storage-init-p55t8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 d6ce5d99-4761-4729-8485-1dc727a316b6 default }" containerID=b4ddc977f1aef6ace75dc88a84babe8134c8fb2b1a956f030ecd23355aa6e4de datapathConfiguration="&{false false false false false }" interface=lxc48e648896005 k8sPodName=openstack/glance-api-6bbb5d8f66-c9xc9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4ddc977f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2378 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-api-6bbb5d8f66-c9xc9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4ddc977f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2378 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-api-6bbb5d8f66-c9xc9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b4ddc977f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2378 identity=25737 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-api-6bbb5d8f66-c9xc9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b4ddc977f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2378 identity=25737 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-api-6bbb5d8f66-c9xc9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b4ddc977f1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2378 identity=25737 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-api-6bbb5d8f66-c9xc9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4ddc977f1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2378 identity=25737 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-api-6bbb5d8f66-c9xc9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.203 ea74694a-6086-49c9-8adc-997a9361f8e5 default }" containerID=c9506b54d5d250c3b639d06a1601f1cb29b5db691e1ea41767da948dfaae1a7a datapathConfiguration="&{false false false false false }" interface=lxc88ffeb9de17c k8sPodName=openstack/placement-api-784dc9857b-pbfzc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c9506b54d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=49 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/placement-api-784dc9857b-pbfzc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9506b54d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=49 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/placement-api-784dc9857b-pbfzc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c9506b54d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=49 identity=45311 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/placement-api-784dc9857b-pbfzc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c9506b54d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=49 identity=45311 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/placement-api-784dc9857b-pbfzc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.129 9f7e3c9e-c673-4628-ad0e-95890d811dc2 default }" containerID=4e93c67e5be0c98548ff7a00250dc80c3d80c2e7bbdf0522db0ac662354a1d8e datapathConfiguration="&{false false false false false }" interface=lxc159083707552 k8sPodName=openstack/placement-db-init-8fndn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e93c67e5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1360 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/placement-db-init-8fndn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e93c67e5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1360 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=242a23c2-fc9a-44ac-aa14-9fa49f4f1917,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=242a23c2-fc9a-44ac-aa14-9fa49f4f1917,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/placement-db-init-8fndn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=242a23c2-fc9a-44ac-aa14-9fa49f4f1917;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=242a23c2-fc9a-44ac-aa14-9fa49f4f1917;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e93c67e5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1360 identity=11969 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=242a23c2-fc9a-44ac-aa14-9fa49f4f1917,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=242a23c2-fc9a-44ac-aa14-9fa49f4f1917,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/placement-db-init-8fndn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e93c67e5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1360 identity=11969 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/placement-db-init-8fndn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c9506b54d5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=49 identity=45311 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/placement-api-784dc9857b-pbfzc subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9506b54d5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=49 identity=45311 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/placement-api-784dc9857b-pbfzc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4e93c67e5b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1360 identity=11969 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/placement-db-init-8fndn subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e93c67e5b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1360 identity=11969 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/placement-db-init-8fndn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4e93c67e5b endpointID=1360 k8sNamespace=openstack k8sPodName=placement-db-init-8fndn subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=242a23c2-fc9a-44ac-aa14-9fa49f4f1917 k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=242a23c2-fc9a-44ac-aa14-9fa49f4f1917 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=4e93c67e5b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1360 identity=11969 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/placement-db-init-8fndn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 72e61b02-45e9-4ec6-ab69-fa269d915fce default }" containerID=154e2ffcec74841fee711e9262af0db1bf6597c1faa2b6da870bad393df1a5bf datapathConfiguration="&{false false false false false }" interface=lxc7006fb14d9f8 k8sPodName=openstack/placement-db-sync-2jvd2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=154e2ffcec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-db-sync-2jvd2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=154e2ffcec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=4d8ed8da-0150-4dde-b8d1-af9c361a357c,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=4d8ed8da-0150-4dde-b8d1-af9c361a357c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-db-sync-2jvd2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=4d8ed8da-0150-4dde-b8d1-af9c361a357c;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=4d8ed8da-0150-4dde-b8d1-af9c361a357c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=154e2ffcec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 identity=54636 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=4d8ed8da-0150-4dde-b8d1-af9c361a357c,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=4d8ed8da-0150-4dde-b8d1-af9c361a357c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-db-sync-2jvd2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=154e2ffcec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 identity=54636 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-db-sync-2jvd2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=154e2ffcec datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=832 identity=54636 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-db-sync-2jvd2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=154e2ffcec datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=832 identity=54636 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-db-sync-2jvd2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=154e2ffcec endpointID=832 k8sNamespace=openstack k8sPodName=placement-db-sync-2jvd2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=4d8ed8da-0150-4dde-b8d1-af9c361a357c k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=4d8ed8da-0150-4dde-b8d1-af9c361a357c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=154e2ffcec datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=832 identity=54636 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-db-sync-2jvd2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.249 42328224-97b0-422e-ac3c-9d7f74417072 default }" containerID=b7714190d4670472a2b889180e88e14e61af73228092531d5b21c7c9065940d6 datapathConfiguration="&{false false false false false }" interface=lxc74074bbaffc4 k8sPodName=openstack/placement-ks-service-2xxq7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7714190d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3371 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/placement-ks-service-2xxq7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7714190d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3371 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=33259013-6c74-4b64-be84-3b9b761269fb,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=33259013-6c74-4b64-be84-3b9b761269fb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/placement-ks-service-2xxq7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=33259013-6c74-4b64-be84-3b9b761269fb;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=33259013-6c74-4b64-be84-3b9b761269fb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b7714190d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3371 identity=17425 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=33259013-6c74-4b64-be84-3b9b761269fb,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=33259013-6c74-4b64-be84-3b9b761269fb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/placement-ks-service-2xxq7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7714190d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3371 identity=17425 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/placement-ks-service-2xxq7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b7714190d4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3371 identity=17425 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/placement-ks-service-2xxq7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7714190d4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3371 identity=17425 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/placement-ks-service-2xxq7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b7714190d4 endpointID=3371 k8sNamespace=openstack k8sPodName=placement-ks-service-2xxq7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=33259013-6c74-4b64-be84-3b9b761269fb k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=33259013-6c74-4b64-be84-3b9b761269fb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=b7714190d4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3371 identity=17425 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/placement-ks-service-2xxq7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 d5baa764-5b58-41cf-8da6-3b2c69235f05 default }" containerID=def4584b06bd43c9425721f89a6148691cc035c67e33a2ebf9f79331d862e596 datapathConfiguration="&{false false false false false }" interface=lxc4ae33579a168 k8sPodName=openstack/placement-ks-user-nmpfw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=def4584b06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1562 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/placement-ks-user-nmpfw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=def4584b06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1562 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=5089a0cc-a40b-4477-aecd-fd04ddc35766,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=5089a0cc-a40b-4477-aecd-fd04ddc35766,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/placement-ks-user-nmpfw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=5089a0cc-a40b-4477-aecd-fd04ddc35766;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=5089a0cc-a40b-4477-aecd-fd04ddc35766;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=def4584b06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1562 identity=45370 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=5089a0cc-a40b-4477-aecd-fd04ddc35766,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=5089a0cc-a40b-4477-aecd-fd04ddc35766,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/placement-ks-user-nmpfw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=def4584b06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1562 identity=45370 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/placement-ks-user-nmpfw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=def4584b06 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1562 identity=45370 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/placement-ks-user-nmpfw subsys=endpoint level=info msg="Successful endpoint creation" containerID=def4584b06 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1562 identity=45370 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/placement-ks-user-nmpfw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=def4584b06 endpointID=1562 k8sNamespace=openstack k8sPodName=placement-ks-user-nmpfw subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=5089a0cc-a40b-4477-aecd-fd04ddc35766 k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=5089a0cc-a40b-4477-aecd-fd04ddc35766 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=def4584b06 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1562 identity=45370 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/placement-ks-user-nmpfw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 b3784368-9594-426c-848c-4909c2ed91a7 default }" containerID=ed44ca4d35a9af2679b7d5e0edc09a6f43c192bdb65773415d3fa502dd4e1e3f datapathConfiguration="&{false false false false false }" interface=lxcbf69123f65cf k8sPodName=openstack/placement-ks-endpoints-pr5rj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed44ca4d35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1481 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/placement-ks-endpoints-pr5rj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed44ca4d35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1481 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=0c8c8ca6-2cc3-4aed-a84e-2c8301287562,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0c8c8ca6-2cc3-4aed-a84e-2c8301287562,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/placement-ks-endpoints-pr5rj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=0c8c8ca6-2cc3-4aed-a84e-2c8301287562;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=0c8c8ca6-2cc3-4aed-a84e-2c8301287562;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed44ca4d35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1481 identity=22823 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=0c8c8ca6-2cc3-4aed-a84e-2c8301287562,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0c8c8ca6-2cc3-4aed-a84e-2c8301287562,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/placement-ks-endpoints-pr5rj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ed44ca4d35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1481 identity=22823 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/placement-ks-endpoints-pr5rj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ed44ca4d35 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1481 identity=22823 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/placement-ks-endpoints-pr5rj subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed44ca4d35 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1481 identity=22823 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/placement-ks-endpoints-pr5rj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ed44ca4d35 endpointID=1481 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-pr5rj subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=0c8c8ca6-2cc3-4aed-a84e-2c8301287562 k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=0c8c8ca6-2cc3-4aed-a84e-2c8301287562 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=ed44ca4d35 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1481 identity=22823 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/placement-ks-endpoints-pr5rj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.206 6851064a-7399-4bef-8172-a3978f3a9120 default }" containerID=9c5ea33409116f8f02aabfe95320f95fe4fc625b184c7b1fce17582fbfda61d0 datapathConfiguration="&{false false false false false }" interface=lxc519803cf7096 k8sPodName=openstack/neutron-coredns-7dd4958666-6lzwb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c5ea33409 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1668 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-6lzwb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c5ea33409 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1668 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-6lzwb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9c5ea33409 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1668 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.206 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-6lzwb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=neutron-coredns;k8s:app.kubernetes.io/name=coredns;k8s:application=neutron;k8s:component=coredns;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c5ea33409 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1668 identity=27969 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-6lzwb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c5ea33409 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1668 identity=27969 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-6lzwb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9c5ea33409 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1668 identity=27969 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-6lzwb subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c5ea33409 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1668 identity=27969 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-6lzwb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.163 6a093351-6cbd-4a08-8576-284ddf006232 default }" containerID=5ac197e7a7e967ad3ba5a12388a7b01179ca926bfddb28fdbfb73a05c318a8cd datapathConfiguration="&{false false false false false }" interface=lxca1800bf5f414 k8sPodName=openstack/rabbitmq-nova-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ac197e7a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2191 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ac197e7a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2191 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5ac197e7a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2191 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.163 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-nova;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ac197e7a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2191 identity=11902 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5ac197e7a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2191 identity=11902 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5ac197e7a7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2191 identity=11902 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ac197e7a7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2191 identity=11902 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.04844644040742895 newInterval=16m53s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.165 18b64fb2-150a-4f4d-955a-a1421a75c1a3 default }" containerID=19b6450be589c093928626aa7a34bd6b877e71f6db529603259d9a566d3c5e69 datapathConfiguration="&{false false false false false }" interface=lxc9f6fe2d49cd6 k8sPodName=openstack/nova-conductor-d679f4f86-bjs6k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19b6450be5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2348 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/nova-conductor-d679f4f86-bjs6k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19b6450be5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2348 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/nova-conductor-d679f4f86-bjs6k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19b6450be5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2348 identity=44302 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/nova-conductor-d679f4f86-bjs6k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19b6450be5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2348 identity=44302 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/nova-conductor-d679f4f86-bjs6k subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=19b6450be5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2348 identity=44302 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/nova-conductor-d679f4f86-bjs6k subsys=endpoint level=info msg="Successful endpoint creation" containerID=19b6450be5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2348 identity=44302 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/nova-conductor-d679f4f86-bjs6k subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.222 b6a55928-afca-456b-a6c2-3791ff41d3ab default }" containerID=e8a9b1c2fb8f19a937309d59fc66a1fa99650456b37dce58368dc54e91365874 datapathConfiguration="&{false false false false false }" interface=lxc5625215155ed k8sPodName=openstack/nova-bootstrap-dbdbk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8a9b1c2fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-bootstrap-dbdbk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8a9b1c2fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=b73251c6-b84a-4be8-9ba3-0b520e476591,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b73251c6-b84a-4be8-9ba3-0b520e476591,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-bootstrap-dbdbk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=b73251c6-b84a-4be8-9ba3-0b520e476591;k8s:batch.kubernetes.io/job-name=nova-bootstrap;k8s:component=bootstrap;k8s:controller-uid=b73251c6-b84a-4be8-9ba3-0b520e476591;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-bootstrap;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e8a9b1c2fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 identity=5154 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=b73251c6-b84a-4be8-9ba3-0b520e476591,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b73251c6-b84a-4be8-9ba3-0b520e476591,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-bootstrap-dbdbk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e8a9b1c2fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 identity=5154 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-bootstrap-dbdbk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 351466a2-1a29-4eab-9177-01a18ae1198f default }" containerID=b647f459a84aecc2e4b65559d6ddfe1a02deebf2207515aded7dc0ae09801310 datapathConfiguration="&{false false false false false }" interface=lxc1c7990619914 k8sPodName=openstack/nova-api-osapi-7b9786d88b-dbj5f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b647f459a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=600 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/nova-api-osapi-7b9786d88b-dbj5f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b647f459a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=600 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/nova-api-osapi-7b9786d88b-dbj5f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.35 8fc395d5-b846-43e8-a23a-7451256d89c0 default }" containerID=bb9809c49ab9459cfb3c21a2d0280cc895023c66e9b7e34f20aff989d48e4e99 datapathConfiguration="&{false false false false false }" interface=lxc20d4f38d5581 k8sPodName=openstack/nova-scheduler-7ffc8949f4-cktnm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb9809c49a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=581 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/nova-scheduler-7ffc8949f4-cktnm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb9809c49a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=581 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/nova-scheduler-7ffc8949f4-cktnm subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=os-api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b647f459a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=600 identity=11457 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/nova-api-osapi-7b9786d88b-dbj5f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b647f459a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=600 identity=11457 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/nova-api-osapi-7b9786d88b-dbj5f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb9809c49a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=581 identity=41581 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/nova-scheduler-7ffc8949f4-cktnm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb9809c49a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=581 identity=41581 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/nova-scheduler-7ffc8949f4-cktnm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.215 302a826c-546e-4a72-9727-d1ef214ba655 default }" containerID=3080607683d4c1a6b8072ff15387eb18edd32909444c3431b706cb19f8847c17 datapathConfiguration="&{false false false false false }" interface=lxc54d3d9ee9751 k8sPodName=openstack/nova-api-metadata-cbf8c8777-2xxnx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3080607683 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3264 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/nova-api-metadata-cbf8c8777-2xxnx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3080607683 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3264 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/nova-api-metadata-cbf8c8777-2xxnx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.31 2e8ba049-79d5-43be-8328-367239fa92c0 default }" containerID=c8720348520a21e5365383ff263db673885fc676f00bb0b494d3e0df7eb83ce3 datapathConfiguration="&{false false false false false }" interface=lxc84a5f5d57b14 k8sPodName=openstack/nova-cell-setup-mgbbp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c872034852 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/nova-cell-setup-mgbbp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c872034852 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=442bc5ca-9d2f-48b8-99ec-97ad62dd5477,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=442bc5ca-9d2f-48b8-99ec-97ad62dd5477,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/nova-cell-setup-mgbbp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 ffd05798-c426-45e4-836b-cdabed71e7db default }" containerID=c2dc2ebdc79fd3019e70b2fdafdcc3634b08435eceb5e4f72d594ca2499965b5 datapathConfiguration="&{false false false false false }" interface=lxc8edbcfd8ce84 k8sPodName=openstack/nova-db-init-zncrb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c2dc2ebdc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=579 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/nova-db-init-zncrb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c2dc2ebdc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=579 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=d5c2a9dd-3328-44b2-9d01-1607e698694e,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=d5c2a9dd-3328-44b2-9d01-1607e698694e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/nova-db-init-zncrb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e8a9b1c2fb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=859 identity=5154 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-bootstrap-dbdbk subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8a9b1c2fb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=859 identity=5154 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-bootstrap-dbdbk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bb9809c49a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=581 identity=41581 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/nova-scheduler-7ffc8949f4-cktnm subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb9809c49a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=581 identity=41581 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/nova-scheduler-7ffc8949f4-cktnm subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=metadata;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3080607683 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3264 identity=18292 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/nova-api-metadata-cbf8c8777-2xxnx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3080607683 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3264 identity=18292 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/nova-api-metadata-cbf8c8777-2xxnx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=b647f459a8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=600 identity=11457 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/nova-api-osapi-7b9786d88b-dbj5f subsys=endpoint level=info msg="Successful endpoint creation" containerID=b647f459a8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=600 identity=11457 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/nova-api-osapi-7b9786d88b-dbj5f subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3080607683 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3264 identity=18292 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/nova-api-metadata-cbf8c8777-2xxnx subsys=endpoint level=info msg="Successful endpoint creation" containerID=3080607683 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3264 identity=18292 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/nova-api-metadata-cbf8c8777-2xxnx subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=442bc5ca-9d2f-48b8-99ec-97ad62dd5477;k8s:batch.kubernetes.io/job-name=nova-cell-setup;k8s:component=cell-setup;k8s:controller-uid=442bc5ca-9d2f-48b8-99ec-97ad62dd5477;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c872034852 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 identity=5788 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=442bc5ca-9d2f-48b8-99ec-97ad62dd5477,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=442bc5ca-9d2f-48b8-99ec-97ad62dd5477,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/nova-cell-setup-mgbbp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c872034852 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 identity=5788 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/nova-cell-setup-mgbbp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=c872034852 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=885 identity=5788 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/nova-cell-setup-mgbbp subsys=endpoint level=info msg="Successful endpoint creation" containerID=c872034852 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=885 identity=5788 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/nova-cell-setup-mgbbp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c2dc2ebdc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=579 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.172 ipv6= k8sPodName=openstack/nova-db-init-zncrb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=d5c2a9dd-3328-44b2-9d01-1607e698694e;k8s:batch.kubernetes.io/job-name=nova-db-init;k8s:component=db-init;k8s:controller-uid=d5c2a9dd-3328-44b2-9d01-1607e698694e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c2dc2ebdc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=579 identity=11151 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=d5c2a9dd-3328-44b2-9d01-1607e698694e,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=d5c2a9dd-3328-44b2-9d01-1607e698694e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/nova-db-init-zncrb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c2dc2ebdc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=579 identity=11151 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/nova-db-init-zncrb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c2dc2ebdc7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=579 identity=11151 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/nova-db-init-zncrb subsys=endpoint level=info msg="Successful endpoint creation" containerID=c2dc2ebdc7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=579 identity=11151 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/nova-db-init-zncrb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.25 47adb800-32b3-4b50-bb53-1124f6d874aa default }" containerID=0b3fe72f48fe595b91edea64287254c4a867d7d2aed8909e98ea67e1ec2f995c datapathConfiguration="&{false false false false false }" interface=lxc8179bd44fcc6 k8sPodName=openstack/nova-novncproxy-5d85cff5c5-mw7vz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b3fe72f48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2804 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/nova-novncproxy-5d85cff5c5-mw7vz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b3fe72f48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2804 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/nova-novncproxy-5d85cff5c5-mw7vz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0b3fe72f48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2804 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.25 ipv6= k8sPodName=openstack/nova-novncproxy-5d85cff5c5-mw7vz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=novnc-proxy;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b3fe72f48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2804 identity=53844 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/nova-novncproxy-5d85cff5c5-mw7vz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b3fe72f48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2804 identity=53844 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/nova-novncproxy-5d85cff5c5-mw7vz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0b3fe72f48 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2804 identity=53844 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/nova-novncproxy-5d85cff5c5-mw7vz subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b3fe72f48 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2804 identity=53844 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/nova-novncproxy-5d85cff5c5-mw7vz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c2dc2ebdc7 endpointID=579 k8sNamespace=openstack k8sPodName=nova-db-init-zncrb subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=d5c2a9dd-3328-44b2-9d01-1607e698694e k8s:batch.kubernetes.io/job-name=nova-db-init k8s:component=db-init k8s:controller-uid=d5c2a9dd-3328-44b2-9d01-1607e698694e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=c2dc2ebdc7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=579 identity=11151 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/nova-db-init-zncrb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 90f05005-d521-46ce-8806-ea79f85e5716 default }" containerID=a1e6fbde3dec6a6e4d7e3ec8ee52c1a98f953de1051fbca9e422ccedcaf2ae70 datapathConfiguration="&{false false false false false }" interface=lxcc5a3cfb44b45 k8sPodName=openstack/nova-db-sync-c4t8l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1e6fbde3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2947 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/nova-db-sync-c4t8l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1e6fbde3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2947 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=0f5a04d9-8b69-4167-90bb-d38a604623ea,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=0f5a04d9-8b69-4167-90bb-d38a604623ea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/nova-db-sync-c4t8l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a1e6fbde3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2947 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.37 ipv6= k8sPodName=openstack/nova-db-sync-c4t8l line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=0f5a04d9-8b69-4167-90bb-d38a604623ea;k8s:batch.kubernetes.io/job-name=nova-db-sync;k8s:component=db-sync;k8s:controller-uid=0f5a04d9-8b69-4167-90bb-d38a604623ea;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-sync;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1e6fbde3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2947 identity=4766 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=0f5a04d9-8b69-4167-90bb-d38a604623ea,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=0f5a04d9-8b69-4167-90bb-d38a604623ea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/nova-db-sync-c4t8l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1e6fbde3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2947 identity=4766 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/nova-db-sync-c4t8l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a1e6fbde3d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2947 identity=4766 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/nova-db-sync-c4t8l subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1e6fbde3d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2947 identity=4766 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/nova-db-sync-c4t8l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a1e6fbde3d endpointID=2947 k8sNamespace=openstack k8sPodName=nova-db-sync-c4t8l subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=0f5a04d9-8b69-4167-90bb-d38a604623ea k8s:batch.kubernetes.io/job-name=nova-db-sync k8s:component=db-sync k8s:controller-uid=0f5a04d9-8b69-4167-90bb-d38a604623ea k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-sync k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=a1e6fbde3d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2947 identity=4766 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/nova-db-sync-c4t8l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 73985c8e-b44f-4cd8-8f7d-08468dec365a default }" containerID=4bb9728bdc5d636e36fdc7131cd615c930c844c5cc6a71acdc4a55b4d104871c datapathConfiguration="&{false false false false false }" interface=lxca3773eb6129d k8sPodName=openstack/nova-rabbit-init-l4dpk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4bb9728bdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/nova-rabbit-init-l4dpk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4bb9728bdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=45bbdeca-3ac9-44d6-ad93-18a29dc4ed27,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=45bbdeca-3ac9-44d6-ad93-18a29dc4ed27,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/nova-rabbit-init-l4dpk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=45bbdeca-3ac9-44d6-ad93-18a29dc4ed27;k8s:batch.kubernetes.io/job-name=nova-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=45bbdeca-3ac9-44d6-ad93-18a29dc4ed27;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-rabbit-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4bb9728bdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identity=64353 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=45bbdeca-3ac9-44d6-ad93-18a29dc4ed27,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=45bbdeca-3ac9-44d6-ad93-18a29dc4ed27,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/nova-rabbit-init-l4dpk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4bb9728bdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identity=64353 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/nova-rabbit-init-l4dpk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4bb9728bdc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=535 identity=64353 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/nova-rabbit-init-l4dpk subsys=endpoint level=info msg="Successful endpoint creation" containerID=4bb9728bdc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=535 identity=64353 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/nova-rabbit-init-l4dpk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4bb9728bdc endpointID=535 k8sNamespace=openstack k8sPodName=nova-rabbit-init-l4dpk subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=45bbdeca-3ac9-44d6-ad93-18a29dc4ed27 k8s:batch.kubernetes.io/job-name=nova-rabbit-init k8s:component=rabbit-init k8s:controller-uid=45bbdeca-3ac9-44d6-ad93-18a29dc4ed27 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-rabbit-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=4bb9728bdc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=535 identity=64353 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/nova-rabbit-init-l4dpk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 5a279309-b76b-4fce-b6f2-adc784bb4da1 default }" containerID=edfd7befa72aad3db3baaf6e84397a212085f21bd69272c444e06659be2c0c00 datapathConfiguration="&{false false false false false }" interface=lxc30542784dab4 k8sPodName=openstack/nova-ks-service-kx42s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=edfd7befa7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2077 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/nova-ks-service-kx42s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=edfd7befa7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2077 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=9e737e7c-58f6-4a0e-9668-60fb49e7da10,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=9e737e7c-58f6-4a0e-9668-60fb49e7da10,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/nova-ks-service-kx42s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=9e737e7c-58f6-4a0e-9668-60fb49e7da10;k8s:batch.kubernetes.io/job-name=nova-ks-service;k8s:component=ks-service;k8s:controller-uid=9e737e7c-58f6-4a0e-9668-60fb49e7da10;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-service;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=edfd7befa7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2077 identity=43324 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=9e737e7c-58f6-4a0e-9668-60fb49e7da10,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=9e737e7c-58f6-4a0e-9668-60fb49e7da10,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/nova-ks-service-kx42s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=edfd7befa7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2077 identity=43324 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/nova-ks-service-kx42s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=edfd7befa7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2077 identity=43324 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/nova-ks-service-kx42s subsys=endpoint level=info msg="Successful endpoint creation" containerID=edfd7befa7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2077 identity=43324 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/nova-ks-service-kx42s subsys=daemon level=info msg="Delete endpoint request" containerID=edfd7befa7 endpointID=2077 k8sNamespace=openstack k8sPodName=nova-ks-service-kx42s subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=9e737e7c-58f6-4a0e-9668-60fb49e7da10 k8s:batch.kubernetes.io/job-name=nova-ks-service k8s:component=ks-service k8s:controller-uid=9e737e7c-58f6-4a0e-9668-60fb49e7da10 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-service k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=edfd7befa7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2077 identity=43324 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/nova-ks-service-kx42s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 ff24344c-a3c1-4f6b-9b48-0aad4fd4eab9 default }" containerID=0025c797f96b3131fce433f59766311c8d2db4405065fe95aa09496f1b6e7067 datapathConfiguration="&{false false false false false }" interface=lxcfc06a7df6684 k8sPodName=openstack/nova-ks-endpoints-zr2b6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0025c797f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/nova-ks-endpoints-zr2b6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0025c797f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=9638c615-0382-4e4c-86aa-95d154426e9a,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=9638c615-0382-4e4c-86aa-95d154426e9a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/nova-ks-endpoints-zr2b6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=9638c615-0382-4e4c-86aa-95d154426e9a;k8s:batch.kubernetes.io/job-name=nova-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=9638c615-0382-4e4c-86aa-95d154426e9a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-endpoints;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0025c797f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 identity=61534 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=9638c615-0382-4e4c-86aa-95d154426e9a,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=9638c615-0382-4e4c-86aa-95d154426e9a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/nova-ks-endpoints-zr2b6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0025c797f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 identity=61534 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/nova-ks-endpoints-zr2b6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0025c797f9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=803 identity=61534 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/nova-ks-endpoints-zr2b6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0025c797f9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=803 identity=61534 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/nova-ks-endpoints-zr2b6 subsys=daemon level=info msg="Delete endpoint request" containerID=0025c797f9 endpointID=803 k8sNamespace=openstack k8sPodName=nova-ks-endpoints-zr2b6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=9638c615-0382-4e4c-86aa-95d154426e9a k8s:batch.kubernetes.io/job-name=nova-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=9638c615-0382-4e4c-86aa-95d154426e9a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-endpoints k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=0025c797f9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=803 identity=61534 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/nova-ks-endpoints-zr2b6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 56f531db-778a-4589-87f4-c4ad8b450446 default }" containerID=f86a411dc4ec7e463e0fe17dab26bf112f14b69b6b9ea6559f853e41aae50692 datapathConfiguration="&{false false false false false }" interface=lxc85768d0a4521 k8sPodName=openstack/nova-ks-user-t7584 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f86a411dc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/nova-ks-user-t7584 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f86a411dc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=63fc3f0a-68c2-4312-9cc6-43b6b85cbfee,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=63fc3f0a-68c2-4312-9cc6-43b6b85cbfee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/nova-ks-user-t7584 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=63fc3f0a-68c2-4312-9cc6-43b6b85cbfee;k8s:batch.kubernetes.io/job-name=nova-ks-user;k8s:component=ks-user;k8s:controller-uid=63fc3f0a-68c2-4312-9cc6-43b6b85cbfee;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-user;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f86a411dc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identity=4086 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=63fc3f0a-68c2-4312-9cc6-43b6b85cbfee,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=63fc3f0a-68c2-4312-9cc6-43b6b85cbfee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/nova-ks-user-t7584 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f86a411dc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identity=4086 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/nova-ks-user-t7584 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f86a411dc4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=212 identity=4086 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/nova-ks-user-t7584 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f86a411dc4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=212 identity=4086 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/nova-ks-user-t7584 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f86a411dc4 endpointID=212 k8sNamespace=openstack k8sPodName=nova-ks-user-t7584 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=63fc3f0a-68c2-4312-9cc6-43b6b85cbfee k8s:batch.kubernetes.io/job-name=nova-ks-user k8s:component=ks-user k8s:controller-uid=63fc3f0a-68c2-4312-9cc6-43b6b85cbfee k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-user k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=f86a411dc4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=212 identity=4086 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/nova-ks-user-t7584 subsys=endpoint level=info msg="Delete endpoint request" containerID=e8a9b1c2fb endpointID=859 k8sNamespace=openstack k8sPodName=nova-bootstrap-dbdbk subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=b73251c6-b84a-4be8-9ba3-0b520e476591 k8s:batch.kubernetes.io/job-name=nova-bootstrap k8s:component=bootstrap k8s:controller-uid=b73251c6-b84a-4be8-9ba3-0b520e476591 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-bootstrap k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=e8a9b1c2fb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=859 identity=5154 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-bootstrap-dbdbk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 be6fb47f-3d17-448b-86a8-c179e67e526d default }" containerID=030805929fe8db66fd1dd5604d4bf8b85351ff99de0d313cb7d9aa36caf1f770 datapathConfiguration="&{false false false false false }" interface=lxc88967ce3c4bd k8sPodName=openstack/rabbitmq-neutron-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=030805929f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=030805929f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-neutron;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=030805929f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=030805929f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 identity=5790 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=030805929f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 identity=5790 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=030805929f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=416 identity=5790 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=030805929f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=416 identity=5790 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.28 f70a4978-16fb-43cd-92cf-a3a2d1c4aeeb default }" containerID=4908dce2e4b688b2ebbf7ee30979ac55772d7874cce55f6c38233a232a101ea3 datapathConfiguration="&{false false false false false }" interface=lxc9012fcd43d45 k8sPodName=openstack/neutron-server-6547b8586b-48p82 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4908dce2e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=707 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/neutron-server-6547b8586b-48p82 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4908dce2e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=707 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/neutron-server-6547b8586b-48p82 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4908dce2e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=707 identity=25041 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/neutron-server-6547b8586b-48p82 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4908dce2e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=707 identity=25041 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/neutron-server-6547b8586b-48p82 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.29 b241d9a6-b36a-43da-838d-b47b469811e1 default }" containerID=43fc42bafb04fa9c791107f7b58cc2aaa6e0d940b0846884488871f283b0566e datapathConfiguration="&{false false false false false }" interface=lxcc5c157975bc8 k8sPodName=openstack/neutron-rpc-server-67ffd5586b-8k9hh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=43fc42bafb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/neutron-rpc-server-67ffd5586b-8k9hh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43fc42bafb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/neutron-rpc-server-67ffd5586b-8k9hh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=rpc_server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=43fc42bafb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 identity=51201 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/neutron-rpc-server-67ffd5586b-8k9hh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=43fc42bafb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 identity=51201 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/neutron-rpc-server-67ffd5586b-8k9hh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 db570d51-5051-4e99-8941-7a6a92333ce4 default }" containerID=01b44fc88d81e522b5e0b0084db20a5051cb29104182899d773884dec1c6f8d8 datapathConfiguration="&{false false false false false }" interface=lxc9600056044cd k8sPodName=openstack/neutron-db-init-xrz49 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01b44fc88d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3538 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/neutron-db-init-xrz49 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01b44fc88d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3538 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=585a1c86-b9f0-40c2-b657-48558f12e30a,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=585a1c86-b9f0-40c2-b657-48558f12e30a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/neutron-db-init-xrz49 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=585a1c86-b9f0-40c2-b657-48558f12e30a;k8s:batch.kubernetes.io/job-name=neutron-db-init;k8s:component=db-init;k8s:controller-uid=585a1c86-b9f0-40c2-b657-48558f12e30a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=01b44fc88d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3538 identity=43056 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=585a1c86-b9f0-40c2-b657-48558f12e30a,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=585a1c86-b9f0-40c2-b657-48558f12e30a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/neutron-db-init-xrz49 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=01b44fc88d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3538 identity=43056 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/neutron-db-init-xrz49 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4908dce2e4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=707 identity=25041 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/neutron-server-6547b8586b-48p82 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4908dce2e4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=707 identity=25041 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/neutron-server-6547b8586b-48p82 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=43fc42bafb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=893 identity=51201 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/neutron-rpc-server-67ffd5586b-8k9hh subsys=endpoint level=info msg="Successful endpoint creation" containerID=43fc42bafb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=893 identity=51201 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/neutron-rpc-server-67ffd5586b-8k9hh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=01b44fc88d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3538 identity=43056 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/neutron-db-init-xrz49 subsys=endpoint level=info msg="Successful endpoint creation" containerID=01b44fc88d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3538 identity=43056 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/neutron-db-init-xrz49 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=01b44fc88d endpointID=3538 k8sNamespace=openstack k8sPodName=neutron-db-init-xrz49 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=585a1c86-b9f0-40c2-b657-48558f12e30a k8s:batch.kubernetes.io/job-name=neutron-db-init k8s:component=db-init k8s:controller-uid=585a1c86-b9f0-40c2-b657-48558f12e30a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=01b44fc88d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3538 identity=43056 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/neutron-db-init-xrz49 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 132555d2-0b70-4172-9cb3-8b7ce64ed07a default }" containerID=60b92bd60a0aa50d1614efdf0b78d489d546b8f56c526286273c35cb8e91d814 datapathConfiguration="&{false false false false false }" interface=lxcd5d715edbbed k8sPodName=openstack/neutron-db-sync-fmwc9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60b92bd60a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3112 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/neutron-db-sync-fmwc9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60b92bd60a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3112 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=7eb233c4-c4c8-4420-98e3-04fd76c42d65,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=7eb233c4-c4c8-4420-98e3-04fd76c42d65,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/neutron-db-sync-fmwc9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=7eb233c4-c4c8-4420-98e3-04fd76c42d65;k8s:batch.kubernetes.io/job-name=neutron-db-sync;k8s:component=db-sync;k8s:controller-uid=7eb233c4-c4c8-4420-98e3-04fd76c42d65;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-sync;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60b92bd60a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3112 identity=24980 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=7eb233c4-c4c8-4420-98e3-04fd76c42d65,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=7eb233c4-c4c8-4420-98e3-04fd76c42d65,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/neutron-db-sync-fmwc9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=60b92bd60a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3112 identity=24980 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/neutron-db-sync-fmwc9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=60b92bd60a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3112 identity=24980 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/neutron-db-sync-fmwc9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=60b92bd60a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3112 identity=24980 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/neutron-db-sync-fmwc9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=60b92bd60a endpointID=3112 k8sNamespace=openstack k8sPodName=neutron-db-sync-fmwc9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=7eb233c4-c4c8-4420-98e3-04fd76c42d65 k8s:batch.kubernetes.io/job-name=neutron-db-sync k8s:component=db-sync k8s:controller-uid=7eb233c4-c4c8-4420-98e3-04fd76c42d65 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-sync k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=60b92bd60a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3112 identity=24980 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/neutron-db-sync-fmwc9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 10084a6f-8d5f-4d0b-983b-ac8bc261dd51 default }" containerID=cbdcd61ca280820abbafafd98cd884c9a9ba22ec176a8c7dac435fbc73b5728e datapathConfiguration="&{false false false false false }" interface=lxc8ecb814f7455 k8sPodName=openstack/neutron-rabbit-init-qnpfn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cbdcd61ca2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1029 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/neutron-rabbit-init-qnpfn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cbdcd61ca2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1029 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=2cd806d6-8eb2-44d6-8aab-b066e3c0e634,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2cd806d6-8eb2-44d6-8aab-b066e3c0e634,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/neutron-rabbit-init-qnpfn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=2cd806d6-8eb2-44d6-8aab-b066e3c0e634;k8s:batch.kubernetes.io/job-name=neutron-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=2cd806d6-8eb2-44d6-8aab-b066e3c0e634;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-rabbit-init;k8s:release_group=neutron;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=cbdcd61ca2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1029 identity=35424 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=2cd806d6-8eb2-44d6-8aab-b066e3c0e634,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2cd806d6-8eb2-44d6-8aab-b066e3c0e634,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/neutron-rabbit-init-qnpfn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cbdcd61ca2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1029 identity=35424 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/neutron-rabbit-init-qnpfn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cbdcd61ca2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1029 identity=35424 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/neutron-rabbit-init-qnpfn subsys=endpoint level=info msg="Successful endpoint creation" containerID=cbdcd61ca2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1029 identity=35424 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/neutron-rabbit-init-qnpfn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cbdcd61ca2 endpointID=1029 k8sNamespace=openstack k8sPodName=neutron-rabbit-init-qnpfn subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=2cd806d6-8eb2-44d6-8aab-b066e3c0e634 k8s:batch.kubernetes.io/job-name=neutron-rabbit-init k8s:component=rabbit-init k8s:controller-uid=2cd806d6-8eb2-44d6-8aab-b066e3c0e634 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-rabbit-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=cbdcd61ca2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1029 identity=35424 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/neutron-rabbit-init-qnpfn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 7b22c69c-07f1-4bc6-a019-9a4db3123cda default }" containerID=ba9ebc95e7e2a16dc4b135cb0fd9da0838ed234f69ea05f1a42b9a183898c8ec datapathConfiguration="&{false false false false false }" interface=lxcf331a23c59fe k8sPodName=openstack/neutron-ks-service-9dp7p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba9ebc95e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3786 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/neutron-ks-service-9dp7p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba9ebc95e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3786 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=2a798301-bbeb-4246-9a58-a826e1949807,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=2a798301-bbeb-4246-9a58-a826e1949807,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/neutron-ks-service-9dp7p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=2a798301-bbeb-4246-9a58-a826e1949807;k8s:batch.kubernetes.io/job-name=neutron-ks-service;k8s:component=ks-service;k8s:controller-uid=2a798301-bbeb-4246-9a58-a826e1949807;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-service;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba9ebc95e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3786 identity=2449 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=2a798301-bbeb-4246-9a58-a826e1949807,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=2a798301-bbeb-4246-9a58-a826e1949807,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/neutron-ks-service-9dp7p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba9ebc95e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3786 identity=2449 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/neutron-ks-service-9dp7p subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ba9ebc95e7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3786 identity=2449 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/neutron-ks-service-9dp7p subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba9ebc95e7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3786 identity=2449 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/neutron-ks-service-9dp7p subsys=daemon level=info msg="Delete endpoint request" containerID=ba9ebc95e7 endpointID=3786 k8sNamespace=openstack k8sPodName=neutron-ks-service-9dp7p subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=2a798301-bbeb-4246-9a58-a826e1949807 k8s:batch.kubernetes.io/job-name=neutron-ks-service k8s:component=ks-service k8s:controller-uid=2a798301-bbeb-4246-9a58-a826e1949807 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-service k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=ba9ebc95e7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3786 identity=2449 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/neutron-ks-service-9dp7p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 19aef4dc-b610-43f5-9506-215111cf4244 default }" containerID=ed8e84c923ff742ff40783d4377e9e4cab02991adaf8e34eaf49f8aab8131b9e datapathConfiguration="&{false false false false false }" interface=lxcb732ba2090c1 k8sPodName=openstack/neutron-ks-endpoints-5zb2w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed8e84c923 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/neutron-ks-endpoints-5zb2w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed8e84c923 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=bf495af0-3613-47b2-9898-9d19516e59f9,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=bf495af0-3613-47b2-9898-9d19516e59f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/neutron-ks-endpoints-5zb2w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=bf495af0-3613-47b2-9898-9d19516e59f9;k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=bf495af0-3613-47b2-9898-9d19516e59f9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-endpoints;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed8e84c923 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 identity=9482 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=bf495af0-3613-47b2-9898-9d19516e59f9,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=bf495af0-3613-47b2-9898-9d19516e59f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/neutron-ks-endpoints-5zb2w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed8e84c923 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 identity=9482 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/neutron-ks-endpoints-5zb2w subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ed8e84c923 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=167 identity=9482 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/neutron-ks-endpoints-5zb2w subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed8e84c923 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=167 identity=9482 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/neutron-ks-endpoints-5zb2w subsys=daemon level=info msg="Delete endpoint request" containerID=ed8e84c923 endpointID=167 k8sNamespace=openstack k8sPodName=neutron-ks-endpoints-5zb2w subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=bf495af0-3613-47b2-9898-9d19516e59f9 k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=bf495af0-3613-47b2-9898-9d19516e59f9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-endpoints k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=ed8e84c923 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=167 identity=9482 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/neutron-ks-endpoints-5zb2w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 0d48933e-f539-4dbe-b894-e8d9f6486796 default }" containerID=70bac808efa6f5406d5a88527a2d1784f9a24824cb6d5420210e29aecd44d13c datapathConfiguration="&{false false false false false }" interface=lxce7ba63c54792 k8sPodName=openstack/neutron-ks-user-6vqf9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=70bac808ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/neutron-ks-user-6vqf9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=70bac808ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=ba261bb6-485c-4db3-8c53-c2c269a3ed43,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=ba261bb6-485c-4db3-8c53-c2c269a3ed43,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/neutron-ks-user-6vqf9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=ba261bb6-485c-4db3-8c53-c2c269a3ed43;k8s:batch.kubernetes.io/job-name=neutron-ks-user;k8s:component=ks-user;k8s:controller-uid=ba261bb6-485c-4db3-8c53-c2c269a3ed43;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-user;k8s:release_group=neutron;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=70bac808ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.175 ipv6= k8sPodName=openstack/neutron-ks-user-6vqf9 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=70bac808ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 identity=10279 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=ba261bb6-485c-4db3-8c53-c2c269a3ed43,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=ba261bb6-485c-4db3-8c53-c2c269a3ed43,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/neutron-ks-user-6vqf9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=70bac808ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 identity=10279 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/neutron-ks-user-6vqf9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=70bac808ef datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=621 identity=10279 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/neutron-ks-user-6vqf9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=70bac808ef datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=621 identity=10279 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/neutron-ks-user-6vqf9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=70bac808ef endpointID=621 k8sNamespace=openstack k8sPodName=neutron-ks-user-6vqf9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=ba261bb6-485c-4db3-8c53-c2c269a3ed43 k8s:batch.kubernetes.io/job-name=neutron-ks-user k8s:component=ks-user k8s:controller-uid=ba261bb6-485c-4db3-8c53-c2c269a3ed43 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-user k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=70bac808ef datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=621 identity=10279 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/neutron-ks-user-6vqf9 subsys=endpoint level=info msg="Delete endpoint request" containerID=c872034852 endpointID=885 k8sNamespace=openstack k8sPodName=nova-cell-setup-mgbbp subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=442bc5ca-9d2f-48b8-99ec-97ad62dd5477 k8s:batch.kubernetes.io/job-name=nova-cell-setup k8s:component=cell-setup k8s:controller-uid=442bc5ca-9d2f-48b8-99ec-97ad62dd5477 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-cell-setup k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=c872034852 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=885 identity=5788 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/nova-cell-setup-mgbbp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 51be004b-1148-4472-9c32-b90d3aeab0fa default }" containerID=f89f687d0f30c605836e7b43041f8b30236157d8247c5f260c8630b1c693c585 datapathConfiguration="&{false false false false false }" interface=lxc0a0465619d19 k8sPodName=openstack/tempest-ks-user-kns42 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f89f687d0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1162 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/tempest-ks-user-kns42 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f89f687d0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1162 identityLabels="k8s:application=tempest,k8s:batch.kubernetes.io/controller-uid=59cc04e4-8a7a-45cd-b207-145307362642,k8s:batch.kubernetes.io/job-name=tempest-ks-user,k8s:component=ks-user,k8s:controller-uid=59cc04e4-8a7a-45cd-b207-145307362642,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=tempest-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=tempest-ks-user,k8s:release_group=tempest" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/tempest-ks-user-kns42 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=tempest;k8s:batch.kubernetes.io/controller-uid=59cc04e4-8a7a-45cd-b207-145307362642;k8s:batch.kubernetes.io/job-name=tempest-ks-user;k8s:component=ks-user;k8s:controller-uid=59cc04e4-8a7a-45cd-b207-145307362642;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=tempest-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=tempest-ks-user;k8s:release_group=tempest;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f89f687d0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1162 identity=11912 identityLabels="k8s:application=tempest,k8s:batch.kubernetes.io/controller-uid=59cc04e4-8a7a-45cd-b207-145307362642,k8s:batch.kubernetes.io/job-name=tempest-ks-user,k8s:component=ks-user,k8s:controller-uid=59cc04e4-8a7a-45cd-b207-145307362642,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=tempest-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=tempest-ks-user,k8s:release_group=tempest" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/tempest-ks-user-kns42 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f89f687d0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1162 identity=11912 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/tempest-ks-user-kns42 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f89f687d0f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1162 identity=11912 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/tempest-ks-user-kns42 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f89f687d0f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1162 identity=11912 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/tempest-ks-user-kns42 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f89f687d0f endpointID=1162 k8sNamespace=openstack k8sPodName=tempest-ks-user-kns42 subsys=daemon level=info msg="Releasing key" key="[k8s:application=tempest k8s:batch.kubernetes.io/controller-uid=59cc04e4-8a7a-45cd-b207-145307362642 k8s:batch.kubernetes.io/job-name=tempest-ks-user k8s:component=ks-user k8s:controller-uid=59cc04e4-8a7a-45cd-b207-145307362642 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=tempest-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=tempest-ks-user k8s:release_group=tempest]" subsys=allocator level=info msg="Removed endpoint" containerID=f89f687d0f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1162 identity=11912 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/tempest-ks-user-kns42 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.125 ea7570bc-f3ae-494f-931d-a7a2a4b0cbf8 default }" containerID=4745f18a2369a0e821d9af9c9d6d32c36e49fee44bfe86a2d3e425411d0c5a4b datapathConfiguration="&{false false false false false }" interface=lxc3cd0d9f73807 k8sPodName=openstack/tempest-run-tests-l2q55 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4745f18a23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/tempest-run-tests-l2q55 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4745f18a23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 identityLabels="k8s:application=tempest,k8s:batch.kubernetes.io/controller-uid=fb03b643-67f4-4d3a-919f-7359ba623fa3,k8s:batch.kubernetes.io/job-name=tempest-run-tests,k8s:component=run-tests,k8s:controller-uid=fb03b643-67f4-4d3a-919f-7359ba623fa3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=tempest-run-tests,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=tempest-run-tests,k8s:release_group=tempest" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/tempest-run-tests-l2q55 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=tempest;k8s:batch.kubernetes.io/controller-uid=fb03b643-67f4-4d3a-919f-7359ba623fa3;k8s:batch.kubernetes.io/job-name=tempest-run-tests;k8s:component=run-tests;k8s:controller-uid=fb03b643-67f4-4d3a-919f-7359ba623fa3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=tempest-run-tests;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=tempest-run-tests;k8s:release_group=tempest;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4745f18a23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 identity=6965 identityLabels="k8s:application=tempest,k8s:batch.kubernetes.io/controller-uid=fb03b643-67f4-4d3a-919f-7359ba623fa3,k8s:batch.kubernetes.io/job-name=tempest-run-tests,k8s:component=run-tests,k8s:controller-uid=fb03b643-67f4-4d3a-919f-7359ba623fa3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=tempest-run-tests,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=tempest-run-tests,k8s:release_group=tempest" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/tempest-run-tests-l2q55 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4745f18a23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 identity=6965 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/tempest-run-tests-l2q55 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4745f18a23 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=285 identity=6965 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/tempest-run-tests-l2q55 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4745f18a23 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=285 identity=6965 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/tempest-run-tests-l2q55 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4745f18a23 endpointID=285 k8sNamespace=openstack k8sPodName=tempest-run-tests-l2q55 subsys=daemon level=info msg="Releasing key" key="[k8s:application=tempest k8s:batch.kubernetes.io/controller-uid=fb03b643-67f4-4d3a-919f-7359ba623fa3 k8s:batch.kubernetes.io/job-name=tempest-run-tests k8s:component=run-tests k8s:controller-uid=fb03b643-67f4-4d3a-919f-7359ba623fa3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=tempest-run-tests k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=tempest-run-tests k8s:release_group=tempest]" subsys=allocator level=info msg="Removed endpoint" containerID=4745f18a23 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=285 identity=6965 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/tempest-run-tests-l2q55 subsys=endpoint